[Git][security-tracker-team/security-tracker][master] Track fixed version for vim issues fixed via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ba96aa9b by Salvatore Bonaccorso at 2026-03-09T12:30:11+01:00
Track fixed version for vim issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3252,20 +3252,20 @@ CVE-2026-28424 (Statmatic is a Laravel and Git powered content management system
 CVE-2026-28423 (Statmatic is a Laravel and Git powered content management system (CMS) ...)
 	NOT-FOR-US: Statmatic CMS
 CVE-2026-28422 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	- vim <unfixed> (bug #1129432; unimportant)
+	- vim 2:9.2.0119-1 (bug #1129432; unimportant)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf
 	NOTE: Fixed by: https://github.com/vim/vim/commit/4e5b9e31cb7484ad156fba995fdce3c9b075b5fd (v9.2.0078)
 	NOTE: Crash in CLI tool, no security impact
 CVE-2026-28421 (Vim is an open source, command line text editor. Versions prior to 9.2 ...)
-	- vim <unfixed> (bug #1129431)
+	- vim 2:9.2.0119-1 (bug #1129431)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p
 	NOTE: Fixed by: https://github.com/vim/vim/commit/65c1a143c331c886dc28888dd632708f953b4eb3 (v9.2.0077)
 CVE-2026-28420 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	- vim <unfixed> (bug #1129430)
+	- vim 2:9.2.0119-1 (bug #1129430)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg
 	NOTE: Fixed by: https://github.com/vim/vim/commit/bb6de2105b160e729c340631435cd62f3e69bd32 (v9.2.0076)
 CVE-2026-28419 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	- vim <unfixed> (bug #1129429)
+	- vim 2:9.2.0119-1 (bug #1129429)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv
 	NOTE: Fixed by: https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0 (v9.2.0075)
 CVE-2026-28416 (Gradio is an open-source Python package designed for quick prototyping ...)
@@ -3327,11 +3327,11 @@ CVE-2026-1542 (The Super Stage WP WordPress plugin through 1.0.1 unserializes us
 CVE-2025-13673 (The Tutor LMS \u2013 eLearning and online course solution plugin for W ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-28418 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	- vim <unfixed> (bug #1129428)
+	- vim 2:9.2.0119-1 (bug #1129428)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-h4mf-vg97-hj8j
 	NOTE: Fixed by: https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb46c3a9e76f684da2d (v9.2.0074)
 CVE-2026-28417 (Vim is an open source, command line text editor. Prior to version 9.2. ...)
-	- vim <unfixed> (bug #1129427)
+	- vim 2:9.2.0119-1 (bug #1129427)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336
 	NOTE: Fixed by: https://github.com/vim/vim/commit/79348dbbc09332130f4c86045e1541d68514fcc1 (v9.2.0073)
 CVE-2026-3255 (HTTP::Session2 versions before 1.12 for Perl for Perl may generate wea ...)
@@ -9703,7 +9703,7 @@ CVE-2026-2443 (A flaw was identified in libsoup, a widely used HTTP library in G
 CVE-2026-2026 (A vulnerability has been identified where weak file permissions in the ...)
 	NOT-FOR-US: Tenable
 CVE-2026-26269 (Vim is an open source, command line text editor. Prior to 9.1.2148, a  ...)
-	- vim <unfixed> (bug #1127930)
+	- vim 2:9.2.0119-1 (bug #1127930)
 	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	[bullseye] - vim <postponed> (Minor issue, requires launching vim with netbeans integration enabled)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba96aa9b9e0ff08df6ab7efdfef446e035ea3128

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ba96aa9b9e0ff08df6ab7efdfef446e035ea3128
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260309/1814b8d6/attachment.htm>