Skip to content
OpenAdvisories
Medium ELSA-2026-4715 1 CVE

Moderate: vim security update (Oracle Linux 10)

Published Mar 17, 2026 · Updated Mar 17, 2026

Ecosystem: Oracle Linux

Summary

[9.1.083-6.0.1.el10_1.1]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-6.1]
- RHEL-147922 CVE-2026-25749 vim: Heap Overflow in Vim

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 10 vim-common 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 vim-data 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 vim-enhanced 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 vim-filesystem 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 vim-minimal 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 vim-X11 2:9.1.083-6.0.1.el10_1.1
Oracle Linux · 10 xxd 2:9.1.083-6.0.1.el10_1.1

Vulnerabilities 1

  • Medium 6.6
    CVE-2026-25749

    Heap Overflow in Vim

    Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in sr…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine