Oracle Errata System Oracle Linux 5.11 2026-07-22T17:49:25 Oracle Linux 10 [9.1.083-9.0.1.el10_2.7] - Remove upstream references [Orabug: 31197557] [2:9.1.083-9.7] - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete [2:9.1.083-9.6] - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin [2:9.1.083-9.5] - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin [2:9.1.083-9.4] - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files [2:9.1.083-9.3] - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass [2:9.1.083-9.2] - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass [2:9.1.083-9.1] - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function MODERATE Copyright 2026 Oracle, Inc. CVE-2026-41411 cpe:/o:oracle:linux:10:2:baseos_patch cpe:/a:oracle:linux:10::appstream cpe:/o:oracle:linux:10::baseos_latest