Summary
[8.0.1763-21.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]
[2:8.0.1763-21]
- RHEL-112003 CVE-2025-53905 vim: Vim path traversial
- RHEL-112007 CVE-2025-53906 vim: Vim path traversal
[2:8.0.1763-20]
- fix issue reported by covscan
[2:8.0.1763-20]
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
[2:8.0.1763-20]
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
[2:8.0.1763-20]
- CVE-2022-1154 vim: use after free in utf_ptr2char
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | vim-common | 2:8.0.1763-21.0.1.el8_10 |
| Oracle Linux · 8 | vim-enhanced | 2:8.0.1763-21.0.1.el8_10 |
| Oracle Linux · 8 | vim-filesystem | 2:8.0.1763-21.0.1.el8_10 |
| Oracle Linux · 8 | vim-minimal | 2:8.0.1763-21.0.1.el8_10 |
| Oracle Linux · 8 | vim-X11 | 2:8.0.1763-21.0.1.el8_10 |
Vulnerabilities 2
-
Medium 4.1
Vim has path traversial issue with tar.vim and special crafted tar files
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…
-
Medium 4.1
Vim has path traversal issue with zip.vim and special crafted zip archives
Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…