FEDORA-2019-dcd49378b8 — security update for vim

stable

vim-8.1.1471-1.fc29

FEDORA-2019-dcd49378b8 created by zdohnal 5 years ago for Fedora 29

1717503 - Security issue: patch 8.1.1365: source command doesn't check for the sandbox

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-dcd49378b8

This update has been submitted for testing by zdohnal.

5 years ago

This update test gating status has been changed to 'waiting'.

5 years ago

This update test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

zdohnal edited this update.

5 years ago

zdohnal edited this update.

5 years ago

jflory7 commented & provided feedback 5 years ago

karma

Tested on Fedora 29 and noticed no changes to everyday usage. Thanks for patching this back to Fedora 29, I just heard about the CVE today.

BZ#1717503 Security issue: patch 8.1.1365: source command doesn't check for the sandbox

BZ#1717942 vim/neovim: arbitrary code execution vulnerability

BZ#1718308 CVE-2019-12735 vim/neovim: arbitrary command execution in getchar.c

BZ#1718312 CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [fedora-all]

x3mboy provided feedback 5 years ago

karma

BZ#1717503 Security issue: patch 8.1.1365: source command doesn't check for the sandbox

BZ#1717942 vim/neovim: arbitrary code execution vulnerability

BZ#1718308 CVE-2019-12735 vim/neovim: arbitrary command execution in getchar.c

BZ#1718312 CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [fedora-all]

lbazan provided feedback 5 years ago

karma

BZ#1717503 Security issue: patch 8.1.1365: source command doesn't check for the sandbox

BZ#1717942 vim/neovim: arbitrary code execution vulnerability

BZ#1718308 CVE-2019-12735 vim/neovim: arbitrary command execution in getchar.c

BZ#1718312 CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [fedora-all]

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

jlanda provided feedback 5 years ago

karma

BZ#1717503 Security issue: patch 8.1.1365: source command doesn't check for the sandbox

BZ#1717942 vim/neovim: arbitrary code execution vulnerability

BZ#1718308 CVE-2019-12735 vim/neovim: arbitrary command execution in getchar.c

BZ#1718312 CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [fedora-all]

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

vim-8.1.1471-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

modified

5 years ago

BZ#1717503 Security issue: patch 8.1.1365: source command doesn't check for the sandbox

BZ#1717942 vim/neovim: arbitrary code execution vulnerability

BZ#1718308 CVE-2019-12735 vim/neovim: arbitrary command execution in getchar.c

BZ#1718312 CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [fedora-all]

vim-8.1.1471-1.fc29

Automated Test Results

ignored