[El-errata] ELSA-2026-38510 Important: Oracle Linux 8 vim security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Jul 14 16:05:16 UTC 2026


Oracle Linux Security Advisory ELSA-2026-38510

http://linux.oracle.com/errata/ELSA-2026-38510.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
vim-X11-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-common-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-enhanced-8.0.1763-27.0.1.el8_10.x86_64.rpm
vim-filesystem-8.0.1763-27.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-27.0.1.el8_10.x86_64.rpm

aarch64:
vim-X11-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-common-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-enhanced-8.0.1763-27.0.1.el8_10.aarch64.rpm
vim-filesystem-8.0.1763-27.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-27.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/vim-8.0.1763-27.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-46483
CVE-2026-47162
CVE-2026-47167
CVE-2026-52858




Description of changes:

[8.0.1763-27.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]

[2:8.0.1763-27]
- RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave
- RHEL-186648 CVE-2026-52858 vim: possible code execution with python3complete

[2:8.0.1763-26]
- CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:8.0.1763-25]
- RHEL-178234 CVE-2026-46483 vim: command injection in tar plugin via
  shellescape




More information about the El-errata mailing list