[LWN Logo]
[LWN.net]
Date:         Thu, 29 Mar 2001 09:14:45 -0800
From: Greg KH <greg@WIREX.COM>
Subject:      Immunix OS Security update for vim
To: BUGTRAQ@SECURITYFOCUS.COM

--wzJLGUyc3ArbnUjN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


-----------------------------------------------------------------------
	Immunix OS Security Advisory

Packages updated:	vim
Affected products:	Immunix OS 6.2, 7.0-beta, and 7.0
Bugs Fixed:		immunix/1521
Date:			March 28, 2001
Advisory ID:		IMNX-2001-70-011-01
Author:			Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------

Description:

  An attacker could embed malicious VIM control codes into a file, and
  as soon as any user opened that file in vim-enhanced or vim-X11 with
  the status line option enabled in .vimrc, the commands would be
  executed as that user.  For more information on this see
  http://groups.yahoo.com/group/vim/message/17299

  Packages have been created and released that fix these problems.


Package names and locations:

  Precompiled binary packages for Immunix 6.2 are available at:
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-X11-5.7-0.6x_StackGuard.i386.rpm
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-common-5.7-0.6x_StackGuard.i386.rpm
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-enhanced-5.7-0.6x_StackGuard.i386.rpm
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-minimal-5.7-0.6x_StackGuard.i386.rpm
  
  Source package for Immunix 6.2 is available at:
    http://immunix.org/ImmunixOS/6.2/updates/SRPMS/vim-5.7-0.6x_StackGuard.src.rpm

  Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at:
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-X11-5.7-8_imnx.i386.rpm
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-common-5.7-8_imnx.i386.rpm
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-enhanced-5.7-8_imnx.i386.rpm
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-minimal-5.7-8_imnx.i386.rpm

  Source package for Immunix 7.0-beta and 7.0 is available at:
    http://immunix.org/ImmunixOS/7.0/updates/SRPMS/vim-5.7-8_imnx.src.rpm


md5sums of the packages:
  e67b0e47c0f9951100d29961008e120c  vim-X11-5.7-0.6x_StackGuard.i386.rpm
  2153e3c0cb891e5cc1040bc3f6b21db4  vim-common-5.7-0.6x_StackGuard.i386.rpm
  02a2fcab853fa1138f01777f9bb97948  vim-enhanced-5.7-0.6x_StackGuard.i386.rpm
  20481bbbfe07a7eeb9eca16be74aeb6c  vim-minimal-5.7-0.6x_StackGuard.i386.rpm
  442d3198d10d42e164fa792f3696ac94  vim-5.7-0.6x_StackGuard.src.rpm

  e60540c7e159ee6c989a3f51436bb4b9  vim-X11-5.7-8_imnx.i386.rpm
  23780ce98f4482d4ff1b80c6df23b1a3  vim-common-5.7-8_imnx.i386.rpm
  47de143756db2a52d84e54b55b28ef0a  vim-enhanced-5.7-8_imnx.i386.rpm
  6ad7c0aecef55646c2c7e3ce28c6f786  vim-minimal-5.7-8_imnx.i386.rpm
  786e710e03f43da5336e083f7c06847b  vim-5.7-8_imnx.src.rpm


Online version of all Immunix 6.2 updates and advisories:
  http://immunix.org/ImmunixOS/6.2/updates/

Online version of all Immunix 7.0-beta updates and advisories:
  http://immunix.org/ImmunixOS/7.0-beta/updates/

Online version of all Immunix 7.0 updates and advisories:
  http://immunix.org/ImmunixOS/7.0/updates/

NOTE:
  Ibiblio is graciously mirroring our updates, so if the links above are
  slow, please try:
    ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
  or one of the many mirrors available at:
    http://www.ibiblio.org/pub/Linux/MIRRORS.html


--wzJLGUyc3ArbnUjN
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE6w22EAl5ylTeuKpURAt4sAKDnhKKRKmbYCrXYZ+fUi5MXgmrOdQCgp7lS
LBtNwqU5Ft5EG3wiGT27uq0=or8m
-----END PGP SIGNATURE-----

--wzJLGUyc3ArbnUjN--