This Red Hat security advisory addresses four Important-severity vulnerabilities in Vim, including arbitrary command execution via a modeline sandbox bypass (CVE-2026-34982), arbitrary file overwrite via path traversal in the zip.vim plugin (CVE-2026-35177), and command injection via malicious tag files (CVE-2026-41411) and when decompressing .tgz archives (CVE-2026-46483). The update applies specifically to Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions across multiple architectures. Administrators should apply the provided vim package update immediately via the referenced Red Hat solution article.
Errata des produits Red Hat RHSA-2026:28133 - Security Advisory Publié : 2026-06-23 Mis à jour : 2026-06-23 RHSA-2026:28133 - Security Advisory Aperçu général Paquets mis à jour Synopsis Important: vim security update Type / Sévérité Security Advisory: Important Analyse des correctifs dans Red Hat Insights Identifiez et remédiez aux systèmes concernés par cette alerte. Voir les systèmes concernés Sujet An update for vim is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982) vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411) vim: command injection when decompressing .tgz archives (CVE-2026-46483) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Produits concernés Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Correctifs BZ - 2455400 - CVE-2026-34982 vim: arbitrary command execution via modeline sandbox bypass BZ - 2455542 - CVE-2026-35177 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass BZ - 2461614 - CVE-2026-41411 vim: Vim: Command injection allows arbitrary code execution via malicious tag files BZ - 2477915 - CVE-2026-46483 vim: command injection when decompressing .tgz archives CVE CVE-2026-34982 CVE-2026-35177 CVE-2026-41411 CVE-2026-46483 Références https://access.redhat.com/security/updates/classification/#important Remarque: Il existe peut-être des versions plus récentes de ces paquets. Cliquer sur un nom de paquet pour obtenir plus de détails. Red Hat Enterprise Linux Server - AUS 9.2 SRPM vim-8.2.2637-20.el9_2.2.src.rpm SHA-256: 062c9a4252923a2da8e9cead84368b2730d2474c870c7b833322224231dd143b x86_64 vim-X11-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 097b5880447ad5991fcdb0922d9f2b381736c36f440859883310f73dad79ef64 vim-X11-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: f7ce9a75a7b6faaa8c13c22618713a8f58787a444ae6256c476e006b98cd8964 vim-X11-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: f7ce9a75a7b6faaa8c13c22618713a8f58787a444ae6256c476e006b98cd8964 vim-common-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: b5a62cf85bbdbaf0c4434f6019a65d71458b29d8e202393479e374f5acb4f673 vim-common-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ee8d1e14be1910e0110e032d8e1701667db6e9426509bdf7425d23b7e001eb46 vim-common-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ee8d1e14be1910e0110e032d8e1701667db6e9426509bdf7425d23b7e001eb46 vim-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 581d3fe721008850c73124037d43f5bb117b2869fa02931beaf201e9f5ac87ae vim-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 581d3fe721008850c73124037d43f5bb117b2869fa02931beaf201e9f5ac87ae vim-debugsource-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ab9387bcd57cc9e2ac9aed208da03c5e5d62e018ca073e129e49bdaaba1e240b vim-debugsource-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ab9387bcd57cc9e2ac9aed208da03c5e5d62e018ca073e129e49bdaaba1e240b vim-enhanced-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: bb2e595725a46f01f78853491949d6ff1168842ab434b2b6465137b1bda64743 vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 0e5b9aa80113b7c4e441c5fea72b95ce790aa8a39a9ae9691d9db8e3b7f0404e vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 0e5b9aa80113b7c4e441c5fea72b95ce790aa8a39a9ae9691d9db8e3b7f0404e vim-filesystem-8.2.2637-20.el9_2.2.noarch.rpm SHA-256: e7337cb768390ee40fe0352a271e480bc285871f2fd422ceb5ec993afcc76c81 vim-minimal-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ce2116d422cc8ee72a67a489631e924a9679f1b55d42952849b2d5e75dc45f89 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: d5cee3c2ac075a4793632b79df64bfd7990ebeeb6d1e74f18aae17e0fb67feb1 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: d5cee3c2ac075a4793632b79df64bfd7990ebeeb6d1e74f18aae17e0fb67feb1 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM vim-8.2.2637-20.el9_2.2.src.rpm SHA-256: 062c9a4252923a2da8e9cead84368b2730d2474c870c7b833322224231dd143b ppc64le vim-X11-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: f3d7fb4e9d8adb5e7b39be6976260cc16175dc41ba9b2f7acaad81fd370aa308 