Summary
[8.2.2637-26.0.1.el9_8.23]
- Remove upstream references [Orabug: 31197557]
[2:8.2.2637-26.23]
- RHEL-271037 vim: ex command injection via crafted filename in
sign_jump()
[2:8.2.2637-26.22]
- RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution
during C omni-completion via crafted typeref
[2:8.2.2637-26.21]
- RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator
[2:8.2.2637-26.20]
- RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()
[2:8.2.2637-26.19]
- RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()
[2:8.2.2637-26.18]
- RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()
[2:8.2.2637-26.17]
- RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup in zsh.vim ftplugin
[2:8.2.2637-26.16]
- RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo()
[2:8.2.2637-26.15]
- RHEL-240370 CVE-2026-73078 vim: code injection in netrw via
bookmarks
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | vim-common | 2:8.2.2637-26.0.1.el9_8.23 |
| Oracle Linux · 9 | vim-enhanced | 2:8.2.2637-26.0.1.el9_8.23 |
| Oracle Linux · 9 | vim-filesystem | 2:8.2.2637-26.0.1.el9_8.23 |
| Oracle Linux · 9 | vim-minimal | 2:8.2.2637-26.0.1.el9_8.23 |
| Oracle Linux · 9 | vim-X11 | 2:8.2.2637-26.0.1.el9_8.23 |
Vulnerabilities 1
-
High 7.1
Vim: Arbitrary Ex Command Execution in C Omni-Completion
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an untermina…