ELSA-2025-17715

ELSA-2025-17715 - vim security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-10-09

Description

[8.0.1763-21.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]

[2:8.0.1763-21]
- RHEL-112003 CVE-2025-53905 vim: Vim path traversial
- RHEL-112007 CVE-2025-53906 vim: Vim path traversal

[2:8.0.1763-20]
- fix issue reported by covscan

[2:8.0.1763-20]
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c

[2:8.0.1763-20]
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read

[2:8.0.1763-20]
- CVE-2022-1154 vim: use after free in utf_ptr2char

Related CVEs

CVE-2025-53905

CVE-2025-53906

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_aarch64_appstream
	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_aarch64_baseos_latest
	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_aarch64_u10_baseos_patch
	vim-X11-8.0.1763-21.0.1.el8_10.aarch64.rpm	26d92d2ba25731a1794916270f57645958b563b448c98db87287f9ec298fb650	-	ol8_aarch64_appstream
	vim-common-8.0.1763-21.0.1.el8_10.aarch64.rpm	118b9180734d682d193a67cbc31ea9cbdbddcf4eb232710ad0981d253c8a7c53	-	ol8_aarch64_appstream
	vim-enhanced-8.0.1763-21.0.1.el8_10.aarch64.rpm	23d6a1bad5a7ee7c9b10610c6b766c341ccfd8802852a5f12207debb939a1f3a	-	ol8_aarch64_appstream
	vim-filesystem-8.0.1763-21.0.1.el8_10.noarch.rpm	e6fa9b5da62327f1fd1e0c6b26d7ba3d314e301a118b5ff0ee3110648c4e6e03	-	ol8_aarch64_appstream
	vim-minimal-8.0.1763-21.0.1.el8_10.aarch64.rpm	2c4a630f5584664c7d1f31edb514a63fa41bb11afbe6fdf592795f9d9c15f4f9	-	ol8_aarch64_baseos_latest
	vim-minimal-8.0.1763-21.0.1.el8_10.aarch64.rpm	2c4a630f5584664c7d1f31edb514a63fa41bb11afbe6fdf592795f9d9c15f4f9	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_x86_64_appstream
	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_x86_64_baseos_latest
	vim-8.0.1763-21.0.1.el8_10.src.rpm	512cd1b878990e787be895c7481c73f5a512042167440b54ce19c86af4c86c75	-	ol8_x86_64_u10_baseos_patch
	vim-X11-8.0.1763-21.0.1.el8_10.x86_64.rpm	813ca1812baec4b17ac8c2876be2dcf00781c79a05a21525e838339aec16d818	-	ol8_x86_64_appstream
	vim-common-8.0.1763-21.0.1.el8_10.x86_64.rpm	7bbee511c1bd044e25f91629d16686ce5944efe4ff175eaea81fd1f5e6b1cd9e	-	ol8_x86_64_appstream
	vim-enhanced-8.0.1763-21.0.1.el8_10.x86_64.rpm	549d55765714e92d3dea44b81d50eb36ac636ba04f04306e1ecf8572504fd046	-	ol8_x86_64_appstream
	vim-filesystem-8.0.1763-21.0.1.el8_10.noarch.rpm	e6fa9b5da62327f1fd1e0c6b26d7ba3d314e301a118b5ff0ee3110648c4e6e03	-	ol8_x86_64_appstream
	vim-minimal-8.0.1763-21.0.1.el8_10.x86_64.rpm	560e754643ddbc535659d9c5e9f27736203dfb4409bcf386748fbcff21556e24	-	ol8_x86_64_baseos_latest
	vim-minimal-8.0.1763-21.0.1.el8_10.x86_64.rpm	560e754643ddbc535659d9c5e9f27736203dfb4409bcf386748fbcff21556e24	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team