]> git.ipfire.org Git - thirdparty/vim.git/commit
patch 9.2.0678: [security]: potential powershell code execution in zip.vim v9.2.0678
authorChristian Brabandt <cb@256bit.org>
Sat, 20 Jun 2026 15:35:58 +0000 (15:35 +0000)
committerChristian Brabandt <cb@256bit.org>
Sat, 20 Jun 2026 15:35:58 +0000 (15:35 +0000)
commitb2cc9be119d51212bf0d3f2a994c7e517c73f4a9
treeb7ea27fedabccaf9be4db738ed786f38dc863899
parenta092d249b6066401dda0964ceeb213062785bbc8
patch 9.2.0678: [security]: potential powershell code execution in zip.vim

Problem:  [security]: potential powershell code execution in zip.vim
          (DDugs)
Solution: Cleanup zip.vim, introduce PSEscape() to escape() potential powershell code,
          use consistent s:Escape() in the various PowerShell functions

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf

Signed-off-by: Christian Brabandt <cb@256bit.org>
runtime/autoload/zip.vim
runtime/doc/pi_zip.txt
src/version.c