[ubuntu/resolute-updates] vim 2:9.1.2141-1ubuntu4.1 (Accepted)

[Ubuntu Archive Robot]

vim (2:9.1.2141-1ubuntu4.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Path Traversal in zip.vim
    - debian/patches/CVE-2026-35177.patch: Detect malicious zip files before
      writing in runtime/autoload/zip.vim
    - CVE-2026-35177
  * SECURITY UPDATE: Command Injection in netbeans
    - debian/patches/CVE-2026-39881.patch: Validate typename, fg, and bg
      before passing to coloncmd in src/netbeans.c
    - CVE-2026-39881
  * SECURITY UPDATE: Command injection via backtick expansion in tag files
    - debian/patches/CVE-2026-41411.patch: Disallow backticks before attempting
      to expand filenames
    - CVE-2026-41411

Date: 2026-05-07 08:32:11.326937+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.1
-------------- next part --------------
Sorry, changesfile not available.