[Git][security-tracker-team/security-tracker][master] Update status for CVE-2018-20786/vim

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ff517a0 by Salvatore Bonaccorso at 2019-02-26T19:48:20Z
Update status for CVE-2018-20786/vim

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -270,8 +270,11 @@ CVE-2019-9078 (zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parame
 	NOT-FOR-US: zzcms
 CVE-2018-20786 (libvterm through 0+bzr726, as used in Vim and other products, ...)
 	- vim 2:8.1.0693-1 (unimportant)
+	[stretch] - vim <not-affected> (Vulnerable code introduced later)
+	[jessie] - vim <not-affected> (Vulnerable code introduced later)
 	- libvterm <unfixed> (unimportant)
-	NOTE: https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
+	NOTE: Introduced by: https://github.com/vim/vim/commit/e4f25e4a8db2c8a8a71a4ba2a68540b3ab341e42 (v8.0.0693)
+	NOTE: Fixed by: https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8 (v8.1.0633)
 	NOTE: MISC:https://github.com/vim/vim/issues/3711
 	NOTE: No security impact
 CVE-2019-9077 (An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ff517a06402ba7d4f519897f418e129dbd075e1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ff517a06402ba7d4f519897f418e129dbd075e1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190226/cb2a177f/attachment.html>