SECURITY UPDATE to vim-8.1.1483

CVE-2019-12735 Arbitrary Code Execution via Modelines

https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md

"Beyond patching, it's recommended to disable modelines in the vimrc
(set nomodeline), to use the securemodelines plugin, or to disable
modelineexpr (since patch 8.1.1366, Vim-only) to disallow expressions in
modelines."
This commit is contained in:
sthen 2019-06-06 15:04:22 +00:00
parent fd073d9c15
commit bbca5b93e0
3 changed files with 8 additions and 6 deletions

View File

@ -1,9 +1,9 @@
# $OpenBSD: Makefile,v 1.190 2019/06/03 16:06:51 sthen Exp $
# $OpenBSD: Makefile,v 1.191 2019/06/06 15:04:22 sthen Exp $
COMMENT-main= vi clone, many additional features
COMMENT-lang= vi clone, NLS subpackage
V= 8.1.1244
V= 8.1.1483
GH_ACCOUNT= vim
GH_PROJECT= vim
GH_TAGNAME= v$V
@ -13,7 +13,6 @@ PKGNAME-main= vim-$T
PKGNAME-lang= vim-lang-$T
FULLPKGNAME-lang= vim-lang-$T
FULLPKGPATH-lang= ${PKGPATH},-lang
REVISION-main= 0
P= vim${V:R:S/.//}
CATEGORIES= editors

View File

@ -1,2 +1,2 @@
SHA256 (vim-8.1.1244.tar.gz) = iI4+edN/EKtUGLav+dkfCVJZ6ivVzong5M3njLU0Uks=
SIZE (vim-8.1.1244.tar.gz) = 14163686
SHA256 (vim-8.1.1483.tar.gz) = dyVlyXNtFRA5jnrgeFgggoXuTUVEAp6EobLazdTXXLU=
SIZE (vim-8.1.1483.tar.gz) = 14293757

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST-main,v 1.30 2019/03/08 01:55:36 sthen Exp $
@comment $OpenBSD: PLIST-main,v 1.31 2019/06/06 15:04:22 sthen Exp $
@pkgpath ${BASE_PKGPATH}
%%gtk2%%
bin/ex
@ -234,6 +234,7 @@ share/vim/${P}/doc/pi_spec.txt
share/vim/${P}/doc/pi_tar.txt
share/vim/${P}/doc/pi_vimball.txt
share/vim/${P}/doc/pi_zip.txt
share/vim/${P}/doc/popup.txt
share/vim/${P}/doc/print.txt
share/vim/${P}/doc/quickfix.txt
share/vim/${P}/doc/quickref.txt
@ -439,6 +440,7 @@ share/vim/${P}/ftplugin/muttrc.vim
share/vim/${P}/ftplugin/nanorc.vim
share/vim/${P}/ftplugin/neomuttrc.vim
share/vim/${P}/ftplugin/netrc.vim
share/vim/${P}/ftplugin/nroff.vim
share/vim/${P}/ftplugin/nsis.vim
share/vim/${P}/ftplugin/objc.vim
share/vim/${P}/ftplugin/ocaml.vim
@ -1391,6 +1393,7 @@ share/vim/${P}/syntax/taskedit.vim
share/vim/${P}/syntax/tasm.vim
share/vim/${P}/syntax/tcl.vim
share/vim/${P}/syntax/tcsh.vim
share/vim/${P}/syntax/template.vim
share/vim/${P}/syntax/teraterm.vim
share/vim/${P}/syntax/terminfo.vim
share/vim/${P}/syntax/tex.vim