Skip to content
OpenAdvisories
Medium RHSA-2025:20945 2 CVEs

Red Hat Security Advisory: vim security update

Published Nov 12, 2025 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-common 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-common-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-debugsource 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-enhanced 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-enhanced-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-minimal-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-X11 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::appstream vim-X11-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-common-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-debugsource 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-enhanced-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-filesystem 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-minimal 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-minimal-debuginfo 2:8.2.2637-23.el9_7
Red Hat · RHEL 9 enterprise_linux:9::baseos vim-X11-debuginfo 2:8.2.2637-23.el9_7

Vulnerabilities 2

  • Medium 4.1
    CVE-2025-53905

    Vim has path traversial issue with tar.vim and special crafted tar files

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux
  • Medium 4.1
    CVE-2025-53906

    Vim has path traversal issue with zip.vim and special crafted zip archives

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2380360
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2380362
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20945.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-53905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-53905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-53905
  • article
    https://github.com/vim/vim/commit/87757c6b0a4b2c1f71c72ea8e1438b8fb116b239
  • article
    https://github.com/vim/vim/security/advisories/GHSA-74v4-f3x9-ppvr
  • report
    https://access.redhat.com/security/cve/CVE-2025-53906
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-53906
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-53906
  • article
    https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8
  • article
    https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86