ALSA-2026:38510

[ALSA-2026:38510] Important: vim security update

Type:

security

Severity:

important

Release date:

2026-08-13

Description:

Vim (Vi IMproved) is an updated and improved version of the vi editor.  

Security Fix(es):  

  * vim: command injection when decompressing .tgz archives (CVE-2026-46483)
  * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)
  * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)
  * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	vim-minimal-8.0.1763-27.el8_10.aarch64.rpm	3371f8d73446f57c75e9e1f46c501318987725fecb0b23b964445f4aa78e594b
aarch64	vim-enhanced-8.0.1763-27.el8_10.aarch64.rpm	597039411cbb1f98b0de816d51f1838869f933e8d1f81aa2a1dcbf35b1dd0c81
aarch64	vim-common-8.0.1763-27.el8_10.aarch64.rpm	ae123e85033ecb95c024298c84ac3492c70e89bef7b55979881534117afa781b
aarch64	vim-X11-8.0.1763-27.el8_10.aarch64.rpm	eb7372e1ab8ca055f0f17d185e72cfc59e0907b31d5e5c4e258fee26a6683bbf
noarch	vim-filesystem-8.0.1763-27.el8_10.noarch.rpm	431126c5505aabcb493bf80f60271868935c6386d821a95cf8bc9cbdc2396d46
ppc64le	vim-minimal-8.0.1763-27.el8_10.ppc64le.rpm	02a205efa5408e80786fbf869099f374b4e28a7b57bd12f62531f1d8c0f51a25
ppc64le	vim-enhanced-8.0.1763-27.el8_10.ppc64le.rpm	5b3b148b2e388973a67de794dfc34097e5a3486c33378efe66bda49bc95304a1
ppc64le	vim-X11-8.0.1763-27.el8_10.ppc64le.rpm	f6514aebf82be5d0c8c07810e7c6c9ee236227faa545f5d5846d5e92ffd88707
ppc64le	vim-common-8.0.1763-27.el8_10.ppc64le.rpm	ff82b5593392b757852c574799ad9ccd3c8a2c139f8f3541332962dab16548d3
s390x	vim-minimal-8.0.1763-27.el8_10.s390x.rpm	461f5cd205b44c0cc83a210fd8ec9d5e018aa8ffd2a851d542a0711308cff609
s390x	vim-common-8.0.1763-27.el8_10.s390x.rpm	66ae13199d52a900b2d4a6f470b4b002bd16d17ebb6488b8d811333b4eedb035
s390x	vim-enhanced-8.0.1763-27.el8_10.s390x.rpm	c99cab8df505b75f1e45595c4c2a33f66f4d5bd168a635109835e48e747d0d54
s390x	vim-X11-8.0.1763-27.el8_10.s390x.rpm	dfc706ee42e16a098bfa284d169d553045d42233a623ef69596548551b275020
x86_64	vim-X11-8.0.1763-27.el8_10.x86_64.rpm	0edac2fe082e6ba99a1836b4158f48e3e287b75adfa7caf2eaa363b9d248ce5d
x86_64	vim-enhanced-8.0.1763-27.el8_10.x86_64.rpm	3d798f0302c65ffb9ba3a0caf6bbcaaa126333c67f423549336350d246cf8a7b
x86_64	vim-minimal-8.0.1763-27.el8_10.x86_64.rpm	8a5056652c634be5ad206d2589e0b2482e79a54984876e39ae79d9e3354cf307
x86_64	vim-common-8.0.1763-27.el8_10.x86_64.rpm	f2323a19facbb54d4795397c67fa927ef2e632b9064ed1cc275ea837b6a58b94

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.