<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE2-SA-2025-0174</id>
    <title>An update for vim is now available for HCE 2.0</title>
    <severity>Moderate</severity>
    <release>HCE 2.0</release>
    <issued date="2025-05-20 06:43:09"/>
    <updated date="2025-05-20 06:43:09"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2025-29768" id="CVE-2025-29768" title="CVE-2025-29768 Base Score: 4.4 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" type="cve"/>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2025-1215" id="CVE-2025-1215" title="CVE-2025-1215 Base Score: 2.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" type="cve"/>
    </references>
    <description>Security Fix(es):

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press _x27;x_x27; on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198. (CVE-2025-29768)

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component. (CVE-2025-1215)
</description>
    <pkglist>
      <collection short="HCE 2.0" package="vim">
        <name>HCE 2.0</name>
        <package arch="aarch64" name="vim-common" version="9.0" release="1.r32.hce2">
          <filename>vim-common-9.0-1.r32.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="vim-enhanced" version="9.0" release="1.r32.hce2">
          <filename>vim-enhanced-9.0-1.r32.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="vim-filesystem" version="9.0" release="1.r32.hce2">
          <filename>vim-filesystem-9.0-1.r32.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="vim-minimal" version="9.0" release="1.r32.hce2">
          <filename>vim-minimal-9.0-1.r32.hce2.aarch64.rpm</filename>
        </package>
        <package arch="x86_64" name="vim-common" version="9.0" release="1.r32.hce2">
          <filename>vim-common-9.0-1.r32.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="vim-enhanced" version="9.0" release="1.r32.hce2">
          <filename>vim-enhanced-9.0-1.r32.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="vim-minimal" version="9.0" release="1.r32.hce2">
          <filename>vim-minimal-9.0-1.r32.hce2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
