Red Hat Security AdvisoryRHSA-2019:1619
vim security update
Released 2019-06-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) vim-X11-2:8.0.1763-11.el8_0, vim-common-2:8.0.1763-11.el8_0, vim-enhanced-2:8.0.1763-11.el8_0 +1
- Red Hat Enterprise Linux BaseOS (v. 8) vim-2:8.0.1763-11.el8_0, vim-minimal-2:8.0.1763-11.el8_0
- Red Hat Enterprise Linux Client (v. 7) vim-2:7.4.160-6.el7_6, vim-X11-2:7.4.160-6.el7_6, vim-common-2:7.4.160-6.el7_6 +3
- Red Hat Enterprise Linux ComputeNode (v. 7) vim-2:7.4.160-6.el7_6, vim-common-2:7.4.160-6.el7_6, vim-enhanced-2:7.4.160-6.el7_6 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) vim-X11-2:7.4.160-6.el7_6
- Red Hat Enterprise Linux Server (v. 7) vim-2:7.4.160-6.el7_6, vim-X11-2:7.4.160-6.el7_6, vim-common-2:7.4.160-6.el7_6 +3
- Red Hat Enterprise Linux Workstation (v. 7) vim-2:7.4.160-6.el7_6, vim-X11-2:7.4.160-6.el7_6, vim-common-2:7.4.160-6.el7_6 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) vim-2:7.4.160-6.el7_6, vim-X11-2:7.4.160-6.el7_6, vim-common-2:7.4.160-6.el7_6 +3
Fixes 1 record
Priority MEDIUM 55
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input…
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.18964 · Published 2019-06-05 · Partial fix CWE-78
