Описание
ELSA-2026-38509: vim security update (IMPORTANT)
[9.1.083-9.0.1.el10_2.7]
- Remove upstream references [Orabug: 31197557]
[2:9.1.083-9.7]
- RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
- RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete
[2:9.1.083-9.6]
- RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
[2:9.1.083-9.5]
- RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin
[2:9.1.083-9.4]
- RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files
[2:9.1.083-9.3]
- RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
[2:9.1.083-9.2]
- Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass
[2:9.1.083-9.1]
- RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
vim-X11
9.1.083-9.0.1.el10_2.7
vim-common
9.1.083-9.0.1.el10_2.7
vim-data
9.1.083-9.0.1.el10_2.7
vim-enhanced
9.1.083-9.0.1.el10_2.7
vim-filesystem
9.1.083-9.0.1.el10_2.7
vim-minimal
9.1.083-9.0.1.el10_2.7
xxd
9.1.083-9.0.1.el10_2.7
Oracle Linux x86_64
vim-X11
9.1.083-9.0.1.el10_2.7
vim-common
9.1.083-9.0.1.el10_2.7
vim-data
9.1.083-9.0.1.el10_2.7
vim-enhanced
9.1.083-9.0.1.el10_2.7
vim-filesystem
9.1.083-9.0.1.el10_2.7
vim-minimal
9.1.083-9.0.1.el10_2.7
xxd
9.1.083-9.0.1.el10_2.7
Связанные уязвимости
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.