Branches for Gutsy

Name Status Last Modified Last Commit
lp://qastaging/ubuntu/gutsy/vim 1 Development 2009-06-26 23:19:16 UTC
32. Trigger rebuild for hppa

Author: LaMont Jones
Revision Date: 2007-10-04 12:26:15 UTC

Trigger rebuild for hppa

lp://qastaging/ubuntu/gutsy-proposed/vim 1 Development 2009-06-26 23:19:25 UTC
33. * SECURITY UPDATE: arbitrary command ...

Author: Marc Deslauriers
Revision Date: 2009-01-07 08:47:31 UTC

* SECURITY UPDATE: arbitrary command execution via vim scripts
  - patches/910_SECURITY_CVE-2008-2712.diff: Cherry-picked fixes from
    Debian's Lenny vim svn and backported NetrwDelete() from netrw v132 so
    we pass the netrw.v4 vulnerability test from www.rdancer.org
  - CVE-2008-2712
* SECURITY UPDATE: user-assisted arbitrary command execution from "K" in
  Visual mode
  - patches/911_SECURITY_CVE-2008-4104.diff:
    - Upstream patch 7.2.010
    - src/normal.c: NUL-terminate the identifier string
    - src/normal.c: Only use the word under the cursor, instead of the entire
      line after the cursor, when constructing the shell command to run.
  - CVE-2008-4101

lp://qastaging/ubuntu/gutsy-security/vim 1 Development 2009-06-26 23:19:20 UTC
33. * SECURITY UPDATE: arbitrary command ...

Author: Marc Deslauriers
Revision Date: 2009-01-07 08:47:31 UTC

* SECURITY UPDATE: arbitrary command execution via vim scripts
  - patches/910_SECURITY_CVE-2008-2712.diff: Cherry-picked fixes from
    Debian's Lenny vim svn and backported NetrwDelete() from netrw v132 so
    we pass the netrw.v4 vulnerability test from www.rdancer.org
  - CVE-2008-2712
* SECURITY UPDATE: user-assisted arbitrary command execution from "K" in
  Visual mode
  - patches/911_SECURITY_CVE-2008-4104.diff:
    - Upstream patch 7.2.010
    - src/normal.c: NUL-terminate the identifier string
    - src/normal.c: Only use the word under the cursor, instead of the entire
      line after the cursor, when constructing the shell command to run.
  - CVE-2008-4101

lp://qastaging/ubuntu/gutsy-updates/vim 1 Development 2009-06-26 23:19:30 UTC
33. * SECURITY UPDATE: arbitrary command ...

Author: Marc Deslauriers
Revision Date: 2009-01-07 08:47:31 UTC

* SECURITY UPDATE: arbitrary command execution via vim scripts
  - patches/910_SECURITY_CVE-2008-2712.diff: Cherry-picked fixes from
    Debian's Lenny vim svn and backported NetrwDelete() from netrw v132 so
    we pass the netrw.v4 vulnerability test from www.rdancer.org
  - CVE-2008-2712
* SECURITY UPDATE: user-assisted arbitrary command execution from "K" in
  Visual mode
  - patches/911_SECURITY_CVE-2008-4104.diff:
    - Upstream patch 7.2.010
    - src/normal.c: NUL-terminate the identifier string
    - src/normal.c: Only use the word under the cursor, instead of the entire
      line after the cursor, when constructing the shell command to run.
  - CVE-2008-4101

14 of 4 results