RLSA-2026:38510

Security

Mirrored from RHSA-2026:38510

Issued at: 2026-08-11

Updated at: 2026-08-12

Advisory content derived from Red Hat RHSA-2026:38510, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: vim security update

Description

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: command injection when decompressing .tgz archives (CVE-2026-46483)

* vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)

* vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)

* vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2477915

2487964

2487981

2487996

CVEs

CVE-2026-46483

CVE-2026-47162

CVE-2026-47167

CVE-2026-52858

Affected packages

Rocky Linux 8 x86_64 - BaseOS

vim-2:8.0.1763-27.el8_10.src.rpm

vim-debuginfo-2:8.0.1763-27.el8_10.x86_64.rpm

vim-debugsource-2:8.0.1763-27.el8_10.x86_64.rpm

vim-minimal-2:8.0.1763-27.el8_10.x86_64.rpm

vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - BaseOS

vim-2:8.0.1763-27.el8_10.src.rpm

vim-debuginfo-2:8.0.1763-27.el8_10.aarch64.rpm

vim-debugsource-2:8.0.1763-27.el8_10.aarch64.rpm

vim-minimal-2:8.0.1763-27.el8_10.aarch64.rpm

vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64.rpm

Rocky Linux 8 aarch64 - AppStream

vim-common-2:8.0.1763-27.el8_10.aarch64.rpm

vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64.rpm

vim-enhanced-2:8.0.1763-27.el8_10.aarch64.rpm

vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64.rpm

vim-filesystem-2:8.0.1763-27.el8_10.noarch.rpm

vim-X11-2:8.0.1763-27.el8_10.aarch64.rpm

vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

vim-common-2:8.0.1763-27.el8_10.x86_64.rpm

vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64.rpm

vim-enhanced-2:8.0.1763-27.el8_10.x86_64.rpm

vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64.rpm

vim-filesystem-2:8.0.1763-27.el8_10.noarch.rpm

vim-X11-2:8.0.1763-27.el8_10.x86_64.rpm

vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64.rpm