CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2019/06/06 09:04:22
Modified files:
editors/vim : Makefile distinfo
editors/vim/pkg: PLIST-main
Log message:
SECURITY UPDATE to vim-8.1.1483
CVE-2019-12735 Arbitrary Code Execution via Modelines
https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md
"Beyond patching, it's recommended to disable modelines in the vimrc
(set nomodeline), to use the securemodelines plugin, or to disable
modelineexpr (since patch 8.1.1366, Vim-only) to disallow expressions in
modelines."