ELSA-2026-48650

ELSA-2026-48650 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-30

Description

[9.1.083-9.0.1.el10_2.12]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.12]
- RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP
omni-completion

[2:9.1.083-9.11]
- RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution
during C omni-completion

[2:9.1.083-9.10]
- RHEL-194059 CVE-2026-55693 vim: out-of-bounds write in tree_count_words()

[2:9.1.083-9.9]
- RHEL-191359 CVE-2026-57455 vim: Out-of-bounds write with soundfold()

[2:9.1.083-9.8]
- RHEL-192105 CVE-2026-57456 vim: possible code execution with python complete

[2:9.1.083-9.7]
- RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
- RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete

[2:9.1.083-9.6]
- RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:9.1.083-9.5]
- RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin

[2:9.1.083-9.4]
- RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files

Related CVEs

CVE-2026-55693

CVE-2026-57455

CVE-2026-57456

CVE-2026-59856

CVE-2026-59858

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_aarch64_appstream
	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_aarch64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_aarch64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.12.aarch64.rpm	9f0f4850bf4ca3b40a9ad1ee9e441f62d2e105b0ece91d0ff708cb34fb25824b	-	ol10_aarch64_appstream
	vim-common-9.1.083-9.0.1.el10_2.12.aarch64.rpm	83966a840260da5a0eaeeed3af33debfa0188293225569041c584bede1b1342e	-	ol10_aarch64_appstream
	vim-data-9.1.083-9.0.1.el10_2.12.noarch.rpm	df6022b332ad6416706a1e3182ea66f30465556e91ca9eea43d93d24a1edfdc8	-	ol10_aarch64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.12.noarch.rpm	df6022b332ad6416706a1e3182ea66f30465556e91ca9eea43d93d24a1edfdc8	-	ol10_aarch64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.12.aarch64.rpm	e2cd78a6adcfe9e3f4387224409de0ef09e1d16492b9c616ba6f25c4a1def60f	-	ol10_aarch64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.12.noarch.rpm	fc7bbecec680197e6a721371ee9bba9cb888c262cd28a5a211a01495108bc1f3	-	ol10_aarch64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.12.noarch.rpm	fc7bbecec680197e6a721371ee9bba9cb888c262cd28a5a211a01495108bc1f3	-	ol10_aarch64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.12.aarch64.rpm	8823e799ec3e9ca83f1206269a75717ef4578449394f5c553e8cbd4f3afda268	-	ol10_aarch64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.12.aarch64.rpm	8823e799ec3e9ca83f1206269a75717ef4578449394f5c553e8cbd4f3afda268	-	ol10_aarch64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.12.aarch64.rpm	d151efc3dca19da2baaf9244548b763f9ab3d6477d692be8c4df26666ec3329e	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_x86_64_appstream
	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_x86_64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.12.src.rpm	e14ad53346330ec1fa59d161df9f518da5ebb66c328c273f5aa8e8413f81d14f	-	ol10_x86_64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.12.x86_64.rpm	b574b6210e4c40e67c69aabb35ce0d039217e9e8bc84cd8c13ccb329d1726213	-	ol10_x86_64_appstream
	vim-common-9.1.083-9.0.1.el10_2.12.x86_64.rpm	b76967aa4ac02cbdc7d6afd500e986cc9a310ad3e23e208bc018f5653fbddce4	-	ol10_x86_64_appstream
	vim-data-9.1.083-9.0.1.el10_2.12.noarch.rpm	df6022b332ad6416706a1e3182ea66f30465556e91ca9eea43d93d24a1edfdc8	-	ol10_x86_64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.12.noarch.rpm	df6022b332ad6416706a1e3182ea66f30465556e91ca9eea43d93d24a1edfdc8	-	ol10_x86_64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.12.x86_64.rpm	3b4dcd69736d957bdbe5a5365169adc0ac7410ca7673ce431dbd84d2d239bcdd	-	ol10_x86_64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.12.noarch.rpm	fc7bbecec680197e6a721371ee9bba9cb888c262cd28a5a211a01495108bc1f3	-	ol10_x86_64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.12.noarch.rpm	fc7bbecec680197e6a721371ee9bba9cb888c262cd28a5a211a01495108bc1f3	-	ol10_x86_64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.12.x86_64.rpm	88246c178b92e778cdf6c8f008d6d8b588955d645f00f161772b705f91ff52ec	-	ol10_x86_64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.12.x86_64.rpm	88246c178b92e778cdf6c8f008d6d8b588955d645f00f161772b705f91ff52ec	-	ol10_x86_64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.12.x86_64.rpm	1402368df8a1dca2e1c8ece0ab6aba2e6aeaf124209e40094c3a21896faaf887	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team