Описание
Security update for vim
This update for vim fixes the following security issues:
- Fixed CVE-2016-1248 an arbitrary command execution vulnerability (bsc#1010685)
Список пакетов
openSUSE Leap 42.1
gvim-7.4.326-8.1
vim-7.4.326-8.1
vim-data-7.4.326-8.1
Ссылки
- E-Mail link for openSUSE-SU-2016:2992-1
- SUSE Security Ratings
Описание
vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
Затронутые продукты
openSUSE Leap 42.1:gvim-7.4.326-8.1
openSUSE Leap 42.1:vim-7.4.326-8.1
openSUSE Leap 42.1:vim-data-7.4.326-8.1
Ссылки
- CVE-2016-1248
- SUSE Bug 1010685
- SUSE Bug 1173534