ELSA-2026-75768

ELSA-2026-75768 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[8.2.2637-26.0.1.el9_8.23]
- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-26.23]
- RHEL-271037 vim: ex command injection via crafted filename in
sign_jump()

[2:8.2.2637-26.22]
- RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution
during C omni-completion via crafted typeref

[2:8.2.2637-26.21]
- RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator

[2:8.2.2637-26.20]
- RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()

[2:8.2.2637-26.19]
- RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()

[2:8.2.2637-26.18]
- RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()

[2:8.2.2637-26.17]
- RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup in zsh.vim ftplugin

[2:8.2.2637-26.16]
- RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo()

[2:8.2.2637-26.15]
- RHEL-240370 CVE-2026-73078 vim: code injection in netrw via
bookmarks

Related CVEs

CVE-2026-73073

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_aarch64_appstream
	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_aarch64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_aarch64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.23.aarch64.rpm	1316216e197d3ad1a7e8603c20f0607d65d15947a7c14678ad7a2fe7d4bb6769	-	ol9_aarch64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.23.aarch64.rpm	efec59826320f7cc3cd2932adc53ab89016f30c8632c9d8ffa9435ff22a9feba	-	ol9_aarch64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.23.aarch64.rpm	51a451fed4c9b602a28621a1607e3f6374a443e64106b45055ad583849e26ea0	-	ol9_aarch64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.23.noarch.rpm	cba4d62207fc73e96ba179ebd9d4e697963bea9eced1d2c34fa42b3a576f4f78	-	ol9_aarch64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.23.noarch.rpm	cba4d62207fc73e96ba179ebd9d4e697963bea9eced1d2c34fa42b3a576f4f78	-	ol9_aarch64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.23.aarch64.rpm	5818f18b27a768d5e345b439d5e13121d34a48fcb58d674f884a885882752ec6	-	ol9_aarch64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.23.aarch64.rpm	5818f18b27a768d5e345b439d5e13121d34a48fcb58d674f884a885882752ec6	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_x86_64_appstream
	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_x86_64_baseos_latest
	vim-8.2.2637-26.0.1.el9_8.23.src.rpm	64341e612e639972dde842e94976529a0165f883536bffb67a714f8f68cacff0	-	ol9_x86_64_u8_baseos_patch
	vim-X11-8.2.2637-26.0.1.el9_8.23.x86_64.rpm	525eedb297eed22713f003bfb0549e76fdba537cc086d4e24b08b59cbd83905a	-	ol9_x86_64_appstream
	vim-common-8.2.2637-26.0.1.el9_8.23.x86_64.rpm	3b25bb172acb7d786917cb6da1ef1be961e096fb0ba1d8e56ea34645b66ec867	-	ol9_x86_64_appstream
	vim-enhanced-8.2.2637-26.0.1.el9_8.23.x86_64.rpm	38aac4c3e34aeb381418a2444b12de0f92e7c290a489347949a14f5bf3593f2a	-	ol9_x86_64_appstream
	vim-filesystem-8.2.2637-26.0.1.el9_8.23.noarch.rpm	cba4d62207fc73e96ba179ebd9d4e697963bea9eced1d2c34fa42b3a576f4f78	-	ol9_x86_64_baseos_latest
	vim-filesystem-8.2.2637-26.0.1.el9_8.23.noarch.rpm	cba4d62207fc73e96ba179ebd9d4e697963bea9eced1d2c34fa42b3a576f4f78	-	ol9_x86_64_u8_baseos_patch
	vim-minimal-8.2.2637-26.0.1.el9_8.23.x86_64.rpm	88815454864ae2b0948ee55bc8557505461ae604797b35a12b6ca87385fef1d9	-	ol9_x86_64_baseos_latest
	vim-minimal-8.2.2637-26.0.1.el9_8.23.x86_64.rpm	88815454864ae2b0948ee55bc8557505461ae604797b35a12b6ca87385fef1d9	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team