[Git][security-tracker-team/security-tracker][master] Add CVE-2022-1160/vim

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Mar 30 21:31:05 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0cf778e0 by Salvatore Bonaccorso at 2022-03-30T22:29:40+02:00
Add CVE-2022-1160/vim

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -161,7 +161,10 @@ CVE-2022-1162
 CVE-2022-1161
 	RESERVED
 CVE-2022-1160 (heap buffer overflow in get_one_sourceline in GitHub repository vim/vi ...)
-	TODO: check
+	- vim <not-affected> (Vulnerable code introduced later)
+	NOTE: https://huntr.dev/bounties/a6f3222d-2472-439d-8881-111138a5694c/
+	NOTE: Introduced by: https://github.com/vim/vim/commit/85b43c6cb7d56919e245622f4e42db6d8bee4194 (v8.2.4603)
+	NOTE: Fixed by: https://github.com/vim/vim/commit/2bdad6126778f907c0b98002bfebf0e611a3f5db (v8.2.4647)
 CVE-2022-28170
 	RESERVED
 CVE-2022-28169



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cf778e0fb8534f4f9d610a5a67224b6686e7429

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cf778e0fb8534f4f9d610a5a67224b6686e7429
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220330/2483f75a/attachment.htm>


More information about the debian-security-tracker-commits mailing list