ELSA-2026-47982

ELSA-2026-47982 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-30

Description

[8.2.2637-26.0.1.el9_8.13]
- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-26.13]
- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
PHP omni-completion

[2:8.2.2637-26.12]
- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
python complete via crafted docstrings

[2:8.2.2637-26.11]
- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
tree_count_words() and sug_filltree()

[2:8.2.2637-26.10]
- RHEL-186659 CVE-2026-47162 vim: code injection via
NetrwBookHistSave()

[2:8.2.2637-26.9]
- RHEL-186646 CVE-2026-52858 vim: possible code execution with
python3complete

[2:8.2.2637-26.8]
- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:8.2.2637-26.7]
- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin

[2:8.2.2637-26.6]
- CVE-2026-41411 vim: Command injection via backticks in tag files

[2:8.2.2637-26.5]
- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
via path traversal bypass

Related CVEs

CVE-2026-55693

CVE-2026-57455

CVE-2026-57456

CVE-2026-59856

CVE-2026-59858

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_aarch64_appstream
	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_aarch64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_aarch64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.13.aarch64.rpm	c4805dc8e6f2201e1f44925ca686d3909bffd1471180de0146294d727ac6654e	-	ol9_aarch64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.13.aarch64.rpm	0f5cd60c1f9f0433a2f6433eb31c12041d42c8e7d5c913f73cd0f75a2faa7c6c	-	ol9_aarch64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.13.aarch64.rpm	f7d19b6c5122273af38d3c701e94ab1cd96e42075a81530344aec1962d83a4fe	-	ol9_aarch64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.13.noarch.rpm	93fd731fdc278cd9b9f90955f05ad902dad5b158f83c9c22037585119a990632	-	ol9_aarch64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.13.noarch.rpm	93fd731fdc278cd9b9f90955f05ad902dad5b158f83c9c22037585119a990632	-	ol9_aarch64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.13.aarch64.rpm	f3837e72becafb61193511fa8d869c66acd8727352cd1421e6611f6c2c3d5b4c	-	ol9_aarch64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.13.aarch64.rpm	f3837e72becafb61193511fa8d869c66acd8727352cd1421e6611f6c2c3d5b4c	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_x86_64_appstream
	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_x86_64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.13.src.rpm	4d3570fc1f5df9c0c2f3e72347fd1e6c5e47a943c8dcde17cfa07820746eedfa	-	ol9_x86_64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.13.x86_64.rpm	e6349b9aef0210e83bae7c8431615085a4a802856190f2a0fda3f9a2f11eca64	-	ol9_x86_64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.13.x86_64.rpm	53858f3b2bca1fbaaa92ddee24ac3d1cf9c702eb384f8ca4be7455ac60deafa5	-	ol9_x86_64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.13.x86_64.rpm	c5741e1547cceca12f10b6a38e1c66e37b406ec71a592f5bf1b0466f2508f9bb	-	ol9_x86_64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.13.noarch.rpm	93fd731fdc278cd9b9f90955f05ad902dad5b158f83c9c22037585119a990632	-	ol9_x86_64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.13.noarch.rpm	93fd731fdc278cd9b9f90955f05ad902dad5b158f83c9c22037585119a990632	-	ol9_x86_64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.13.x86_64.rpm	82cce9f8adcf4f215eebec333bee3928048cc24a611fad62905196c1afaa2752	-	ol9_x86_64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.13.x86_64.rpm	82cce9f8adcf4f215eebec333bee3928048cc24a611fad62905196c1afaa2752	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team