Red Hat Security AdvisoryRHSA-2019:1947
vim security update
Released 2019-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) vim-2:7.4.160-2.el7_4.1, vim-common-2:7.4.160-2.el7_4.1, vim-enhanced-2:7.4.160-2.el7_4.1 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) vim-X11-2:7.4.160-2.el7_4.1
- Red Hat Enterprise Linux Server EUS (v. 7.4) vim-2:7.4.160-2.el7_4.1, vim-X11-2:7.4.160-2.el7_4.1, vim-common-2:7.4.160-2.el7_4.1 +3
Fixes 1 record
Priority MEDIUM 55
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input…
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.18964 · Published 2019-06-05 · Partial fix CWE-78
