[ubuntu/questing-security] vim 2:9.1.0967-1ubuntu6.4 (Accepted)
Federico Quattrin
federico.quattrin at canonical.com
Thu May 7 17:15:10 UTC 2026
vim (2:9.1.0967-1ubuntu6.4) questing-security; urgency=medium
* SECURITY UPDATE: Command injection via backtick expansion in tag files
- debian/patches/CVE-2026-41411.patch: Disallow backticks before attempting
to expand filenames
- CVE-2026-41411
Date: 2026-05-07 08:34:19.077975+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.4
-------------- next part --------------
Sorry, changesfile not available.
More information about the Questing-changes
mailing list