#2108: Vim 7.1 patches
----------------------------------------+-----------------------------------
 Reporter:  [EMAIL PROTECTED]  |        Owner:  [email protected]
     Type:  task                        |       Status:  reopened               
      
 Priority:  normal                      |    Milestone:  7.0                    
      
Component:  Book                        |      Version:  SVN                    
      
 Severity:  normal                      |   Resolution:                         
      
 Keywords:                              |  
----------------------------------------+-----------------------------------
Comment (by Ag.Hatzim):

 A new beta release is available for testing:

 ftp://ftp.vim.org/pub/vim/unstable/unix/vim-7.2a.tar.bz2

 This is 7.1 with all the patches applied and the updated runtime files.

 With regards to patches, since 298 patch level there are a series of
 patches to fix the following vulnerability.

 http://www.rdancer.org/vulnerablevim.html

 For a quick summary: the issue is with some weird filenames, e.g.,
 some?%weird&filename, which can lead to an arbitrary code execution.
 Bram introduced the function fnameescape() to escape those weird
 characters in filenames.
 Please consult the above link for details if you have the patience.

 The new beta comes also with floating point support and the usual float
 functions, e.g., sin(), round(), floor(), ceil(), pow(), cos(), abs(),
 trunc(), float2nr(), str2float()

 I expect this beta becomes stable for release pretty soon; as I said the
 amount of testing with all these patches is considerable high. Also the
 floating point patch is under testing for a long time now, although with
 changes over time.
 So although I had ready for upload a consolidated patch (patch level 326),
 I guess we can hold on for the official 7.2 release.

-- 
Ticket URL: <http://wiki.linuxfromscratch.org/lfs/ticket/2108#comment:10>
LFS Trac <http://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-book
FAQ: http://www.linuxfromscratch.org/lfs/faq.html
Unsubscribe: See the above information page

Reply via email to