ELSA-2026-38509

ELSA-2026-38509 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[9.1.083-9.0.1.el10_2.7]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.7]
- RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
- RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete

[2:9.1.083-9.6]
- RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:9.1.083-9.5]
- RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin

[2:9.1.083-9.4]
- RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files

[2:9.1.083-9.3]
- RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
via path traversal bypass

[2:9.1.083-9.2]
- Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass

[2:9.1.083-9.1]
- RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function

Related CVEs

CVE-2026-46483

CVE-2026-47162

CVE-2026-47167

CVE-2026-52858

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_aarch64_appstream
	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_aarch64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_aarch64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.7.aarch64.rpm	238145362212f496a665141d3f39caed2267a988e298edf149b82c6cfc2fac9d	-	ol10_aarch64_appstream
	vim-common-9.1.083-9.0.1.el10_2.7.aarch64.rpm	70b5e3d1cd9aa34b286021b94b09987adeeef7275036dfdf6deca59595e0d17b	-	ol10_aarch64_appstream
	vim-data-9.1.083-9.0.1.el10_2.7.noarch.rpm	854b711a4834428c7d5fac32a94f8c9ee767f904a79051221aec42f96e87f703	-	ol10_aarch64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.7.noarch.rpm	854b711a4834428c7d5fac32a94f8c9ee767f904a79051221aec42f96e87f703	-	ol10_aarch64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.7.aarch64.rpm	1644b4c3c51069389f7b637de7a703ad1c382bcd098702da9c0ace97e03746bc	-	ol10_aarch64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.7.noarch.rpm	30d4cfb854e74217fc1c6c6cbc6082673386116eb6dc27b138a0bfe562b08fe8	-	ol10_aarch64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.7.noarch.rpm	30d4cfb854e74217fc1c6c6cbc6082673386116eb6dc27b138a0bfe562b08fe8	-	ol10_aarch64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.7.aarch64.rpm	4a922151db1528ba86e7fc97d9ed5b6d47734ea920d03fff7d8de065cf9af6b3	-	ol10_aarch64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.7.aarch64.rpm	4a922151db1528ba86e7fc97d9ed5b6d47734ea920d03fff7d8de065cf9af6b3	-	ol10_aarch64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.7.aarch64.rpm	4199e3b91aea6d57c2b867176b04d251661e277c9fc66a782087eec741ba9669	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_x86_64_appstream
	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_x86_64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.7.src.rpm	e793ae1cd0353ecabf8f097477ae623e138f6e0fc978be155b83e40aea3274d3	-	ol10_x86_64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.7.x86_64.rpm	9798648d1a1c34cbd1ae34c148e9902c8e7cbf752eaf7ea93210e53a109da085	-	ol10_x86_64_appstream
	vim-common-9.1.083-9.0.1.el10_2.7.x86_64.rpm	8dd9c7780b7dc99d3666cbbb24365dcf8044d768ff23e6b48d55f867a5eef47a	-	ol10_x86_64_appstream
	vim-data-9.1.083-9.0.1.el10_2.7.noarch.rpm	854b711a4834428c7d5fac32a94f8c9ee767f904a79051221aec42f96e87f703	-	ol10_x86_64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.7.noarch.rpm	854b711a4834428c7d5fac32a94f8c9ee767f904a79051221aec42f96e87f703	-	ol10_x86_64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.7.x86_64.rpm	00fbd87dddef825facadbff745cdd4c8c3af728aa556e580a19d3f8317c63ec8	-	ol10_x86_64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.7.noarch.rpm	30d4cfb854e74217fc1c6c6cbc6082673386116eb6dc27b138a0bfe562b08fe8	-	ol10_x86_64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.7.noarch.rpm	30d4cfb854e74217fc1c6c6cbc6082673386116eb6dc27b138a0bfe562b08fe8	-	ol10_x86_64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.7.x86_64.rpm	9214c7d6932d53a1c6fad19e6b67d2e21479d9e8ef6962fb0a49596c41b9f33a	-	ol10_x86_64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.7.x86_64.rpm	9214c7d6932d53a1c6fad19e6b67d2e21479d9e8ef6962fb0a49596c41b9f33a	-	ol10_x86_64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.7.x86_64.rpm	389e6123377128f6262fe4ed94e7a7858ca7ba4677e50012ac3b9837680d07f2	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team