Security update for vim SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1456-1 Final 1 1 2019-06-11T08:08:54Z current 2019-06-11T08:08:54Z 2019-06-11T08:08:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for vim This update for vim fixes the following issue: Security issue fixed: - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2019-1456,Image SLES12-SP5-Azure-Basic-On-Demand-2019-1456,Image SLES12-SP5-Azure-HPC-BYOS-2019-1456,Image SLES12-SP5-Azure-HPC-On-Demand-2019-1456,Image SLES12-SP5-Azure-SAP-BYOS-2019-1456,Image SLES12-SP5-Azure-SAP-On-Demand-2019-1456,Image SLES12-SP5-Azure-Standard-On-Demand-2019-1456,Image SLES12-SP5-EC2-BYOS-2019-1456,Image SLES12-SP5-EC2-ECS-On-Demand-2019-1456,Image SLES12-SP5-EC2-On-Demand-2019-1456,Image SLES12-SP5-EC2-SAP-BYOS-2019-1456,Image SLES12-SP5-EC2-SAP-On-Demand-2019-1456,Image SLES12-SP5-GCE-BYOS-2019-1456,Image SLES12-SP5-GCE-On-Demand-2019-1456,Image SLES12-SP5-GCE-SAP-BYOS-2019-1456,Image SLES12-SP5-GCE-SAP-On-Demand-2019-1456,Image SLES12-SP5-OCI-BYOS-BYOS-2019-1456,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-1456,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-1456,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-1456,SUSE-2019-1456,SUSE-OpenStack-Cloud-7-2019-1456,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-1456,SUSE-SLE-DESKTOP-12-SP3-2019-1456,SUSE-SLE-DESKTOP-12-SP4-2019-1456,SUSE-SLE-SAP-12-SP1-2019-1456,SUSE-SLE-SAP-12-SP2-2019-1456,SUSE-SLE-SERVER-12-2019-1456,SUSE-SLE-SERVER-12-SP1-2019-1456,SUSE-SLE-SERVER-12-SP2-2019-1456,SUSE-SLE-SERVER-12-SP2-BCL-2019-1456,SUSE-SLE-SERVER-12-SP3-2019-1456,SUSE-SLE-SERVER-12-SP4-2019-1456,SUSE-Storage-4-2019-1456 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191456-1/ Link for SUSE-SU-2019:1456-1 https://lists.suse.com/pipermail/sle-security-updates/2019-June/005543.html E-Mail link for SUSE-SU-2019:1456-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1137443 SUSE Bug 1137443 https://www.suse.com/security/cve/CVE-2019-12735/ SUSE CVE CVE-2019-12735 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 7 vim-7.4.326-17.3.1 gvim-7.4.326-17.3.1 vim-data-7.4.326-17.3.1 vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-EC2-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-EC2-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-GCE-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-GCE-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production vim-7.4.326-17.3.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production gvim-7.4.326-17.3.1 as a component of SUSE Enterprise Storage 4 vim-7.4.326-17.3.1 as a component of SUSE Enterprise Storage 4 vim-data-7.4.326-17.3.1 as a component of SUSE Enterprise Storage 4 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP3 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12-LTSS vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12-LTSS vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server 12-LTSS gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 gvim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 vim-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 vim-data-7.4.326-17.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 gvim-7.4.326-17.3.1 as a component of SUSE OpenStack Cloud 7 vim-7.4.326-17.3.1 as a component of SUSE OpenStack Cloud 7 vim-data-7.4.326-17.3.1 as a component of SUSE OpenStack Cloud 7 getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim. CVE-2019-12735 Image SLES12-SP5-Azure-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-Basic-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-HPC-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-HPC-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-SAP-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-SAP-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-Azure-Standard-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-EC2-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-EC2-ECS-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-EC2-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-EC2-SAP-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-EC2-SAP-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-GCE-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-GCE-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-GCE-SAP-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-GCE-SAP-On-Demand:vim-7.4.326-17.3.1 Image SLES12-SP5-OCI-BYOS-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:vim-7.4.326-17.3.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-7.4.326-17.3.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-7.4.326-17.3.1 SUSE Enterprise Storage 4:gvim-7.4.326-17.3.1 SUSE Enterprise Storage 4:vim-7.4.326-17.3.1 SUSE Enterprise Storage 4:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP3:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP3:vim-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP3:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP4:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP4:vim-7.4.326-17.3.1 SUSE Linux Enterprise Desktop 12 SP4:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP2-LTSS:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP3:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP3:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP3:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP4:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP4:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12 SP4:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server 12-LTSS:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12-LTSS:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server 12-LTSS:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:vim-data-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:gvim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-7.4.326-17.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:vim-data-7.4.326-17.3.1 SUSE OpenStack Cloud 7:gvim-7.4.326-17.3.1 SUSE OpenStack Cloud 7:vim-7.4.326-17.3.1 SUSE OpenStack Cloud 7:vim-data-7.4.326-17.3.1 moderate 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191456-1/ https://www.suse.com/security/cve/CVE-2019-12735.html CVE-2019-12735 https://bugzilla.suse.com/1137443 SUSE Bug 1137443