Summary
[9.1.083-9.0.1.el10_2.22]
- Remove upstream references [Orabug: 31197557]
[2:9.1.083-9.22]
- RHEL-271045 ex command injection via crafted filename in sign_jump()
[2:9.1.083-9.21]
- RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during
C omni-completion
[2:9.1.083-9.20]
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator
[2:9.1.083-9.19]
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()
[2:9.1.083-9.18]
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()
[2:9.1.083-9.17]
- RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()
[2:9.1.083-9.16]
- RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in
set_sofo()
[2:9.1.083-9.15]
- RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup
[2:9.1.083-9.14]
- RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | vim-common | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | vim-data | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | vim-enhanced | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | vim-filesystem | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | vim-minimal | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | vim-X11 | 2:9.1.083-9.0.1.el10_2.22 |
| Oracle Linux · 10 | xxd | 2:9.1.083-9.0.1.el10_2.22 |
Vulnerabilities 1
-
High 7.1
Vim: Arbitrary Ex Command Execution in C Omni-Completion
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an untermina…