(RHSA-2005:036) vim security update

VIM (Vi IMproved) is an updated and improved version of the vi screen-based
editor.

Ciaran McCreesh discovered a modeline vulnerability in VIM. An attacker
could create a text file containing a specially crafted modeline which
could cause arbitrary command execution when viewed by a victim using VIM.
The Common Vulnerabilities and Exposures project has assigned the name
CAN-2004-1138 to this issue. Please note that this issue only affects
users who have modelines and filetype plugins enabled, which is not the
default.

The Debian Security Audit Project discovered an insecure temporary file
usage in VIM. A local user could overwrite or create files as a different
user who happens to run one of the the vulnerable utilities. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0069 to this issue.

All users of VIM are advised to upgrade to these erratum packages,
which contain backported patches for these issues.