SUSE-SU-2019:1456-1

HIGH7.8

Security update for vim

Published Jun 11, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for vim fixes the following issue:

Security issue fixed:

CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443).

Affected Packages

gvim

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

7.4.326-17.3.1

vim

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

7.4.326-17.3.1

vim-data

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

7.4.326-17.3.1

References

ADVISORY

https://bugzilla.suse.com/1137443

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005543.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-12735/

WEB

https://www.suse.com/support/security/rating/

ADVISORY