[Git][security-tracker-team/security-tracker][master] CVE-2026-26269/vim: postpone for bullseye

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
67689b06 by Carlos Henrique Lima Melara at 2026-02-27T23:58:32-03:00
CVE-2026-26269/vim: postpone for bullseye

Minor issue, requires launching vim with netbeans integration enabled
(-nb) and connect to a malicious server or have a mitm to spoof data.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6275,6 +6275,7 @@ CVE-2026-26269 (Vim is an open source, command line text editor. Prior to 9.1.21
 	- vim <unfixed> (bug #1127930)
 	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
+	[bullseye] - vim <postponed> (Minor issue, requires launching vim with netbeans integration enabled)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68
 	NOTE: Fixed by: https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970 (v9.1.2148)
 CVE-2026-26268 (Cursor is a code editor built for programming with AI. Sandbox escape  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67689b06f1acb61e219d3727bd3444a92b203bb2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/67689b06f1acb61e219d3727bd3444a92b203bb2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260228/d74f81e5/attachment.htm>