- What: Security update for vim released
- Impact: Fixes command injection vulnerability
Red Hat Product Errata RHSA-2026:28210 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28210 - Security Advisory Overview Updated Packages Synopsis Moderate: vim security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2461614 - CVE-2026-41411 vim: Vim: Command injection allows arbitrary code execution via malicious tag files CVEs CVE-2026-41411 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM vim-9.1.083-9.el10_2.4.src.rpm SHA-256: ab9e4e11b27d40fe145532dcba3fb2b0eb623483a718c3ff6cd04d249f43b615 x86_64 vim-X11-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 240cd72ff9de894a97080a67d745596bc21b5a015c3bed2362dd202feac4f0a2 vim-X11-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 632c17f50daaa913c8f5ca18a36406add2cea61e6f9935275124b4f50d35ceae vim-X11-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 632c17f50daaa913c8f5ca18a36406add2cea61e6f9935275124b4f50d35ceae vim-common-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 353aad784023e91f6581916aa166de42e90dea73db0a1e18d9b42067a49a4345 vim-data-9.1.083-9.el10_2.4.noarch.rpm SHA-256: bb00d38b3f81c06fa957d1df8f6415e54f602af581f33c03c1bb70554830fe33 vim-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: f8dc383b9e9f98bc565bd4bfc82b580bbf00433bc427f6eea606f02883d1c9fd vim-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: f8dc383b9e9f98bc565bd4bfc82b580bbf00433bc427f6eea606f02883d1c9fd vim-debugsource-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 59e2b431ed1719f6710a752b3f5297cc4271d7b6f82d0557062ee0e828bfb99d vim-debugsource-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 59e2b431ed1719f6710a752b3f5297cc4271d7b6f82d0557062ee0e828bfb99d vim-enhanced-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 30f598c2b3966aa43d2150418cf30cee9c9e16ea75d30763c05ea7f622721c5d vim-enhanced-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 83a3966e91f7e34070714f56742b73894aa9fe0862e779e2181847861fecba54 vim-enhanced-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 83a3966e91f7e34070714f56742b73894aa9fe0862e779e2181847861fecba54 vim-filesystem-9.1.083-9.el10_2.4.noarch.rpm SHA-256: 8f40c7b1290040c085a42474a73d8aeaa0c5dcadbbb2c1bb096d705f7ce9cfb2 vim-minimal-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 5b2180f634a79257e896ac07070c3d9babbd25fb70bce289f74a3b6da2749373 vim-minimal-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 1ab107c857ffbf2668ce1689a36c9b03113fe8dfdb60c97aabe23c66ee32fe5e vim-minimal-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 1ab107c857ffbf2668ce1689a36c9b03113fe8dfdb60c97aabe23c66ee32fe5e xxd-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: b22468e847ef4e2f5ccc36b6f62ab5749aa02b8a173345749c504e3690e76e8b xxd-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: e3af3f9b4527073b8c53c24e1d5c025b4ead405456fb5c2ef4f2a6e00f71b921 xxd-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: e3af3f9b4527073b8c53c24e1d5c025b4ead405456fb5c2ef4f2a6e00f71b921 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM vim-9.1.083-9.el10_2.4.src.rpm SHA-256: ab9e4e11b27d40fe145532dcba3fb2b0eb623483a718c3ff6cd04d249f43b615 x86_64 vim-X11-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 240cd72ff9de894a97080a67d745596bc21b5a015c3bed2362dd202feac4f0a2 vim-X11-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 632c17f50daaa913c8f5ca18a36406add2cea61e6f9935275124b4f50d35ceae vim-X11-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 632c17f50daaa913c8f5ca18a36406add2cea61e6f9935275124b4f50d35ceae vim-common-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 353aad784023e91f6581916aa166de42e90dea73db0a1e18d9b42067a49a4345 vim-data-9.1.083-9.el10_2.4.noarch.rpm SHA-256: bb00d38b3f81c06fa957d1df8f6415e54f602af581f33c03c1bb70554830fe33 vim-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: f8dc383b9e9f98bc565bd4bfc82b580bbf00433bc427f6eea606f02883d1c9fd vim-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: f8dc383b9e9f98bc565bd4bfc82b580bbf00433bc427f6eea606f02883d1c9fd