[ubuntu/noble-security] vim 2:9.1.0016-1ubuntu7.15 (Accepted)

[Kyle Kernick]

vim (2:9.1.0016-1ubuntu7.15) noble-security; urgency=medium

  * SECURITY UPDATE: Command injection in tar plugin.
    - debian/patches/CVE-2026-46483.patch: Use the correct shell-escape in
      runtime/autoload/tar.vim.
    - CVE-2026-46483
  * SECURITY UPDATE: Code injection via mf command.
    - debian/patches/CVE-2026-43961.patch: Avoid string concatenation for
      filter commands in runtime/autoload/netrw.vim.
    - CVE-2026-43961

Date: 2026-06-03 21:26:11.342047+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.15
-------------- next part --------------
Sorry, changesfile not available.