vim-8.0.1763-22.el8_10
エラータID: AXSA:2026-306:01
リリース日:
2026/03/16 Monday - 14:34
題名:
vim-8.0.1763-22.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Vim の src/tag.c の get_tagfname() 関数のタグファイル解析処理
には、データサイズのチェックをせずに strcpy() ライブラリ関数を
利用していることに起因したヒープ領域のバッファオーバーフローの問題
があるため、ローカルの攻撃者により、任意のコードの実行、および
サービス拒否攻撃を可能とする脆弱性が存在します。(CVE-2026-25749)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-25749
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
追加情報:
N/A
ダウンロード:
SRPMS
- vim-8.0.1763-22.el8_10.src.rpm
MD5: a0532a3be6518cd3a1a91a7aed269b6b
SHA-256: f8b0c7cbaa89d7baa8e957745bf1812ae79a8da268ae734202d40f56309a91f9
Size: 10.72 MB
Asianux Server 8 for x86_64
- vim-common-8.0.1763-22.el8_10.x86_64.rpm
MD5: 4f1695d0d4ed509ab6e505fa7346d885
SHA-256: 3a844d951b8fd3cde1bd1b2b0201802c021663ab7274d51f43bb51f91e5af270
Size: 6.34 MB - vim-enhanced-8.0.1763-22.el8_10.x86_64.rpm
MD5: 2b3dd30b1855adf04ac496bbe3910314
SHA-256: 3bf08826e7708fb758d05dcdc281ca168a4bc769479d62a99043eb4d51668e91
Size: 1.36 MB - vim-filesystem-8.0.1763-22.el8_10.noarch.rpm
MD5: 5d89c832fe99efd9ea9d4cb3ccba35bc
SHA-256: 65078dfcd8a7c9ed810757c728eecb9c6d879cb21d981044e522fad516660c91
Size: 49.67 kB - vim-minimal-8.0.1763-22.el8_10.x86_64.rpm
MD5: 94b837cda1f705ec8dc9b702e745aa93
SHA-256: 83e761321fe0d5f2375d68b66fadc42cdecf303042bb2b475162698a5325e656
Size: 574.28 kB - vim-X11-8.0.1763-22.el8_10.x86_64.rpm
MD5: 013d36f1db5bb1db4e01b4723ea9630c
SHA-256: 17afe5636693c86d80275c2ac078b24ee04fc1fda47429c5c055071ab26ed340
Size: 1.50 MB
English