zeertzjq 560b8a8ce0 vim-patch:9.1.1164: [security]: code execution with tar.vim and special crafted tar files (#32701) ...

Problem:  editing a special crafted tar file allows code execution
          (RyotaK, after 129a8446d23cd9cb4445fcfea259cba5e0487d29)
Solution: escape the filename before feeding it to the `:read` command

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-wfmf-8626-q3r3

334a13bff7

Co-authored-by: Christian Brabandt <cb@256bit.org>

2025-03-02 22:59:54 +00:00

..

autoload

vim-patch:9.1.1164: [security]: code execution with tar.vim and special crafted tar files (#32701)

2025-03-02 22:59:54 +00:00

colors

…

compiler

vim-patch:3d75ec7: runtime(compiler): improve svelte-check

2025-02-28 09:32:42 +01:00

doc

docs: misc #31996

2025-03-02 14:27:52 -08:00

ftplugin

vim-patch:0b82054: runtime(lua): Improve 'include' and make '*expr' functions script-local

2025-03-02 06:46:26 +08:00

indent

vim-patch:9.1.1140: filetype: m17ndb files are not detected (#32618)

2025-02-25 09:20:44 +00:00

keymap

vim-patch:3f60114: runtime(keymap): Add ukrainian-enhanced keymap

2025-02-15 11:20:50 +01:00

lua

docs: misc #31996

2025-03-02 14:27:52 -08:00

pack/dist/opt

vim-patch:c729d6d: runtime: decouple Open and Launch commands and gx mapping from netrw (#32506)

2025-02-20 12:10:13 +00:00

plugin

vim-patch:56957ed: runtime(misc): add support for bzip3 to tar, vimball and gzip plugins

2025-03-01 13:21:55 +01:00

queries

feat(treesitter): vertical conceal support for highlighter

2025-02-25 13:09:01 +01:00

scripts

…

spell

…

syntax

vim-patch:00a00f5: runtime(lua): Update lua ftplugin and documentation

2025-03-02 06:46:26 +08:00

tutor

…

CMakeLists.txt

build: move all generator scripts to src/gen/

2025-02-26 16:54:37 +00:00

delmenu.vim

…

filetype.lua

…

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

indent.vim

…

indoff.vim

…

makemenu.vim

…

menu.vim

…

neovim.ico

…

nvim.appdata.xml

…

nvim.desktop

…

nvim.png

…

optwin.vim

feat(options): add 'eventignorewin' (#32152)

2025-02-12 11:01:06 +01:00

synmenu.vim

…

windows_icon.rc

…