Bug#361317: vim: Nread'ing a URL containing colons breaks that url

James Vega jamessan at debian.org
Fri Apr 7 21:07:07 UTC 2006


merge 353076 361317
thanks

On Fri, Apr 07, 2006 at 04:40:02PM -0400, Justin Pryzby wrote:
> Package: vim
> Version: 1:6.4-007+1
> Severity: normal
> 
> Try :Nread'ing an attachment from the Debian BTS, say: 
>   http://bugs.debian.org/cgi-bin/bugreport.cgi/Makefile?bug=359843;msg=20;att=1
> 
> It will read the entire bug log, not the specific attachment of the
> specific message, which leads me to believe that the colon is not
> being escaped in some shell command; ouch!  Let us hope that nobody
> has an ;rm -fr / encoded in to a URL.

This has already been reported by Adeodato Simó and has been fixed
upstream as well as in our pending vim6 upload.  I'll nudge Nobse to do
the upload he was threatening. :)

James
-- 
GPG Key: 1024D/61326D40 2003-09-02 James Vega <jamessan at debian.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-vim-maintainers/attachments/20060407/e7b8f61a/attachment-0001.pgp


More information about the pkg-vim-maintainers mailing list