Summary
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Vim path traversal (CVE-2025-53906)
* vim: Vim path traversial (CVE-2025-53905)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | vim-common | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | vim-data | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | vim-enhanced | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | vim-filesystem | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | vim-minimal | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | vim-X11 | 2:9.1.083-6.el10_1 |
| AlmaLinux · 10 | xxd | 2:9.1.083-6.el10_1 |
Vulnerabilities 2
-
Medium 4.1
Vim has path traversial issue with tar.vim and special crafted tar files
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…
-
Medium 4.1
Vim has path traversal issue with zip.vim and special crafted zip archives
Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…