OVMSA-2019-0036

OVMSA-2019-0036 - vim security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-08-01

Description

[2:7.4.629-5.2]
- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros

[7.4.629-5.1]
- add fix for CVE-2016-1248

Related CVEs

CVE-2019-12735

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	vim-7.4.629-5.el6_10.2.src.rpm	64073b248835c59872721158ab22414c2308d15b0ea2979f810426bf675df730	-	ovm3_x86_64_3.3_patch
	vim-minimal-7.4.629-5.el6_10.2.x86_64.rpm	3956318605f910ef5a8e950fc44dd7ec0c6402472207ad2c4225c10f47b54a95	-	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	vim-7.4.629-5.el6_10.2.src.rpm	64073b248835c59872721158ab22414c2308d15b0ea2979f810426bf675df730	-	ovm34_x86_64_latest
	vim-minimal-7.4.629-5.el6_10.2.x86_64.rpm	3956318605f910ef5a8e950fc44dd7ec0c6402472207ad2c4225c10f47b54a95	-	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team