Red Hat Security Advisory

RHSA-2016:2972

vim security update

Released 2016-12-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) vim-2:7.4.160-1.el7_3.1, vim-X11-2:7.4.160-1.el7_3.1, vim-common-2:7.4.160-1.el7_3.1 +3
Red Hat Enterprise Linux ComputeNode (v. 7) vim-2:7.4.160-1.el7_3.1, vim-common-2:7.4.160-1.el7_3.1, vim-enhanced-2:7.4.160-1.el7_3.1 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) vim-X11-2:7.4.160-1.el7_3.1
Red Hat Enterprise Linux Desktop (v. 6) vim-2:7.4.629-5.el6_8.1, vim-X11-2:7.4.629-5.el6_8.1, vim-common-2:7.4.629-5.el6_8.1 +3
Red Hat Enterprise Linux HPC Node (v. 6) vim-2:7.4.629-5.el6_8.1, vim-common-2:7.4.629-5.el6_8.1, vim-enhanced-2:7.4.629-5.el6_8.1 +2
Red Hat Enterprise Linux HPC Node Optional (v. 6) vim-X11-2:7.4.629-5.el6_8.1
Red Hat Enterprise Linux Server (v. 6) vim-2:7.4.629-5.el6_8.1, vim-X11-2:7.4.629-5.el6_8.1, vim-common-2:7.4.629-5.el6_8.1 +3
Red Hat Enterprise Linux Server (v. 7) vim-2:7.4.160-1.el7_3.1, vim-X11-2:7.4.160-1.el7_3.1, vim-common-2:7.4.160-1.el7_3.1 +3
Red Hat Enterprise Linux Workstation (v. 6) vim-2:7.4.629-5.el6_8.1, vim-X11-2:7.4.629-5.el6_8.1, vim-common-2:7.4.629-5.el6_8.1 +3
Red Hat Enterprise Linux Workstation (v. 7) vim-2:7.4.160-1.el7_3.1, vim-X11-2:7.4.160-1.el7_3.1, vim-common-2:7.4.160-1.el7_3.1 +3

Fixes 1 record

TI-2016-01146 CVE-2016-1248 · GHSA-6q4x-827v-ffwx

Improper input validation in vim before patch 8.0.0056

MEDIUM 55

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.25314 Published 2016-11-23 Partial fix CWE-20