Oracle Errata System Oracle Linux 5.11 2026-06-23T10:14:00 Oracle Linux 9 [2:8.2.2637-26.0.1.el9_8.4] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-26.4] - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass [2:8.2.2637-26.3] - Related: RHEL-159630 rebuild to build with exception target [2:8.2.2637-26.2] - remove -O0 from flags [2:8.2.2637-26.1] - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function [2:8.2.2637-26] - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file [2:8.2.2637-25] - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim [2:8.2.2637-24] - RHEL-143726 sudo not able to spawn 'vi' command when NOEXEC is used to prevent escaping to shell IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-34982 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:8:baseos_base cpe:/o:oracle:linux:9::baseos_latest