Christian Brabandt 8e41c34aba patch 9.2.0481: runtime(netrw): command injection possible via maps ...

Problem:  runtime(netrw): command injection possible via crafted
          directory names in NetrwMaps() (Christopher Lusk)
Solution: Temporarily remove B flag in NetrwMaps() to prevent command
          injection

Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-05-14 18:52:08 +00:00

..

autoload

patch 9.2.0479: [security]: runtime(tar): command injection in tar plugin

2026-05-14 15:43:44 +00:00

bitmaps

…

colors

…

compiler

runtime(compiler): set zig errorformat

2026-05-12 18:11:55 +00:00

doc

runtime(doc): Fix file mode for the Italian manpage

2026-05-14 08:39:03 +00:00

ftplugin

Fix a few more typos

2026-05-04 19:10:37 +00:00

icons

…

import/dist

…

indent

Fix a few more typos

2026-05-04 19:10:37 +00:00

keymap

…

lang

…

macros

…

pack/dist/opt

patch 9.2.0481: runtime(netrw): command injection possible via maps

2026-05-14 18:52:08 +00:00

plugin

runtime(manpager): use \x07 instead of \a for BEL in OSC 8 regex

2026-03-24 19:48:44 +00:00

print

…

spell

…

syntax

runtime(javacc): Check for existence of javaFuncDef syn group before clearing it

2026-05-11 10:15:02 +02:00

tools

runtime(preproc_indent): Ignore Swapfiles when loading buffers

2026-04-02 17:53:30 +00:00

tutor

…

bugreport.vim

…

defaults.vim

…

delmenu.vim

…

doc.info

…

evim.vim

…

filetype.vim

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

gvim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

gvimrc_example.vim

…

hi16-action-make.png

…

hi22-action-make.png

…

icons.info

…

indent.vim

…

indoff.vim

…

macmap.vim

…

macros.info

…

makemenu.vim

…

menu.vim

…

mswin.vim

…

optwin.vim

runtime(doc): fix incorrect description of 'scrolloffpad'

2026-04-21 19:34:18 +00:00

scripts.vim

…

synmenu.vim

…

termcap

…

tools.info

…

tutor.info

…

vim16x16_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim16x16.gif

…

vim16x16.png

…

vim16x16.xpm

…

vim32x32_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim32x32.gif

…

vim32x32.png

…

vim32x32.xpm

…

vim48x48_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim48x48.gif

…

vim48x48.png

…

vim48x48.xpm

…

vim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

vimlogo.cdr

…

vimlogo.eps

…

vimlogo.gif

…

vimlogo.pdf

…

vimlogo.svg

…

vimlogo.xpm

…

vimrc_example.vim

…

xdg.vim

…