vim-X11-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 4bf87de94283265d8c320639e317b76267e3bf1264f30abb2b7649e802eef173 vim-X11-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 4bf87de94283265d8c320639e317b76267e3bf1264f30abb2b7649e802eef173 vim-common-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 1c7ef9c1b2dab9e668416bb390add0d1dda26197f77c1068be260fe1b64eed92 vim-common-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 4f3b2bd272ef768c13c4403a7c88d185df1c625f5d7b95ea98fe43897c5ca53f vim-common-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 4f3b2bd272ef768c13c4403a7c88d185df1c625f5d7b95ea98fe43897c5ca53f vim-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: e82a5d0a762559b79cc24242a7b12c595150b7e50cb2dfb7366ea9871e9274dc vim-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: e82a5d0a762559b79cc24242a7b12c595150b7e50cb2dfb7366ea9871e9274dc vim-debugsource-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 48e3791eba22c497bd567066e54c929f89dc8ed66c4e3128120cf4535bbcd35e vim-debugsource-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 48e3791eba22c497bd567066e54c929f89dc8ed66c4e3128120cf4535bbcd35e vim-enhanced-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: 539c0b24da760662ed1e69d8be87093f2f8e837c73ce532b63849c84c23507dd vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: db9bd4e9686c0a1aa988322d67fa045d4916cfff3f105f28be608c5e1993c4bb vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: db9bd4e9686c0a1aa988322d67fa045d4916cfff3f105f28be608c5e1993c4bb vim-filesystem-8.2.2637-20.el9_2.2.noarch.rpm SHA-256: e7337cb768390ee40fe0352a271e480bc285871f2fd422ceb5ec993afcc76c81 vim-minimal-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: c8445939c088f15031dd707d4f2311a623a3b04da1dda1da1e635cc3ef841f01 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: cc584b62e7032b6e13b779e8e8bd8251c6922781a7c0b1f88418d8b95dfb9708 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.ppc64le.rpm SHA-256: cc584b62e7032b6e13b779e8e8bd8251c6922781a7c0b1f88418d8b95dfb9708 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM vim-8.2.2637-20.el9_2.2.src.rpm SHA-256: 062c9a4252923a2da8e9cead84368b2730d2474c870c7b833322224231dd143b x86_64 vim-X11-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 097b5880447ad5991fcdb0922d9f2b381736c36f440859883310f73dad79ef64 vim-X11-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: f7ce9a75a7b6faaa8c13c22618713a8f58787a444ae6256c476e006b98cd8964 vim-X11-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: f7ce9a75a7b6faaa8c13c22618713a8f58787a444ae6256c476e006b98cd8964 vim-common-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: b5a62cf85bbdbaf0c4434f6019a65d71458b29d8e202393479e374f5acb4f673 vim-common-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ee8d1e14be1910e0110e032d8e1701667db6e9426509bdf7425d23b7e001eb46 vim-common-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ee8d1e14be1910e0110e032d8e1701667db6e9426509bdf7425d23b7e001eb46 vim-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 581d3fe721008850c73124037d43f5bb117b2869fa02931beaf201e9f5ac87ae vim-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 581d3fe721008850c73124037d43f5bb117b2869fa02931beaf201e9f5ac87ae vim-debugsource-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ab9387bcd57cc9e2ac9aed208da03c5e5d62e018ca073e129e49bdaaba1e240b vim-debugsource-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ab9387bcd57cc9e2ac9aed208da03c5e5d62e018ca073e129e49bdaaba1e240b vim-enhanced-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: bb2e595725a46f01f78853491949d6ff1168842ab434b2b6465137b1bda64743 vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 0e5b9aa80113b7c4e441c5fea72b95ce790aa8a39a9ae9691d9db8e3b7f0404e vim-enhanced-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: 0e5b9aa80113b7c4e441c5fea72b95ce790aa8a39a9ae9691d9db8e3b7f0404e vim-filesystem-8.2.2637-20.el9_2.2.noarch.rpm SHA-256: e7337cb768390ee40fe0352a271e480bc285871f2fd422ceb5ec993afcc76c81 vim-minimal-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: ce2116d422cc8ee72a67a489631e924a9679f1b55d42952849b2d5e75dc45f89 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: d5cee3c2ac075a4793632b79df64bfd7990ebeeb6d1e74f18aae17e0fb67feb1 vim-minimal-debuginfo-8.2.2637-20.el9_2.2.x86_64.rpm SHA-256: d5cee3c2ac075a4793632b79df64bfd7990ebeeb6d1e74f18aae17e0fb67feb1 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM vim-8.2.2637-20.el9_2.2.src.rpm SHA-256: 062c9a4252923a2da8e9cead84368b2730d2474c870c7b833322224231dd143b aarch64 vim-X11-8.2.2637-20.el9_2.2.aarch64.rpm SHA-256: 8bd9bdce0472861b17939dc3