Описание
ELSA-2026-28553: vim security update (MODERATE)
[8.0.1763-24.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]
[2:8.0.1763-24]
- CVE-2026-41411 vim: Command injection via backticks in tag files
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
vim-X11
8.0.1763-24.0.1.el8_10
vim-common
8.0.1763-24.0.1.el8_10
vim-enhanced
8.0.1763-24.0.1.el8_10
vim-filesystem
8.0.1763-24.0.1.el8_10
vim-minimal
8.0.1763-24.0.1.el8_10
Oracle Linux x86_64
vim-X11
8.0.1763-24.0.1.el8_10
vim-common
8.0.1763-24.0.1.el8_10
vim-enhanced
8.0.1763-24.0.1.el8_10
vim-filesystem
8.0.1763-24.0.1.el8_10
vim-minimal
8.0.1763-24.0.1.el8_10
Связанные CVE
Связанные уязвимости
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., `command`), Vim executes the embedded command via the system shell with the full privileges of the running user.
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., `command`), Vim executes the embedded command via the system shell with the full privileges of the running user.
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., `command`), Vim executes the embedded command via the system shell with the full privileges of the running user.
Vim: Command injection via backtick expansion in tag filenames
Vim is an open source, command line text editor. Prior to 9.2.0357, A ...