ELSA-2026-75769

ELSA-2026-75769 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[9.1.083-9.0.1.el10_2.22]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.22]
- RHEL-271045 ex command injection via crafted filename in sign_jump()

[2:9.1.083-9.21]
- RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during
C omni-completion

[2:9.1.083-9.20]
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator

[2:9.1.083-9.19]
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
dump_prefixes()

[2:9.1.083-9.18]
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
spell_soundfold_sal()

[2:9.1.083-9.17]
- RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in
update_snapshot()

[2:9.1.083-9.16]
- RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in
set_sofo()

[2:9.1.083-9.15]
- RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via
keyword lookup

[2:9.1.083-9.14]
- RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks

Related CVEs

CVE-2026-73073

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_aarch64_appstream
	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_aarch64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_aarch64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.22.aarch64.rpm	fb1cca5cbca5a758e6edcd898dd25a2d37f6c8f3f7f5f8e7ee3d9676348e447e	-	ol10_aarch64_appstream
	vim-common-9.1.083-9.0.1.el10_2.22.aarch64.rpm	d2842b413aff7853f34a178786c2b8c84994f40e6bb239a5c22930468ed8121c	-	ol10_aarch64_appstream
	vim-data-9.1.083-9.0.1.el10_2.22.noarch.rpm	7b4c8f40a08e6a9732b9707d9d32a55873f63e89703980a1a4bf1bc5df88fcbe	-	ol10_aarch64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.22.noarch.rpm	7b4c8f40a08e6a9732b9707d9d32a55873f63e89703980a1a4bf1bc5df88fcbe	-	ol10_aarch64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.22.aarch64.rpm	01dfedd4ef0ef0885d21cad4a62c42e643dec78a77dd1466310cd142ebaaa51a	-	ol10_aarch64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.22.noarch.rpm	87f85bf9ade28e500d3ba179e8577d2836ba9c14301323922e401e9c62d5f337	-	ol10_aarch64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.22.noarch.rpm	87f85bf9ade28e500d3ba179e8577d2836ba9c14301323922e401e9c62d5f337	-	ol10_aarch64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.22.aarch64.rpm	fb0a5f3868e3285a86a6232a3c91f5c325fe09f6015651bc5e28073a3fbc6fe7	-	ol10_aarch64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.22.aarch64.rpm	fb0a5f3868e3285a86a6232a3c91f5c325fe09f6015651bc5e28073a3fbc6fe7	-	ol10_aarch64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.22.aarch64.rpm	6357322554ced680aa0910b5532189eb1b52a0f8e388c847ff4ece617c4647e8	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_x86_64_appstream
	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_x86_64_baseos_latest
	vim-9.1.083-9.0.1.el10_2.22.src.rpm	fa0d683d31fd95a79324367bb62be1099b9a32d30bc27cae322c09f76aabfe79	-	ol10_x86_64_u2_baseos_patch
	vim-X11-9.1.083-9.0.1.el10_2.22.x86_64.rpm	023f928e9fe699bf09f8b9b631dff0a0ccd2e47b966778e095479ad82c0389a0	-	ol10_x86_64_appstream
	vim-common-9.1.083-9.0.1.el10_2.22.x86_64.rpm	1200398f182cd5838b5986dea0b113b98af3721c0e0e5c77d4f6222aa18b4f61	-	ol10_x86_64_appstream
	vim-data-9.1.083-9.0.1.el10_2.22.noarch.rpm	7b4c8f40a08e6a9732b9707d9d32a55873f63e89703980a1a4bf1bc5df88fcbe	-	ol10_x86_64_baseos_latest
	vim-data-9.1.083-9.0.1.el10_2.22.noarch.rpm	7b4c8f40a08e6a9732b9707d9d32a55873f63e89703980a1a4bf1bc5df88fcbe	-	ol10_x86_64_u2_baseos_patch
	vim-enhanced-9.1.083-9.0.1.el10_2.22.x86_64.rpm	5168951f42644eda2e8b62e5969a5415dfb84830d85af9ae089bc1553268fa97	-	ol10_x86_64_appstream
	vim-filesystem-9.1.083-9.0.1.el10_2.22.noarch.rpm	87f85bf9ade28e500d3ba179e8577d2836ba9c14301323922e401e9c62d5f337	-	ol10_x86_64_baseos_latest
	vim-filesystem-9.1.083-9.0.1.el10_2.22.noarch.rpm	87f85bf9ade28e500d3ba179e8577d2836ba9c14301323922e401e9c62d5f337	-	ol10_x86_64_u2_baseos_patch
	vim-minimal-9.1.083-9.0.1.el10_2.22.x86_64.rpm	dcfef299cbee1036a708659841838b62a6e711049e102a33e25a271112a125fc	-	ol10_x86_64_baseos_latest
	vim-minimal-9.1.083-9.0.1.el10_2.22.x86_64.rpm	dcfef299cbee1036a708659841838b62a6e711049e102a33e25a271112a125fc	-	ol10_x86_64_u2_baseos_patch
	xxd-9.1.083-9.0.1.el10_2.22.x86_64.rpm	2e92e2602ffe320007a22396900650066b3914837356bf363b688d51a75fb30a	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team