Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1551-1

Опубликовано: 13 июн. 2019
Источник: suse-cvrf

Описание

Security update for neovim

This update for neovim fixes the following issues:

Security issue fixed:

  • CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443).

Список пакетов

SUSE Package Hub 15
neovim-0.3.1-bp150.2.6.1
neovim-lang-0.3.1-bp150.2.6.1
openSUSE Leap 15.0
neovim-0.3.1-bp150.2.6.1
neovim-lang-0.3.1-bp150.2.6.1
openSUSE Leap 15.1
neovim-0.3.1-bp150.2.6.1
neovim-lang-0.3.1-bp150.2.6.1

Ссылки

Описание

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

Затронутые продукты
SUSE Package Hub 15:neovim-0.3.1-bp150.2.6.1
SUSE Package Hub 15:neovim-lang-0.3.1-bp150.2.6.1
openSUSE Leap 15.0:neovim-0.3.1-bp150.2.6.1
openSUSE Leap 15.0:neovim-lang-0.3.1-bp150.2.6.1
Ссылки
Уязвимость openSUSE-SU-2019:1551-1