Описание
ELSA-2026-22717: vim security update (MODERATE)
[8.2.2637-26.0.1.el9_8.5]
- Remove upstream references [Orabug: 31197557]
[2:8.2.2637-26.5]
- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
[2:8.2.2637-26.4]
- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass
[2:8.2.2637-26.3]
- Related: RHEL-159630 rebuild to build with exception target
[2:8.2.2637-26.2]
- remove -O0 from flags
[2:8.2.2637-26.1]
- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
vim-X11
8.2.2637-26.0.1.el9_8.5
vim-common
8.2.2637-26.0.1.el9_8.5
vim-enhanced
8.2.2637-26.0.1.el9_8.5
vim-filesystem
8.2.2637-26.0.1.el9_8.5
vim-minimal
8.2.2637-26.0.1.el9_8.5
Oracle Linux x86_64
vim-X11
8.2.2637-26.0.1.el9_8.5
vim-common
8.2.2637-26.0.1.el9_8.5
vim-enhanced
8.2.2637-26.0.1.el9_8.5
vim-filesystem
8.2.2637-26.0.1.el9_8.5
vim-minimal
8.2.2637-26.0.1.el9_8.5
Связанные CVE
Связанные уязвимости
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.
Vim is an open source, command line text editor. Prior to 9.2.0280, a ...