Christian Brabandt a65a52d684 patch 9.2.0496: [security]: Code Injection in cucumber filetype plugin ...

Problem:  [security]: Code Injection in cucumber filetype plugin
          (Christopher Lusk)
Solution: Use rubys Regexp.new() with the untrusted pattern

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9

Signed-off-by: Christian Brabandt <cb@256bit.org>

2026-05-17 19:39:24 +00:00

..

autoload

patch 9.2.0489: filetype: some Objective-C files are not recognized

2026-05-16 07:46:25 +00:00

bitmaps

…

colors

…

compiler

runtime(compiler): set zig errorformat

2026-05-12 18:11:55 +00:00

doc

patch 9.2.0494: User commands cannot handle single args with spaces

2026-05-17 17:58:15 +00:00

ftplugin

patch 9.2.0496: [security]: Code Injection in cucumber filetype plugin

2026-05-17 19:39:24 +00:00

icons

…

import/dist

…

indent

Fix a few more typos

2026-05-04 19:10:37 +00:00

keymap

…

lang

translation(zh): Update menu translation for changed "Sponsor" entry

2026-02-18 22:24:14 +00:00

macros

runtime(less.sh): Fix reading from stdin.

2026-02-18 22:28:21 +00:00

pack/dist/opt

patch 9.2.0495: [security]: runtime(netrw): code injection via NetrwBookHistSave()

2026-05-17 18:53:48 +00:00

plugin

runtime(zip,tar): Add support for compressed .cbz and .cbt files

2026-05-16 08:02:13 +00:00

print

…

spell

…

syntax

runtime(sh): Do not conflate empty array and function declarations in Bash

2026-05-17 18:06:22 +00:00

tools

ccfilter: uses unbounded strcat()/strcpy()

2026-05-17 08:22:08 +00:00

tutor

…

bugreport.vim

…

defaults.vim

…

delmenu.vim

…

doc.info

…

evim.vim

…

filetype.vim

patch 9.2.0371: filetype: ghostty config files are not recognized

2026-04-20 14:50:37 +00:00

ftoff.vim

…

ftplugin.vim

…

ftplugof.vim

…

gvim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

gvimrc_example.vim

…

hi16-action-make.png

…

hi22-action-make.png

…

icons.info

…

indent.vim

…

indoff.vim

…

macmap.vim

…

macros.info

…

makemenu.vim

…

menu.vim

…

mswin.vim

…

optwin.vim

runtime(doc): fix incorrect description of 'scrolloffpad'

2026-04-21 19:34:18 +00:00

scripts.vim

…

synmenu.vim

…

termcap

…

tools.info

…

tutor.info

…

vim16x16_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim16x16.gif

…

vim16x16.png

…

vim16x16.xpm

…

vim32x32_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim32x32.gif

…

vim32x32.png

…

vim32x32.xpm

…

vim48x48_png.h

patch 9.2.0123: GTK: using deprecated gdk_pixbuf_new_from_xpm_data()

2026-03-08 20:10:03 +00:00

vim48x48.gif

…

vim48x48.png

…

vim48x48.xpm

…

vim.desktop

translation: Regenerate desktop files in runtime directory

2026-03-22 16:27:43 +00:00

vimlogo.cdr

…

vimlogo.eps

…

vimlogo.gif

…

vimlogo.pdf

…

vimlogo.svg

…

vimlogo.xpm

…

vimrc_example.vim

…

xdg.vim

runtime(xdg): Move viminfofile storage to state dir

2026-02-19 12:24:53 +01:00