Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1562-1

Опубликовано: 17 июн. 2019
Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issue:

Security issue fixed:

  • CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443).

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.3
gvim-7.4.326-13.4.1
vim-7.4.326-13.4.1
vim-data-7.4.326-13.4.1

Ссылки

Описание

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

Затронутые продукты
openSUSE Leap 42.3:gvim-7.4.326-13.4.1
openSUSE Leap 42.3:vim-7.4.326-13.4.1
openSUSE Leap 42.3:vim-data-7.4.326-13.4.1
Ссылки
Уязвимость openSUSE-SU-2019:1562-1