]> git.ipfire.org Git - thirdparty/vim.git/commit
projects / thirdparty / vim.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8af0f09) | patch
patch 9.2.0481: runtime(netrw): command injection possible via maps v9.2.0481
authorChristian Brabandt <cb@256bit.org>
Thu, 14 May 2026 18:46:56 +0000 (18:46 +0000)
committerChristian Brabandt <cb@256bit.org>
Thu, 14 May 2026 18:52:08 +0000 (18:52 +0000)
commit8e41c34aba0e775d2e3bf6f0e2da1b1c5317f3df
treec033dcfbbae392049a9d824d7d963078070e36e5tree | snapshot
parent8af0f098c3a42a28661d0295364e6e0fd7dbc92ccommit | diff
patch 9.2.0481: runtime(netrw): command injection possible via maps

Problem:  runtime(netrw): command injection possible via crafted
          directory names in NetrwMaps() (Christopher Lusk)
Solution: Temporarily remove B flag in NetrwMaps() to prevent command
          injection

Signed-off-by: Christian Brabandt <cb@256bit.org>
runtime/pack/dist/opt/netrw/autoload/netrw.vim diff | blob | blame | history
src/testdir/test_plugin_netrw.vim diff | blob | blame | history
src/version.c diff | blob | blame | history
Mirror of https://github.com/vim/vim.git