Skip to content
OpenAdvisories
Medium ELSA-2025-17913 2 CVEs

Moderate: vim security update (Oracle Linux 10)

Published Oct 14, 2025 · Updated Oct 14, 2025

Ecosystem: Oracle Linux

Summary

[9.1.083-5.0.1.1]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-5.1]
- RHEL-113550 CVE-2025-53906 vim: Vim path traversal
- RHEL-113544 CVE-2025-53905 vim: Vim path traversial

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 10 vim-common 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 vim-data 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 vim-enhanced 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 vim-filesystem 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 vim-minimal 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 vim-X11 2:9.1.083-5.0.1.el10_0.1
Oracle Linux · 10 xxd 2:9.1.083-5.0.1.el10_0.1

Vulnerabilities 2

  • Medium 4.1
    CVE-2025-53905

    Vim has path traversial issue with tar.vim and special crafted tar files

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux
  • Medium 4.1
    CVE-2025-53906

    Vim has path traversal issue with zip.vim and special crafted zip archives

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux