Описание
ELSA-2026-38511: vim security update (IMPORTANT)
[8.2.2637-26.0.1.el9_8.10]
- Remove upstream references [Orabug: 31197557]
[2:8.2.2637-26.10]
- RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave()
[2:8.2.2637-26.9]
- RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete
[2:8.2.2637-26.8]
- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
[2:8.2.2637-26.7]
- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin
[2:8.2.2637-26.6]
- CVE-2026-41411 vim: Command injection via backticks in tag files
[2:8.2.2637-26.5]
- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
[2:8.2.2637-26.4]
- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass
[2:8.2.2637-26.3]
- Related: RHEL-159630 rebuild to build with exception target
[2:8.2.2637-26.2]
- remove -O0 from flags
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
vim-X11
8.2.2637-26.0.1.el9_8.10
vim-common
8.2.2637-26.0.1.el9_8.10
vim-enhanced
8.2.2637-26.0.1.el9_8.10
vim-filesystem
8.2.2637-26.0.1.el9_8.10
vim-minimal
8.2.2637-26.0.1.el9_8.10
Oracle Linux x86_64
vim-X11
8.2.2637-26.0.1.el9_8.10
vim-common
8.2.2637-26.0.1.el9_8.10
vim-enhanced
8.2.2637-26.0.1.el9_8.10
vim-filesystem
8.2.2637-26.0.1.el9_8.10
vim-minimal
8.2.2637-26.0.1.el9_8.10
Связанные уязвимости
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.