diff --git a/vim.spec b/vim.spec index aa9d4b2c..bea6ddec 100644 --- a/vim.spec +++ b/vim.spec @@ -134,6 +134,10 @@ Patch3016: 0001-patch-9.2.0202-security-command-injection-via-newlin.patch # https://github.com/vim/vim/commit/7088926316d8 # https://github.com/vim/vim/commit/46f530e517bd # https://github.com/vim/vim/commit/351a16c88f56 +# Changes from upstream: +# - all three: use 'echohl Error' instead of s:Mess() (not in older zip.vim) +# - 9.2.0299: dropped TODO comment and pi_zip.txt version line update +# - 9.2.0304: dropped Windows regex fix in zip#Write() (code path not present) Patch3017: 0001-patch-9.2.0280-security-path-traversal-issue-in-zip.patch Patch3018: 0001-patch-9.2.0299-zip-may-write-using-absolute-paths.patch Patch3019: 0001-patch-9.2.0304-zip-block-absolute-paths-in-Extract.patch