ELSA-2026-66336-0

ELSA-2026-66336-0 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-10

Description

[9.1.083-9.0.1.el10_2.20]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.20]
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator

[2:9.1.083-9.19]
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()

[2:9.1.083-9.18]
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()

[2:9.1.083-9.17]
- RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()

[2:9.1.083-9.16]
- RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in
set_sofo()

[2:9.1.083-9.15]
- RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup

[2:9.1.083-9.14]
- RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks

[2:9.1.083-9.13]
- Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via
.VimballRecord file

[2:9.1.083-9.12]
- RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP
omni-completion

Related CVEs

CVE-2026-28420

CVE-2026-52859

CVE-2026-55892

CVE-2026-59857

CVE-2026-73072

CVE-2026-73076

CVE-2026-73077

CVE-2026-73078

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_aarch64_appstream
	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_aarch64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_aarch64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.20.aarch64.rpm	5d403fab0156da68215b53728ce03a740fb3d93999bca7b8a59f288257f3de1a	-	ol10_aarch64_appstream
	vim-common-9.1.083-9.0.1.el10_2.20.aarch64.rpm	c8d6aca3ed39bcbd7e47ac81a8e996d2704dee5d4decf39d921768f934cb4000	-	ol10_aarch64_appstream
	vim-data-9.1.083-9.0.1.el10_2.20.noarch.rpm	002a36f4d00e5adde04931c88df620d69572f90cd7cccbe8bf5cf1dc1c83f24b	-	ol10_aarch64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.20.noarch.rpm	002a36f4d00e5adde04931c88df620d69572f90cd7cccbe8bf5cf1dc1c83f24b	-	ol10_aarch64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.20.aarch64.rpm	5ad17be4e24d600b26c85604c1438d89dfb3c83585c1b89619765c2bfb86ad71	-	ol10_aarch64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.20.noarch.rpm	311d2742feb8e0c031a36cd20d32f19e7c111e5d9f46b8b1842b10a88929a5f0	-	ol10_aarch64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.20.noarch.rpm	311d2742feb8e0c031a36cd20d32f19e7c111e5d9f46b8b1842b10a88929a5f0	-	ol10_aarch64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.20.aarch64.rpm	e8c4f57d720180d392f0df4599ff59d0a367afc1cda8132297bdb437b64baea2	-	ol10_aarch64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.20.aarch64.rpm	e8c4f57d720180d392f0df4599ff59d0a367afc1cda8132297bdb437b64baea2	-	ol10_aarch64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.20.aarch64.rpm	7bca9830b31e26450ac33bd66e5cb1cfadc0e4054516f40d54d7eef0c1e1a66b	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_x86_64_appstream
	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_x86_64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.20.src.rpm	7b2721b1f96781c9d4da7c139edcbb361490e4f221d63e75126da699b7770336	-	ol10_x86_64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.20.x86_64.rpm	fc4e5838e4be1239affe719b17a4b60318c6515b47194679c4f74ddc17fb5893	-	ol10_x86_64_appstream
	vim-common-9.1.083-9.0.1.el10_2.20.x86_64.rpm	33096b302f8ae621621d16bf4f34266922e1f90b01aef9723551fc625d9be26a	-	ol10_x86_64_appstream
	vim-data-9.1.083-9.0.1.el10_2.20.noarch.rpm	002a36f4d00e5adde04931c88df620d69572f90cd7cccbe8bf5cf1dc1c83f24b	-	ol10_x86_64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.20.noarch.rpm	002a36f4d00e5adde04931c88df620d69572f90cd7cccbe8bf5cf1dc1c83f24b	-	ol10_x86_64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.20.x86_64.rpm	eb6a2232ff8cf4a051b0df42c1e338985c8ce3a761784a1508b0667381218371	-	ol10_x86_64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.20.noarch.rpm	311d2742feb8e0c031a36cd20d32f19e7c111e5d9f46b8b1842b10a88929a5f0	-	ol10_x86_64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.20.noarch.rpm	311d2742feb8e0c031a36cd20d32f19e7c111e5d9f46b8b1842b10a88929a5f0	-	ol10_x86_64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.20.x86_64.rpm	c6e34c200df32df704194867ec6f158a84889537bf325c28e7adf5b2827530d1	-	ol10_x86_64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.20.x86_64.rpm	c6e34c200df32df704194867ec6f158a84889537bf325c28e7adf5b2827530d1	-	ol10_x86_64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.20.x86_64.rpm	b12aa98ff3a02869b859670be7b1ee91f127f880aa677f7b7ddd552ec3861890	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team