[ubuntu/questing-security] vim 2:9.1.0967-1ubuntu6.4 (Accepted)

Federico Quattrin federico.quattrin at canonical.com
Thu May 7 17:15:10 UTC 2026


vim (2:9.1.0967-1ubuntu6.4) questing-security; urgency=medium

  * SECURITY UPDATE: Command injection via backtick expansion in tag files
    - debian/patches/CVE-2026-41411.patch: Disallow backticks before attempting
      to expand filenames
    - CVE-2026-41411

Date: 2026-05-07 08:34:19.077975+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.4
-------------- next part --------------
Sorry, changesfile not available.


More information about the Questing-changes mailing list