Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
This update includes the following RPMs: vim: * vim-X11-9.2.780-1.hum1 (aarch64, x86_64) * vim-common-9.2.780-1.hum1 (aarch64, x86_64) * vim-data-9.2.780-1.hum1 (noarch) * vim-default-editor-9.2.780-1.hum1 (noarch) * vim-enhanced-9.2.780-1.hum1 (aarch64, x86_64) * vim-filesystem-9.2.780-1.hum1 (noarch) * vim-minimal-9.2.780-1.hum1 (aarch64, x86_64) * xxd-9.2.780-1.hum1 (aarch64, x86_64) * vim-9.2.780-1.hum1.src (src)
AI Analysis
Technical Summary
This security advisory from Red Hat Product Security relates to vulnerabilities in Red Hat Hardened Images RPMs, specifically multiple vim packages (e.g., vim-X11, vim-common, vim-enhanced, vim-minimal, xxd). The advisory references multiple CVEs (CVE-2026-55892, CVE-2026-57456, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858) and CWE identifiers CWE-787 (Out-of-bounds Write) and CWE-94 (Improper Control of Generation of Code). The update is described as a bug fix and enhancement update. The vendor advisory does not explicitly state which versions are fixed or provide detailed patch instructions, but it references an update available at https://images.redhat.com/. No known exploits in the wild are reported.
Potential Impact
The vulnerabilities affect the vim packages included in Red Hat Hardened Images, potentially allowing out-of-bounds writes or improper code generation, which could lead to security issues such as code execution or denial of service. The advisory classifies the severity as high. However, no confirmed exploits in the wild have been reported. The impact is limited to systems using the affected vim RPMs in Red Hat Hardened Images.
Mitigation Recommendations
Red Hat has released an update for the affected vim RPM packages as part of the Red Hat Hardened Images. Users should apply the update available from https://images.redhat.com/ to remediate the vulnerabilities. Since this is an official Red Hat security advisory, the update should be considered the official fix. No additional mitigations or workarounds are specified in the advisory.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
This update includes the following RPMs: vim: * vim-X11-9.2.780-1.hum1 (aarch64, x86_64) * vim-common-9.2.780-1.hum1 (aarch64, x86_64) * vim-data-9.2.780-1.hum1 (noarch) * vim-default-editor-9.2.780-1.hum1 (noarch) * vim-enhanced-9.2.780-1.hum1 (aarch64, x86_64) * vim-filesystem-9.2.780-1.hum1 (noarch) * vim-minimal-9.2.780-1.hum1 (aarch64, x86_64) * xxd-9.2.780-1.hum1 (aarch64, x86_64) * vim-9.2.780-1.hum1.src (src)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security advisory from Red Hat Product Security relates to vulnerabilities in Red Hat Hardened Images RPMs, specifically multiple vim packages (e.g., vim-X11, vim-common, vim-enhanced, vim-minimal, xxd). The advisory references multiple CVEs (CVE-2026-55892, CVE-2026-57456, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858) and CWE identifiers CWE-787 (Out-of-bounds Write) and CWE-94 (Improper Control of Generation of Code). The update is described as a bug fix and enhancement update. The vendor advisory does not explicitly state which versions are fixed or provide detailed patch instructions, but it references an update available at https://images.redhat.com/. No known exploits in the wild are reported.
Potential Impact
The vulnerabilities affect the vim packages included in Red Hat Hardened Images, potentially allowing out-of-bounds writes or improper code generation, which could lead to security issues such as code execution or denial of service. The advisory classifies the severity as high. However, no confirmed exploits in the wild have been reported. The impact is limited to systems using the affected vim RPMs in Red Hat Hardened Images.
Mitigation Recommendations
Red Hat has released an update for the affected vim RPM packages as part of the Red Hat Hardened Images. Users should apply the update available from https://images.redhat.com/ to remediate the vulnerabilities. Since this is an official Red Hat security advisory, the update should be considered the official fix. No additional mitigations or workarounds are specified in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:35387
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-57456"]
- Cvss Version
- null
Threat ID: 6a4e4efdc9d9e3dbe328d0c6
Added to database: 07/08/2026, 13:22:05 UTC
Last enriched: 07/30/2026, 23:08:32 UTC
Last updated: 07/31/2026, 21:42:27 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.