Debian DSA-6600-2 fixes a regression in the vim update
Debian published DSA-6600-2, a regression update for vim. See how to check one server by hand and how Stackurity confirms the package is updated.
TL;DR: Debian published DSA-6600-2, a regression update for the vim package. It follows the earlier security update, so read the Debian security tracker for what changed and which version to install for your release.
What happened
The Debian Security Advisories feed published DSA-6600-2 on November 8, 2026, a regression update for vim. A regression update corrects a problem introduced by an earlier fix, here the one in our note on the first vim advisory. The Debian security tracker page for the advisory gives the fixed package version for each release. We quote no severity because the announcement gives none.
Am I affected?
Any Debian server with the vim package installed is in scope, including those that already took the first update. To check one machine by hand, run dpkg -l vim for the installed version, then apt update followed by apt install --only-upgrade vim. Debian backports fixes, so the version may look old after the update, which is why you compare against the tracker rather than the upstream release. This matters most on shared servers where many people edit files as root.
How to check with Stackurity
Stackurity's read-only agent reads installed packages on Debian servers and matches them against advisories every hour, using Debian's own version rules so that backports are not reported as false alarms. It shows the upgrade to move to, and check again records whether the issue is really gone. See how fixes are tracked in the docs. Stackurity Cloud has a 14-day free trial without a card: start a free trial.
