Skip to content
OpenAdvisories
Medium ELSA-2026-4442 1 CVE

Moderate: vim security update (Oracle Linux 8)

Published Mar 12, 2026 · Updated Mar 12, 2026

Ecosystem: Oracle Linux

Summary

[8.0.1763-22.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]

[2:8.0.1763-22]
- RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 vim-common 2:8.0.1763-22.0.1.el8_10
Oracle Linux · 8 vim-enhanced 2:8.0.1763-22.0.1.el8_10
Oracle Linux · 8 vim-filesystem 2:8.0.1763-22.0.1.el8_10
Oracle Linux · 8 vim-minimal 2:8.0.1763-22.0.1.el8_10
Oracle Linux · 8 vim-X11 2:8.0.1763-22.0.1.el8_10

Vulnerabilities 1

  • Medium 6.6
    CVE-2026-25749

    Heap Overflow in Vim

    Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in sr…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine