Red Hat Security AdvisoryRHSA-2019:1774
vim security update
Released 2019-07-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) vim-2:7.4.629-5.el6_10.2, vim-X11-2:7.4.629-5.el6_10.2, vim-common-2:7.4.629-5.el6_10.2 +3
- Red Hat Enterprise Linux HPC Node (v. 6) vim-2:7.4.629-5.el6_10.2, vim-common-2:7.4.629-5.el6_10.2, vim-enhanced-2:7.4.629-5.el6_10.2 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) vim-X11-2:7.4.629-5.el6_10.2
- Red Hat Enterprise Linux Server (v. 6) vim-2:7.4.629-5.el6_10.2, vim-X11-2:7.4.629-5.el6_10.2, vim-common-2:7.4.629-5.el6_10.2 +3
- Red Hat Enterprise Linux Workstation (v. 6) vim-2:7.4.629-5.el6_10.2, vim-X11-2:7.4.629-5.el6_10.2, vim-common-2:7.4.629-5.el6_10.2 +3
Fixes 1 record
Priority MEDIUM 55
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input…
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.18964 · Published 2019-06-05 · Partial fix CWE-78
