[El-errata] ELSA-2026-38510 Important: Oracle Linux 8 vim security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jul 14 16:05:16 UTC 2026
Oracle Linux Security Advisory ELSA-2026-38510
http://linux.oracle.com/errata/ELSA-2026-38510.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
vim-X11-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-common-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-enhanced-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-filesystem-8.0.1763-27.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-27.0.1.el8_10.x86_64.rpm
aarch64:
vim-X11-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-common-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-enhanced-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-filesystem-8.0.1763-27.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-27.0.1.el8_10.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/vim-8.0.1763-27.0.1.el8_10.src.rpm
Related CVEs:
CVE-2026-46483
CVE-2026-47162
CVE-2026-47167
CVE-2026-52858
Description of changes:
[8.0.1763-27.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]
[2:8.0.1763-27]
- RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave
- RHEL-186648 CVE-2026-52858 vim: possible code execution with python3complete
[2:8.0.1763-26]
- CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
[2:8.0.1763-25]
- RHEL-178234 CVE-2026-46483 vim: command injection in tar plugin via
shellescape
More information about the El-errata
mailing list