RHSA-2026:98119: Important: vim security, bug fix, and enhancement update
Vim (Vi IMproved) is an updated and improved version of the vi editor.Security Fix(es): vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution (CVE-2026-43961) Bug Fix(es) and Enhancement(s): vim writes file in place even though creating a backup is possible [rhel-8.10.z] (JIRA:RHEL-282852) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/vimto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-commonto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-common-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-debugsourceto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-enhancedto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-enhanced-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-filesystemto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-minimalto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-minimal-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10 - Upgrade
Upgrade
redhat/vim-commonto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-common-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-debugsourceto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-enhancedto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-enhanced-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-minimalto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa - Upgrade
Upgrade
redhat/vim-minimal-debuginfoto a version that resolves this vulnerability.Fixed in 8.0.1763-34.el8_10.aa
Event History
Frequently Asked Questions
What condition is involved in exploitation?
The issue is a Vimscript injection caused by an unescaped filename in netrw's s:NetrwMarkFile() filter() expression. Processing a malicious filename through that code path can allow arbitrary code execution.
Which installed packages are covered by this update?
The advisory lists vim-common, vim-enhanced, vim-minimal, and their associated debuginfo or debugsource packages: vim-common-debuginfo, vim-debuginfo, vim-debugsource, vim-enhanced-debuginfo, and vim-minimal-debuginfo.
Is there a separate non-security behavior change in this update?
Yes. The update also addresses Vim writing a file in place when creating a backup is possible; the advisory identifies this fix as applying to rhel-8.10.z.