Synopsis: Moderate: vim security update
Advisory ID: SLSA-2016:2972-1
Issue Date: 2016-12-21
CVE Numbers: CVE-2016-1248
—
Security Fix(es):
* A vulnerability was found in vim in how certain modeline options were
treated. An attacker could craft a file that, when opened in vim with
modelines enabled, could execute arbitrary commands with privileges of the
user running vim. (CVE-2016-1248)
—
SL6
x86_64
vim-X11-7.4.629-5.el6_8.1.x86_64.rpm
vim-common-7.4.629-5.el6_8.1.x86_64.rpm
vim-debuginfo-7.4.629-5.el6_8.1.x86_64.rpm
vim-enhanced-7.4.629-5.el6_8.1.x86_64.rpm
vim-filesystem-7.4.629-5.el6_8.1.x86_64.rpm
vim-minimal-7.4.629-5.el6_8.1.x86_64.rpm
i386
vim-X11-7.4.629-5.el6_8.1.i686.rpm
vim-common-7.4.629-5.el6_8.1.i686.rpm
vim-debuginfo-7.4.629-5.el6_8.1.i686.rpm
vim-enhanced-7.4.629-5.el6_8.1.i686.rpm
vim-filesystem-7.4.629-5.el6_8.1.i686.rpm
vim-minimal-7.4.629-5.el6_8.1.i686.rpm
SL7
x86_64
vim-X11-7.4.160-1.el7_3.1.x86_64.rpm
vim-common-7.4.160-1.el7_3.1.x86_64.rpm
vim-debuginfo-7.4.160-1.el7_3.1.x86_64.rpm
vim-enhanced-7.4.160-1.el7_3.1.x86_64.rpm
vim-filesystem-7.4.160-1.el7_3.1.x86_64.rpm
vim-minimal-7.4.160-1.el7_3.1.x86_64.rpm
– Scientific Linux Development Team
