Vim < 8.1.1365 / Neovim < 0.3.6 vulnerability

[Luffy]

Hello,
Why has not vim been updated?

https://nvd.nist.gov/vuln/detail/CVE-2019-12735
https://github.com/numirias/security/bl ... -neovim.md

-.-
Check if you have modelines enabled by opening vim and entering

:set modeline?

If vim returns nomodeline, you are not vulnerable. If you are vulnerable or want to ensure your security with this issue, add these lines to your vimrc:

set modelines=0
set nomodeline
-.-

Saludos.

[gapan]

Well, this is a package provided by Slackware. If there is indeed a problem, I expect Slackware will fix it.

[Luffy]

Is this vulnerability applicable to vim/gvim in Slackware-stable?
https://github.com/numirias/security...-vim-neovim.md
I've tested it, and the PoC does not work on Slackware 14.2's vim/gvim.

I'm a newbie,

Thank you, gapan.