Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8ff517a0 by Salvatore Bonaccorso at 2019-02-26T19:48:20Z
Update status for CVE-2018-20786/vim
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -270,8 +270,11 @@ CVE-2019-9078 (zzcms 2019 has XSS via an arbitrary
user/ask.php?do=modify parame
NOT-FOR-US: zzcms
CVE-2018-20786 (libvterm through 0+bzr726, as used in Vim and other products,
...)
- vim 2:8.1.0693-1 (unimportant)
+ [stretch] - vim <not-affected> (Vulnerable code introduced later)
+ [jessie] - vim <not-affected> (Vulnerable code introduced later)
- libvterm <unfixed> (unimportant)
- NOTE:
https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
+ NOTE: Introduced by:
https://github.com/vim/vim/commit/e4f25e4a8db2c8a8a71a4ba2a68540b3ab341e42
(v8.0.0693)
+ NOTE: Fixed by:
https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
(v8.1.0633)
NOTE: MISC:https://github.com/vim/vim/issues/3711
NOTE: No security impact
CVE-2019-9077 (An issue was discovered in GNU Binutils 2.32. It is a
heap-based buffer ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ff517a06402ba7d4f519897f418e129dbd075e1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ff517a06402ba7d4f519897f418e129dbd075e1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
