[ubuntu/resolute-security] vim 2:9.1.2141-1ubuntu4.3 (Accepted)

[Kyle Kernick]

vim (2:9.1.2141-1ubuntu4.3) resolute-security; urgency=medium

  * SECURITY UPDATE: Command injection in tar plugin.
    - debian/patches/CVE-2026-46483.patch: Use the correct shell-escape in
      runtime/autoload/tar.vim.
    - CVE-2026-46483
  * SECURITY UPDATE: Code injection via mf command.
    - debian/patches/CVE-2026-43961.patch: Avoid string concatenation for
      filter commands in runtime/pack/dist/opt/netrw/autoload/netrw.vim.
    - CVE-2026-43961

Date: 2026-06-03 21:34:46.460730+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.3
-------------- next part --------------
Sorry, changesfile not available.