Skip to content
OpenAdvisories
Medium ELSA-2026-5602 1 CVE

Moderate: vim security update (Oracle Linux 9)

Published Mar 24, 2026 · Updated Mar 24, 2026

Ecosystem: Oracle Linux

Summary

[8.2.2637-23.0.1.el9_7.1]
- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-23.1]
- RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 vim-common 2:8.2.2637-23.0.1.el9_7.1
Oracle Linux · 9 vim-enhanced 2:8.2.2637-23.0.1.el9_7.1
Oracle Linux · 9 vim-filesystem 2:8.2.2637-23.0.1.el9_7.1
Oracle Linux · 9 vim-minimal 2:8.2.2637-23.0.1.el9_7.1
Oracle Linux · 9 vim-X11 2:8.2.2637-23.0.1.el9_7.1

Vulnerabilities 1

  • Medium 6.6
    CVE-2026-25749

    Heap Overflow in Vim

    Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in sr…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine