[ALSA-2026:38509] Important: vim security update
Type:
security
Severity:
important
Release date:
2026-08-13
Description:
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858) * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 vim-X11-9.1.083-9.el10_2.7.aarch64.rpm 90c0f42f38df6b919342b209ace1a867c347a6ad846c1ce5cc68cde4e52a6b0b
aarch64 vim-common-9.1.083-9.el10_2.7.aarch64.rpm b7e1ba4d040a8096f729c4993d146075ab2f5e3832ebc3e873f346a266bab56e
aarch64 vim-minimal-9.1.083-9.el10_2.7.aarch64.rpm b967bb6004477226e18dc4ff9525512604d9bb87a126c678ed11abbcbcaeca1d
aarch64 vim-enhanced-9.1.083-9.el10_2.7.aarch64.rpm c350d303d04389a13b978801b810e2353a20388e34c545c700a32da8522002ce
aarch64 xxd-9.1.083-9.el10_2.7.aarch64.rpm ebef73832fd92d9a7ff6a2e059c29a4ffa6f068c82e7fd894344913b062a60c1
noarch vim-data-9.1.083-9.el10_2.7.noarch.rpm 4e3624ed187ccd5c7be7997d65c63de93ee9b5d978903b2604f85cc453b796ef
noarch vim-filesystem-9.1.083-9.el10_2.7.noarch.rpm f7bfbed813a01aa330e1dae63131fd0bcdf692456f5aaf2857c6701a41fed2cf
ppc64le xxd-9.1.083-9.el10_2.7.ppc64le.rpm 1e378cdc38218fa31bc8c64b5c62f470c576d40cdb860b91b807de7c58331ad7
ppc64le vim-X11-9.1.083-9.el10_2.7.ppc64le.rpm 2b3a6f3c4199967320b506be93e6f2688abe82aad101d381e3e2f4eddbc5f5f0
ppc64le vim-enhanced-9.1.083-9.el10_2.7.ppc64le.rpm 3515246db3e1586ae3e0dbc208c0767da3ea44042bc4c25a08e2ec27a2908af3
ppc64le vim-minimal-9.1.083-9.el10_2.7.ppc64le.rpm 9a6ff13a35a37a7cb0cdeea608a2ef77bd2320069d48f17809fe80668dc8c477
ppc64le vim-common-9.1.083-9.el10_2.7.ppc64le.rpm f89f96ef405bd645d7a019e8501a8c60fac3e2375c77197f13d3784980a08630
s390x xxd-9.1.083-9.el10_2.7.s390x.rpm 34926c13f6de7314fc1dcb09a49a448b997b83310a4041dd22abb2f2359f56c4
s390x vim-X11-9.1.083-9.el10_2.7.s390x.rpm 3a0352e1651fdb923a3120aed177977556275bcd83b798fe8cc058b2fef40f8d
s390x vim-enhanced-9.1.083-9.el10_2.7.s390x.rpm 9433b90af6f8ef52bdabb8e0e969322c24bdb08999e7dd6a099d2e2396ccd8bf
s390x vim-common-9.1.083-9.el10_2.7.s390x.rpm cf682260105f96ccc1c372bb4bcbda892589415ded4a0910f9cbbd8044d4529b
s390x vim-minimal-9.1.083-9.el10_2.7.s390x.rpm e3f91ded0dd9748aad8d0bffc187db6d89e85463494c2f3a5ce80c008f3451e2
x86_64 xxd-9.1.083-9.el10_2.7.x86_64.rpm 60b6d5b70047495ffd66ada161dfa8ee78b52a67c0bd1c070c74c496f68e5df1
x86_64 vim-enhanced-9.1.083-9.el10_2.7.x86_64.rpm 91ad4b798367510f98fcec834e2cf8c07271b218c0f90756fc49b14da3b85556
x86_64 vim-minimal-9.1.083-9.el10_2.7.x86_64.rpm 9b92246ea5a7a9bc56101783ffd5e94e5ed93e797251313cb663624f6398ae73
x86_64 vim-common-9.1.083-9.el10_2.7.x86_64.rpm b9e321e9e383bc4884c53851b93b268150e13f0323e815fd145f7d7cc5094e70
x86_64 vim-X11-9.1.083-9.el10_2.7.x86_64.rpm f537734adfb652c7f0df843804fe29fe4a05ed8761ed1b481fa3ba3f0d99b5f7
x86_64_v2 vim-minimal-9.1.083-9.el10_2.7.x86_64_v2.rpm 14917f9460499abafd7a6482aae0a67f4dccf8d8d485a0f38c549e05ac8ebe0b
x86_64_v2 vim-X11-9.1.083-9.el10_2.7.x86_64_v2.rpm 260ecf6a4cd51cd6b13a22a0bb827c83bbf3bdd15acb86b40e1224a8fb81198f
x86_64_v2 vim-enhanced-9.1.083-9.el10_2.7.x86_64_v2.rpm 57e1a1f02300d87eb8b3dfe91fbb69c6d95847cdf36b482f976cdf6a0b6f74b6
x86_64_v2 vim-common-9.1.083-9.el10_2.7.x86_64_v2.rpm de2d57b57c3a5985910afd4e7df7a2c65fe669a04ad3fcb90b9bd41af867b9c9
x86_64_v2 xxd-9.1.083-9.el10_2.7.x86_64_v2.rpm e8054467483a2f4c3cb5b06dc05e52e23e140cdc5649902934112bc4ec605012
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.