USN-8679-2：Vim 漏洞与 Ubuntu 26.04 LTS 修复版本

公告概要

Ubuntu 发布安全公告 USN-8679-2，修复 Vim 软件包中的漏洞，CVE 编号为 CVE-2026-73073。公告列出的修复软件包面向 Ubuntu 26.04 LTS（resolute），版本均为 2:9.1.2141-1ubuntu4.9，以标准更新（standard update）方式提供。

公告日期：2026-09-08 17:12:17+00；官方地址：https://ubuntu.com/security/notices/USN-8679-2。

漏洞信息

• 公告标识：USN-8679-2
• 项目：ubuntu；类型：security
• CVE 编号：CVE-2026-73073
• 公告中的 version 字段为空

公告提供的字段中未包含漏洞性质、严重等级或攻击面说明。

修复软件包（Ubuntu 26.04 LTS resolute）

来源结构化字段

以下为公告结构化字段原文，按原样保留。

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8679-2",
"version": null,
"announcementDate": "2026-09-08 17:12:17+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8679-2",
"cves": [
"CVE-2026-73073"
],
"fixedPackages": [
{
"release": "26.04 LTS resolute",
"package": "vim",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-common",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-doc",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-gtk3",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-gui-common",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-motif",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-nox",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-runtime",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "vim-tiny",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
},
{
"release": "26.04 LTS resolute",
"package": "xxd",
"version": "2:9.1.2141-1ubuntu4.9",
"access": "standard update"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}