Errata overview
Errata ID 450
Date 2017-08-16
Source package vim
Fixed in version 2:7.3.547-7.57.201708101432
Description
This update addresses the following issues:
* execution of arbitrary code if a file with a specially crafted modeline
  is opened (CVE-2016-1248)
* buffer overflow if a spellfile has an invalid length in it (CVE-2017-5953)
* corrupted undo file can lead to buffer overflows due to integer overflow
  in a u_read_undo memory allocation (CVE-2017-6349)
* corrupted undo file can lead to buffer overflows due to integer overflow
  in an unserialize_uep memory allocation (CVE-2017-6350)
* denial of service (invalid free) or possibly unspecified other impact via
  crafted source (aka -S) file (CVE-2017-11109)
Additional notes
CVE ID CVE-2016-1248
CVE-2017-5953
CVE-2017-6349
CVE-2017-6350
CVE-2017-11109
UCS Bug number #43111