Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 499
Alerts This Week
Warning Icon 1 499

Mageia 9: Critical Vim Path Traversal Corrections for MGASA-2025-0226

mageia
Calendar Grey September 2, 2025
Scroller Mageia
Enhancements for vim modules in Mageia address critical vulnerabilities linked to directory navigation flaws within certain compressed file types.
MGASA-2025-0226 - Updated vim packages fix vulnerabilities

Summary

Description: Path traversal issue with tar.vim and special crafted tar archives in Vim < 9.1.1552. (CVE-2025-53905) Path traversal issue with zip.vim and special crafted zip archives in Vim < v9.1.1551. (CVE-2025-53906)

References

- https://bugs.mageia.org/show_bug.cgi?id=34486

- https://www.openwall.com/lists/oss-security/2025/07/15/1

- https://www.openwall.com/lists/oss-security/2025/07/15/2

- https://www.cve.org/CVERecord?id=CVE-2025-53905

- https://www.cve.org/CVERecord?id=CVE-2025-53906

Topics%20covered

Topics Covered

security advisory important vim path traversal archive exploit Mageia

Resolution

SRPMS

- 9/core/vim-9.1.1552-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 02 Sep 2025
URL: https://advisories.mageia.org/MGASA-2025-0226.html
Type: security
CVE: CVE-2025-53905, CVE-2025-53906

Topics%20covered

Topics Covered

security advisory important vim path traversal archive exploit Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.