[ubuntu/jammy-security] vim 2:8.2.3995-1ubuntu2.31 (Accepted)

[Kyle Kernick]

vim (2:8.2.3995-1ubuntu2.31) jammy-security; urgency=medium

  * SECURITY UPDATE: Command injection in tar plugin.
    - debian/patches/CVE-2026-46483.patch: Use the correct shell-escape in
      runtime/autoload/tar.vim.
    - CVE-2026-46483
  * SECURITY UPDATE: Code injection via mf command.
    - debian/patches/CVE-2026-43961.patch: Avoid string concatenation for
      filter commands in runtime/autoload/netrw.vim.
    - CVE-2026-43961

Date: 2026-06-03 21:21:10.519069+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.31
-------------- next part --------------
Sorry, changesfile not available.