CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2019/06/06 09:04:22

Modified files:
        editors/vim    : Makefile distinfo 
        editors/vim/pkg: PLIST-main 

Log message:
SECURITY UPDATE to vim-8.1.1483

CVE-2019-12735 Arbitrary Code Execution via Modelines

https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md

"Beyond patching, it's recommended to disable modelines in the vimrc
(set nomodeline), to use the securemodelines plugin, or to disable
modelineexpr (since patch 8.1.1366, Vim-only) to disallow expressions in
modelines."

Reply via email to