MGASA-2020-0082
- Source
- https://advisories.mageia.org/MGASA-2020-0082.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0082.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0082
- Related
- Published
- 2020-02-13T10:49:00Z
- Modified
- 2020-02-13T10:25:04Z
- Summary
- Updated vim and neovim packages fix security vulnerability
- Details
-
Updated vim and neovim package fixes security vulnerability:
It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the
:source!command when executed in a sandbox. This allows remote attackers to take advantage of the modeline feature to inject arbitrary commands when a specially crafted file is opened (CVE-2019-12735). - References
- Credits
-
-
- Mageia - COORDINATOR
-