RHSA-2026:30267MediumCVSS 7.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
June 26, 2026
Last Modified
August 8, 2026

🔗 CVE IDs covered (3)

CVE-2026-55693 →CVE-2026-57452 →CVE-2026-57455 →

📋 Description

CVE-2026-55693 — vim: Vim: Out-of-bounds Write in Spell File Word Count CVE-2026-57452 — vim: Vim: Out-of-bounds Read with libsodium-encrypted Files CVE-2026-57455 — vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

🎯 Affected products5

  • Red Hat Hardened Images
  • vim-main@aarch64 as a component of Red Hat Hardened Images
  • vim-main@noarch as a component of Red Hat Hardened Images
  • vim-main@src as a component of Red Hat Hardened Images
  • vim-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Ensure the spell checker is turned off by running :set nospell within Vim. Do not open untrusted or suspicious files—particularly those encrypted with libsodium methods (VimCrypt~04! or VimCrypt~05!)—within the Vim editor. This prevents the execution of the vulnerable decryption routine Workaround: To mitigate this issue disable spell checking or avoid using SOFO-based spell files. This can be achieved globally by adding set nospell to your ~/.vimrc configuration file. Ensure your systems utilize standard UTF-8 encoding. This flaw is strictly confined to legacy 8-bit encodings and cannot be triggered under default Red Hat configurations.

🔗 References (7)