ELSA-2026-66366-0

ELSA-2026-66366-0 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-10

Description

[8.2.2637-26.0.1.el9_8.21]
- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-26.21]
- RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator

[2:8.2.2637-26.20]
- RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()

[2:8.2.2637-26.19]
- RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()

[2:8.2.2637-26.18]
- RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()

[2:8.2.2637-26.17]
- RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup in zsh.vim ftplugin

[2:8.2.2637-26.16]
- RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo()

[2:8.2.2637-26.15]
- RHEL-240370 CVE-2026-73078 vim: code injection in netrw via
bookmarks

[2:8.2.2637-26.14]
- RHEL-242114 CVE-2026-73076 vim: code execution via
.VimballRecord file

[2:8.2.2637-26.13]
- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
PHP omni-completion

Related CVEs

CVE-2026-28420

CVE-2026-52859

CVE-2026-55892

CVE-2026-59857

CVE-2026-73072

CVE-2026-73076

CVE-2026-73077

CVE-2026-73078

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_aarch64_appstream
	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_aarch64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_aarch64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.21.aarch64.rpm	26ed4e825d7721bdeea7c1231faa43418e2933284f238212b1796bcaeb6c72f0	-	ol9_aarch64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.21.aarch64.rpm	66d1ef106520c22e9cead3966bb1a069fd8ed7b8dc6af81b4a223a8f20ed2996	-	ol9_aarch64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.21.aarch64.rpm	cf5f028de20b6893287f7f7183632afedb8f1d63fcf85e6008cca5a8e71ad752	-	ol9_aarch64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.21.noarch.rpm	f3fccc427babdcf0a1c04d631ebd07f8011f1e6f6e6db8dd66c7208f2b2fcf90	-	ol9_aarch64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.21.noarch.rpm	f3fccc427babdcf0a1c04d631ebd07f8011f1e6f6e6db8dd66c7208f2b2fcf90	-	ol9_aarch64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.21.aarch64.rpm	1a0542e2d7dab3c6124ad9414d0a8f3d7cb29a996cd899cc01c6822acfe50323	-	ol9_aarch64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.21.aarch64.rpm	1a0542e2d7dab3c6124ad9414d0a8f3d7cb29a996cd899cc01c6822acfe50323	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_x86_64_appstream
	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_x86_64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.21.src.rpm	5bebd8c8044240c0b2aed567a8fe563cca88fc7d23f461da42375663be5fc53a	-	ol9_x86_64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.21.x86_64.rpm	3281bfae27ebfea6f97041ed4f7d2bfcc06bec6c261cd5212a6c50df8a401708	-	ol9_x86_64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.21.x86_64.rpm	4099bf701ee6c3e776aef2b12e3ffd3c81db50eb995a9a1ce16c93d9dded5dae	-	ol9_x86_64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.21.x86_64.rpm	5c29cce87009ab53c5a9cbde383ba75956d35753e1cc74f6b1aaf148988400ca	-	ol9_x86_64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.21.noarch.rpm	f3fccc427babdcf0a1c04d631ebd07f8011f1e6f6e6db8dd66c7208f2b2fcf90	-	ol9_x86_64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.21.noarch.rpm	f3fccc427babdcf0a1c04d631ebd07f8011f1e6f6e6db8dd66c7208f2b2fcf90	-	ol9_x86_64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.21.x86_64.rpm	1ec1ff4e0ef9bfd34b2638c34ddf32be6306242cbcbdd8f923d5d319bf2fe07a	-	ol9_x86_64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.21.x86_64.rpm	1ec1ff4e0ef9bfd34b2638c34ddf32be6306242cbcbdd8f923d5d319bf2fe07a	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team