[ubuntu/noble-security] vim 2:9.1.0016-1ubuntu7.13 (Accepted)
Federico Quattrin
federico.quattrin at canonical.com
Thu May 7 17:15:12 UTC 2026
vim (2:9.1.0016-1ubuntu7.13) noble-security; urgency=medium
* SECURITY UPDATE: Command injection via backtick expansion in tag files
- debian/patches/CVE-2026-41411.patch: Disallow backticks before attempting
to expand filenames
- CVE-2026-41411
Date: 2026-05-07 08:34:29.127204+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.13
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list