vim -- potential data loss with zip.vim and specially crafted zip files

2025-03-12 · CVE-2025-29768 · VuXML entry

Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf

Affected versions

vim < 9.1.1198

By system

0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

System	Port	Version	State	Fixed
DragonFly	editors/vim	9.1.1199	fixed
OpenBSD	editors/vim	9.2.1178	out of range, by version
NetBSD	editors/vim	9.2.1116	not listed
MidnightBSD	editors/vim	9.2.1178	out of range, by version
FreeBSD	editors/vim	9.2.1178	fixed	2026-10-13 (580 days after)

System

Port

Version

State

Fixed

DragonFly

editors/vim

9.1.1199

fixed

OpenBSD

editors/vim

9.2.1178