Skip to content
OpenAdvisories
Medium RLSA-2025:17742 2 CVEs

Moderate: vim security update

Published Oct 18, 2025 · Updated Oct 18, 2025

Ecosystem: Rocky Linux

Summary

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Vim path traversal (CVE-2025-53906)

* vim: Vim path traversial (CVE-2025-53905)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 vim 2:8.2.2637-22.el9_6.1

Vulnerabilities 2

  • Medium 4.1
    CVE-2025-53905

    Vim has path traversial issue with tar.vim and special crafted tar files

    Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux
  • Medium 4.1
    CVE-2025-53906

    Vim has path traversal issue with zip.vim and special crafted zip archives

    Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct…

    vim vim vim vim Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2380360
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2380362