ELSA-2026-19073

ELSA-2026-19073 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-08

Description

[9.1.083-9.0.1.el10_2.2]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.2]
- Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass

[2:9.1.083-9.1]
- RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function

[2:9.1.083-9]
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

[2:9.1.083-9]
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

[2:9.1.083-8]
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

[2:9.1.083-7]
- RHEL-145868 sudo not able to spawn 'vi' command when NOEXEC is used to prevent escaping to shell

Related CVEs

CVE-2026-34982

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_aarch64_appstream
	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_aarch64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_aarch64_u2_baseos_base
	vim-X11-9.1.083-9.0.1.el10_2.2.aarch64.rpm	5fd2a787251f6891ce72ef462951e7a777754ec12e5a0161543ae09408cdd542	-	ol10_aarch64_appstream
	vim-common-9.1.083-9.0.1.el10_2.2.aarch64.rpm	ee4cd6f7959e13dff97e54cdef0f058d7ac169c4c014b74467622d9fd73c98e7	-	ol10_aarch64_appstream
	vim-data-9.1.083-9.0.1.el10_2.2.noarch.rpm	b3261f9b20f2f6190137137b96aa8390669f844df5bf89665a5773de8fa0ddd6	-	ol10_aarch64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.2.noarch.rpm	b3261f9b20f2f6190137137b96aa8390669f844df5bf89665a5773de8fa0ddd6	-	ol10_aarch64_u2_baseos_base
	vim-enhanced-9.1.083-9.0.1.el10_2.2.aarch64.rpm	75a5a2e4bed3941ccc42ed6ea4af10f77266ce19faf8386c13f20148598b7d8c	-	ol10_aarch64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.2.noarch.rpm	0a2164e9e19fcb7af8ce2b08215078286b9b8c834e6ce3e8aa0dedeba0af4ba3	-	ol10_aarch64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.2.noarch.rpm	0a2164e9e19fcb7af8ce2b08215078286b9b8c834e6ce3e8aa0dedeba0af4ba3	-	ol10_aarch64_u2_baseos_base
	vim-minimal-9.1.083-9.0.1.el10_2.2.aarch64.rpm	cb36e52837858177f83095b483192817de39548d8b045aefe042d2cd9cd25622	-	ol10_aarch64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.2.aarch64.rpm	cb36e52837858177f83095b483192817de39548d8b045aefe042d2cd9cd25622	-	ol10_aarch64_u2_baseos_base
	xxd-9.1.083-9.0.1.el10_2.2.aarch64.rpm	e9fa6228f8177f5a5ca8908608caa545828c3c5d2977c992edff4834275b378c	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_x86_64_appstream
	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_x86_64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.2.src.rpm	9a4e038d9a7e85b5a4845abec8a921d4a139ae8d31e83afbd74fc8fd53e6ee92	-	ol10_x86_64_u2_baseos_base
	vim-X11-9.1.083-9.0.1.el10_2.2.x86_64.rpm	23cb486d2782cd6608fb3cd9ad4850351bed393826d373c8e61913f4cb618016	-	ol10_x86_64_appstream
	vim-common-9.1.083-9.0.1.el10_2.2.x86_64.rpm	3fc381dd0513b4e7da294cbd4bc9ae962ef71c0f9496a0dd647f64b39c34f61c	-	ol10_x86_64_appstream
	vim-data-9.1.083-9.0.1.el10_2.2.noarch.rpm	b3261f9b20f2f6190137137b96aa8390669f844df5bf89665a5773de8fa0ddd6	-	ol10_x86_64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.2.noarch.rpm	b3261f9b20f2f6190137137b96aa8390669f844df5bf89665a5773de8fa0ddd6	-	ol10_x86_64_u2_baseos_base
	vim-enhanced-9.1.083-9.0.1.el10_2.2.x86_64.rpm	1732b2e3291ef80cd73d386785236913db7ab14f088ae94e53ebbcf19b3b7441	-	ol10_x86_64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.2.noarch.rpm	0a2164e9e19fcb7af8ce2b08215078286b9b8c834e6ce3e8aa0dedeba0af4ba3	-	ol10_x86_64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.2.noarch.rpm	0a2164e9e19fcb7af8ce2b08215078286b9b8c834e6ce3e8aa0dedeba0af4ba3	-	ol10_x86_64_u2_baseos_base
	vim-minimal-9.1.083-9.0.1.el10_2.2.x86_64.rpm	9d2afe5ea27dc1be9a24e3a895e66f462977227d858ce3c4512afdc9b065f586	-	ol10_x86_64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.2.x86_64.rpm	9d2afe5ea27dc1be9a24e3a895e66f462977227d858ce3c4512afdc9b065f586	-	ol10_x86_64_u2_baseos_base
	xxd-9.1.083-9.0.1.el10_2.2.x86_64.rpm	8821bb59ff89cd75ca158742fe3d4b89d9c5354e78b3c7482d9a8f02d0cdbc79	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team