Описание
ELSA-2026-47982: vim security update (IMPORTANT)
[8.2.2637-26.0.1.el9_8.13]
- Remove upstream references [Orabug: 31197557]
[2:8.2.2637-26.13]
- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion
[2:8.2.2637-26.12]
- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings
[2:8.2.2637-26.11]
- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree()
[2:8.2.2637-26.10]
- RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave()
[2:8.2.2637-26.9]
- RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete
[2:8.2.2637-26.8]
- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
[2:8.2.2637-26.7]
- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin
[2:8.2.2637-26.6]
- CVE-2026-41411 vim: Command injection via backticks in tag files
[2:8.2.2637-26.5]
- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
vim-filesystem
8.2.2637-26.0.1.el9_8.13
vim-X11
8.2.2637-26.0.1.el9_8.13
vim-common
8.2.2637-26.0.1.el9_8.13
vim-enhanced
8.2.2637-26.0.1.el9_8.13
vim-minimal
8.2.2637-26.0.1.el9_8.13
Oracle Linux x86_64
vim-minimal
8.2.2637-26.0.1.el9_8.13
vim-X11
8.2.2637-26.0.1.el9_8.13
vim-common
8.2.2637-26.0.1.el9_8.13
vim-enhanced
8.2.2637-26.0.1.el9_8.13
vim-filesystem
8.2.2637-26.0.1.el9_8.13