[Git][security-tracker-team/security-tracker][master] Add CVE-2022-1160/vim
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Mar 30 21:31:05 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0cf778e0 by Salvatore Bonaccorso at 2022-03-30T22:29:40+02:00
Add CVE-2022-1160/vim
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -161,7 +161,10 @@ CVE-2022-1162
CVE-2022-1161
RESERVED
CVE-2022-1160 (heap buffer overflow in get_one_sourceline in GitHub repository vim/vi ...)
- TODO: check
+ - vim <not-affected> (Vulnerable code introduced later)
+ NOTE: https://huntr.dev/bounties/a6f3222d-2472-439d-8881-111138a5694c/
+ NOTE: Introduced by: https://github.com/vim/vim/commit/85b43c6cb7d56919e245622f4e42db6d8bee4194 (v8.2.4603)
+ NOTE: Fixed by: https://github.com/vim/vim/commit/2bdad6126778f907c0b98002bfebf0e611a3f5db (v8.2.4647)
CVE-2022-28170
RESERVED
CVE-2022-28169
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cf778e0fb8534f4f9d610a5a67224b6686e7429
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cf778e0fb8534f4f9d610a5a67224b6686e7429
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220330/2483f75a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list