Publishing details

Changelog

vim (2:7.4.052-1ubuntu3.1) trusty-security; urgency=medium

  * SECURITY UPDATE: arbitrary shell execution via modelines
    - debian/patches/upstream/CVE-2016-1248.patch: Only allow valid
      characters in 'filetype', 'syntax' and 'keymap'. Tests adapted
      back to vim 7.3 by James McCoy of Debian, thanks! Patch is also
      updated to add the tests to the set that are run during the build.
    - CVE-2016-1248

 -- Steve Beattie <email address hidden>  Wed, 23 Nov 2016 18:06:44 -0800

Available diffs

Builds

Built packages

Package files