Vulnerability in vim's modeline handling

Matthew Burgess <[email protected]> Thu, 04 Aug 2005 09:52:58 +0100
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
Hi folks,

All branches of the LFS book, including the 6.1 stable release are 
affected by a vulnerability in Vim's modeline handling.  For full 
details see 
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2368 and 
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=320017.

A patch is available upstream 
(ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.082).

I'll be updating trunk and the gcc-4 branch later today.

Regards,

Matt.
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page