ELSA-2026-22711

Опубликовано: 21 июл. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-22711: vim security update (MODERATE)

[9.1.083-9.0.1.el10_2.7]

Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.7]

RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete

[2:9.1.083-9.6]

RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:9.1.083-9.5]

RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin

[2:9.1.083-9.4]

RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files

[2:9.1.083-9.3]

RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

[2:9.1.083-9.2]

Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass

[2:9.1.083-9.1]

RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

vim-X11

9.1.083-9.0.1.el10_2.7

vim-common

9.1.083-9.0.1.el10_2.7

vim-data

9.1.083-9.0.1.el10_2.7

vim-enhanced

9.1.083-9.0.1.el10_2.7

vim-filesystem

9.1.083-9.0.1.el10_2.7

vim-minimal

9.1.083-9.0.1.el10_2.7

xxd

9.1.083-9.0.1.el10_2.7

Oracle Linux x86_64

vim-X11

9.1.083-9.0.1.el10_2.7

vim-common

9.1.083-9.0.1.el10_2.7

vim-data

9.1.083-9.0.1.el10_2.7

vim-enhanced

9.1.083-9.0.1.el10_2.7

vim-filesystem

9.1.083-9.0.1.el10_2.7

vim-minimal

9.1.083-9.0.1.el10_2.7

xxd

9.1.083-9.0.1.el10_2.7

Связанные CVE

CVE-2026-35177

Ссылки на источники

Связанные уязвимости

CVE-2026-35177

CVSS3: 4.1

ubuntu

4 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.