Summary
[8.2.2637-22.0.1.1]
- Remove upstream references [Orabug: 31197557]
[2:8.2.2637-22.1]
- RHEL-112006 CVE-2025-53905 vim: Vim path traversial
- RHEL-112010 CVE-2025-53906 vim: Vim path traversal
[2:8.2.2637-22]
- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim
[2:8.2.2637-21]
- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | vim-common | 2:8.2.2637-22.0.1.el9_6.1 |
| Oracle Linux · 9 | vim-enhanced | 2:8.2.2637-22.0.1.el9_6.1 |
| Oracle Linux · 9 | vim-filesystem | 2:8.2.2637-22.0.1.el9_6.1 |
| Oracle Linux · 9 | vim-minimal | 2:8.2.2637-22.0.1.el9_6.1 |
| Oracle Linux · 9 | vim-X11 | 2:8.2.2637-22.0.1.el9_6.1 |
Vulnerabilities 2
-
Medium 4.1
Vim has path traversial issue with tar.vim and special crafted tar files
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…
-
Medium 4.1
Vim has path traversal issue with zip.vim and special crafted zip archives
Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…