RLSA-2026:98119: Important: vim security, bug fix, and enhancement update
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution (CVE-2026-43961)
Bug Fix(es) and Enhancement(s):
vim writes file in place even though creating a backup is possible [rhel-8.10.z] (JIRA:Rocky Linux-282852)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/vimto a version that resolves this vulnerability.Fixed in 2:8.0.1763-34.el8_10
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
Exploitation requires user interaction, as reflected by the CVSS vector. The flaw involves an unescaped filename processed by netrw's s:NetrwMarkFile() filter() expression, which can allow Vimscript injection and arbitrary code execution.
What level of impact is possible if exploitation succeeds?
Successful exploitation can result in arbitrary code execution. The CVSS vector rates confidentiality, integrity, and availability impacts as high.
Which Rocky Linux software is covered by this update?
The advisory applies to Rocky Linux Vim packages. It also includes a bug fix for RHEL 8.10.z behavior where Vim writes a file in place despite a backup being possible.