Vulnerability in vim's modeline handling
Matthew Burgess <[email protected]> Thu, 04 Aug 2005 09:52:58 +0100
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
Hi folks, All branches of the LFS book, including the 6.1 stable release are affected by a vulnerability in Vim's modeline handling. For full details see http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2368 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=320017. A patch is available upstream (ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.082). I'll be updating trunk and the gcc-4 branch later today. Regards, Matt. -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page