Roberto C. Sánchez pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d593ad53 by Roberto C. Sánchez at 2020-05-29T19:21:51-04:00
LTS: triage CVE-2019-20807/vim for jessie as no-dsa, minor issue
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -120,6 +120,7 @@ CVE-2019-20807 (In Vim before 8.1.0881, users can
circumvent the rvim restricted
- vim 2:8.1.2136-1
[buster] - vim <no-dsa> (Minor issue)
[stretch] - vim <no-dsa> (Minor issue)
+ [jessie] - vim <no-dsa> (Minor issue)
NOTE:
https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075
CVE-2020-13644 (An issue was discovered in the Accordion plugin before 2.2.9
for WordP ...)
NOT-FOR-US: Accordion plugin for WordPress
=====================================
data/dla-needed.txt
=====================================
@@ -120,8 +120,6 @@ tzdata
--
unbound (Anton Gladky)
--
-vim (Roberto C. Sánchez)
---
xcftools (Anton Gladky)
NOTE: 20200111: wrote a patch + reproducer for CVE-2019-5086, waiting for
upstream review (hle)
NOTE: 20200414: Flurry of activity on/around 20200401 essentially rejecting
original patch
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d593ad536c435690fb6767e6cb762db456a06dc0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d593ad536c435690fb6767e6cb762db456a06dc0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits