Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:14385-1

Опубликовано: 04 июн. 2020
Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issues:

  • CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces (bsc#1172225).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
gvim-7.2-8.21.6.2
vim-7.2-8.21.6.2
vim-base-7.2-8.21.6.2
vim-data-7.2-8.21.6.2
SUSE Linux Enterprise Server 11 SP4-LTSS
gvim-7.2-8.21.6.2
vim-7.2-8.21.6.2
vim-base-7.2-8.21.6.2
vim-data-7.2-8.21.6.2

Ссылки

Описание

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:gvim-7.2-8.21.6.2
SUSE Linux Enterprise Point of Sale 11 SP3:vim-7.2-8.21.6.2
SUSE Linux Enterprise Point of Sale 11 SP3:vim-base-7.2-8.21.6.2
SUSE Linux Enterprise Point of Sale 11 SP3:vim-data-7.2-8.21.6.2
Ссылки
Уязвимость SUSE-SU-2020:14385-1