[Git][security-tracker-team/security-tracker][master] Add new vim issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af53efa9 by Salvatore Bonaccorso at 2026-06-11T22:22:26+02:00
Add new vim issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -96,11 +96,17 @@ CVE-2026-53460 (ImageMagick is free and open-source software used for editing an
 CVE-2026-53423 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	TODO: check
 CVE-2026-52860 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	TODO: check
+	- vim <unfixed>
+	NOTE: https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468
+	NOTE: Fixed by: https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2 (v9.2.0597)
 CVE-2026-52859 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	TODO: check
+	- vim <unfixed>
+	NOTE: https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm
+	NOTE: Fixed by: https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19 (v9.2.0565)
 CVE-2026-52858 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	TODO: check
+	- vim <unfixed>
+	NOTE: https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c
+	NOTE: Fixed by: https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d (v9.2.0561)
 CVE-2026-52726 (Dulwich is a pure-Python implementation of the Git file formats and pr ...)
 	TODO: check
 CVE-2026-50223 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af53efa933169dc43cb81256e5489b01da1d6969

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af53efa933169dc43cb81256e5489b01da1d6969
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260611/1d76bb12/attachment.htm>