CVE-2025-53905
Description
Moderate: vim security update
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Mitigation details
Description vim: Vim path traversial Red Hat statement Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. CVSS v3: 4.1 (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L) Errata / fixed releases…
Workaround
for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Description
vim: Vim path traversial
Red Hat statement
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS v3: 4.1 (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L)
Errata / fixed releases
| Product | Package | Advisory | Released |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | vim-2:9.1.083-5.el10_0.1 | RHSA-2025:17913 | 2025-10-14T00:00:00Z |
| Red Hat Enterprise Linux 10 | vim-2:9.1.083-6.el10_1 | RHSA-2025:21015 | 2025-11-11T00:00:00Z |
| Red Hat Enterprise Linux 8 | vim-2:8.0.1763-21.el8_10 | RHSA-2025:17715 | 2025-10-09T00:00:00Z |
| Red Hat Enterprise Linux 8 | vim-2:8.0.1763-21.el8_10 | RHSA-2025:17715 | 2025-10-09T00:00:00Z |
| Red Hat Enterprise Linux 9 | vim-2:8.2.2637-22.el9_6.1 | RHSA-2025:17742 | 2025-10-13T00:00:00Z |
| Red Hat Enterprise Linux 9 | vim-2:8.2.2637-23.el9_7 | RHSA-2025:20945 | 2025-11-11T00:00:00Z |
| Red Hat Enterprise Linux 9 | vim-2:8.2.2637-22.el9_6.1 | RHSA-2025:17742 | 2025-10-13T00:00:00Z |
| Red Hat Enterprise Linux 9 | vim-2:8.2.2637-23.el9_7 | RHSA-2025:20945 | 2025-11-11T00:00:00Z |
| Red Hat Enterprise Linux 9.4 Extended Update Support | vim-2:8.2.2637-20.el9_4.1 | RHSA-2025:17644 | 2025-10-09T00:00:00Z |
| Red Hat AI Inference Server 3.2 | rhaiis/vllm-cuda-rhel9:3.2.2-1765379088 | RHSA-2025:23078 | 2025-12-10T00:00:00Z |
| Red Hat AI Inference Server 3.2 | rhaiis/vllm-rocm-rhel9:3.2.2-1765379049 | RHSA-2025:23079 | 2025-12-10T00:00:00Z |
| Red Hat AI Inference Server 3.2 | rhaiis/model-opt-cuda-rhel9:3.2.2-1764871796 | RHSA-2025:23080 | 2025-12-10T00:00:00Z |
| Red Hat AI Inference Server 3.2 | rhaiis/vllm-cuda-rhel9:1772160593 | RHSA-2026:3461 | 2026-02-27T00:00:00Z |
| Red Hat AI Inference Server 3.2 | rhaiis/vllm-rocm-rhel9:1772160625 | RHSA-2026:3462 | 2026-02-27T00:00:00Z |
| Red Hat Discovery 2 | discovery/discovery-ui-rhel9:2.3.0-1760554384 | RHSA-2025:19088 | 2025-10-23T00:00:00Z |
| Red Hat Discovery 2 | discovery/discovery-ui-rhel9:2.4.0-1763656152 | RHSA-2025:21994 | 2025-11-24T00:00:00Z |
| Red Hat Insights proxy 1.5 | insights-proxy/insights-proxy-container-rhel9:1.5.8-1762789260 | RHSA-2025:20066 | 2025-11-10T00:00:00Z |
| Red Hat Insights proxy 1.5 | insights-proxy/insights-proxy-container-rhel9:1.5.9-1765201856 | RHSA-2025:22868 | 2025-12-08T00:00:00Z |
Package state
| Product | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 6 | vim | Out of support scope |
| Red Hat Enterprise Linux 7 | vim | Out of support scope |
| Red Hat OpenShift Container Platform 4 | rhcos | Fix deferred |
Apply commands
yum update -y vim
# or:
dnf upgrade -y vimOS impact
SUSE Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Affected | — |
Debian Mixed 5 releases
| Version | Status | Fixed in |
|---|---|---|
| trixie | Affected | — |
| sid | Fixed | 2:9.1.1829-1 |
| forky | Fixed | 2:9.1.1829-1 |
| bullseye | Affected | — |
| bookworm | Affected | — |
AlmaLinux Fixed 1 release
| Version | Status | Fixed in |
|---|---|---|
| 8 | Fixed | vim-minimal-8.0.1763-21.el8_10.x86_64.rpm |
Red Hat Fixed 2 releases
| Version | Status | Fixed in |
|---|---|---|
| 9 | Fixed | — |
| 8 | Fixed | — |
Rocky Linux Fixed 2 releases
| Version | Status | Fixed in |
|---|---|---|
| 9 | Fixed | — |
| 8 | Fixed | — |
References
- https://access.redhat.com/errata/RHSA-2025:17742
- https://access.redhat.com/errata/RHSA-2025:20945
- https://errata.rockylinux.org/RLSA-2025:17715
- https://www.suse.com/security/cve/CVE-2025-53905.html
- https://errata.rockylinux.org/RLSA-2025:20945
- https://errata.rockylinux.org/RLSA-2025:17742
- https://security-tracker.debian.org/tracker/CVE-2025-53905
- https://access.redhat.com/errata/RHSA-2025:17715
- https://bugzilla.redhat.com/2380360
- https://bugzilla.redhat.com/2380362
- https://errata.almalinux.org/8/ALSA-2025-17715.html
- https://errata.almalinux.org/9/ALSA-2025-17742.html
- https://errata.almalinux.org/9/ALSA-2025-20945.html
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.