vim-debugsource-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 59e2b431ed1719f6710a752b3f5297cc4271d7b6f82d0557062ee0e828bfb99d vim-debugsource-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 59e2b431ed1719f6710a752b3f5297cc4271d7b6f82d0557062ee0e828bfb99d vim-enhanced-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 30f598c2b3966aa43d2150418cf30cee9c9e16ea75d30763c05ea7f622721c5d vim-enhanced-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 83a3966e91f7e34070714f56742b73894aa9fe0862e779e2181847861fecba54 vim-enhanced-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 83a3966e91f7e34070714f56742b73894aa9fe0862e779e2181847861fecba54 vim-filesystem-9.1.083-9.el10_2.4.noarch.rpm SHA-256: 8f40c7b1290040c085a42474a73d8aeaa0c5dcadbbb2c1bb096d705f7ce9cfb2 vim-minimal-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 5b2180f634a79257e896ac07070c3d9babbd25fb70bce289f74a3b6da2749373 vim-minimal-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 1ab107c857ffbf2668ce1689a36c9b03113fe8dfdb60c97aabe23c66ee32fe5e vim-minimal-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: 1ab107c857ffbf2668ce1689a36c9b03113fe8dfdb60c97aabe23c66ee32fe5e xxd-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: b22468e847ef4e2f5ccc36b6f62ab5749aa02b8a173345749c504e3690e76e8b xxd-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: e3af3f9b4527073b8c53c24e1d5c025b4ead405456fb5c2ef4f2a6e00f71b921 xxd-debuginfo-9.1.083-9.el10_2.4.x86_64.rpm SHA-256: e3af3f9b4527073b8c53c24e1d5c025b4ead405456fb5c2ef4f2a6e00f71b921 Red Hat Enterprise Linux for IBM z Systems 10 SRPM vim-9.1.083-9.el10_2.4.src.rpm SHA-256: ab9e4e11b27d40fe145532dcba3fb2b0eb623483a718c3ff6cd04d249f43b615 s390x vim-X11-9.1.083-9.el10_2.4.s390x.rpm SHA-256: d176ed20bfa189061ab979344c39f50fd0ef7c76215999c7b218e2852e6f1390 vim-X11-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: f01dd059a2b70affd2fab1fa1751a2bad30fd8cb76f09fe94734020735336f08 vim-X11-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: f01dd059a2b70affd2fab1fa1751a2bad30fd8cb76f09fe94734020735336f08 vim-common-9.1.083-9.el10_2.4.s390x.rpm SHA-256: d7a86f6950143e0558a786e359bb47ac45a72765cc5108278ec5d4d552da499f vim-data-9.1.083-9.el10_2.4.noarch.rpm SHA-256: bb00d38b3f81c06fa957d1df8f6415e54f602af581f33c03c1bb70554830fe33 vim-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: ee784e0ee94c313665b39e5e929fa1ce12ac8b8e229a660f07acb54e6a17ee95 vim-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: ee784e0ee94c313665b39e5e929fa1ce12ac8b8e229a660f07acb54e6a17ee95 vim-debugsource-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 6f8d8ab51a9fa193f9e8f56912e96741561b2e0a96e5e4f1f280778b431e1b6d vim-debugsource-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 6f8d8ab51a9fa193f9e8f56912e96741561b2e0a96e5e4f1f280778b431e1b6d vim-enhanced-9.1.083-9.el10_2.4.s390x.rpm SHA-256: d50a674177a748df228b50b015e1aba351c164544153a932af6a00cf1b434d65 vim-enhanced-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: d0c0f6adcdc9bdeb92c3d5201bb8141db19dc74377db0153bc45edacc31c35ce vim-enhanced-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: d0c0f6adcdc9bdeb92c3d5201bb8141db19dc74377db0153bc45edacc31c35ce vim-filesystem-9.1.083-9.el10_2.4.noarch.rpm SHA-256: 8f40c7b1290040c085a42474a73d8aeaa0c5dcadbbb2c1bb096d705f7ce9cfb2 vim-minimal-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 4f73f416570d9be2288960c4515913fd357b340db67ce4e7e2719174e5d2ac26 vim-minimal-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: e5341b2a0440f929dd228684f59ccfb7a4ca4158f62a29f3cf2e3ea291b96a82 vim-minimal-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: e5341b2a0440f929dd228684f59ccfb7a4ca4158f62a29f3cf2e3ea291b96a82 xxd-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 6b8d001291e58bc2f8e4c91970f7409009f5bfd424aa7720b4f44e8e816d3104 xxd-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 5816c3fa5cc2ec014ffae679374f87e4ec8e1f69a77907927566337ea446ec4d xxd-debuginfo-9.1.083-9.el10_2.4.s390x.rpm SHA-256: 5816c3fa5cc2ec014ffae679374f87e4ec8e1f69a77907927566337ea446ec4d Red Hat Enterprise Li