Oval Definition:oval:com.redhat.rhsa:def:20162972
Revision Date:2016-12-21Version:640
Title:RHSA-2016:2972: vim security update (Moderate)
Description:Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • A vulnerability was found in vim in how certain modeline options were treated. An attacker could craft a file that, when opened in vim with modelines enabled, could execute arbitrary commands with privileges of the user running vim. (CVE-2016-1248)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2016-1248
    RHSA-2016:2972
    RHSA-2016:2972-00
    RHSA-2016:2972-01
    RHSA-2016:2972-01
    Platform(s):Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • vim-X11 is earlier than 2:7.4.629-5.el6_8.1
  • AND vim-X11 is signed with Red Hat redhatrelease2 key
  • vim-common is earlier than 2:7.4.629-5.el6_8.1
  • AND vim-common is signed with Red Hat redhatrelease2 key
  • vim-enhanced is earlier than 2:7.4.629-5.el6_8.1
  • AND vim-enhanced is signed with Red Hat redhatrelease2 key
  • vim-filesystem is earlier than 2:7.4.629-5.el6_8.1
  • AND vim-filesystem is signed with Red Hat redhatrelease2 key
  • vim-minimal is earlier than 2:7.4.629-5.el6_8.1
  • AND vim-minimal is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • vim-X11 is earlier than 2:7.4.160-1.el7_3.1
  • AND vim-X11 is signed with Red Hat redhatrelease2 key
  • vim-common is earlier than 2:7.4.160-1.el7_3.1
  • AND vim-common is signed with Red Hat redhatrelease2 key
  • vim-enhanced is earlier than 2:7.4.160-1.el7_3.1
  • AND vim-enhanced is signed with Red Hat redhatrelease2 key
  • vim-filesystem is earlier than 2:7.4.160-1.el7_3.1
  • AND vim-filesystem is signed with Red Hat redhatrelease2 key
  • vim-minimal is earlier than 2:7.4.160-1.el7_3.1
  • AND vim-minimal is signed with Red Hat redhatrelease2 key
  • BACK