Summary
[8.0.1763-32.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]
[2:8.0.1763-32]
- RHEL-271024 vim: vim: Ex command injection via crafted filename in sign_jump()
[2:8.0.1763-32]
- RHEL-257017 CVE-2026-73073 arbitrary Ex command execution during
C omni-completion
[2:8.0.1763-31.7]
- RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator
[2:8.0.1763-31.6]
- RHEL-215662 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()
[2:8.0.1763-31.5]
- RHEL-215681 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()
[2:8.0.1763-31.4]
- RHEL-215657 CVE-2026-52859 vim: out-of-bounds read in terminal
cell.chars[] loop
[2:8.0.1763-31.3]
- CVE-2026-73072 vim: heap buffer overflow in set_sofo()
[2:8.0.1763-31.2]
- CVE-2026-73078 vim: code injection in netrw via bookmarks
[2:8.0.1763-31.1]
- CVE-2026-73076 vim: code execution via .VimballRecord file
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | vim-common | 2:8.0.1763-32.0.1.el8_10 |
| Oracle Linux · 8 | vim-enhanced | 2:8.0.1763-32.0.1.el8_10 |
| Oracle Linux · 8 | vim-filesystem | 2:8.0.1763-32.0.1.el8_10 |
| Oracle Linux · 8 | vim-minimal | 2:8.0.1763-32.0.1.el8_10 |
| Oracle Linux · 8 | vim-X11 | 2:8.0.1763-32.0.1.el8_10 |
Vulnerabilities 1
-
High 7.1
Vim: Arbitrary Ex Command Execution in C Omni-Completion
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an untermina…