[Git][security-tracker-team/security-tracker][master] allocate DSA for vim

[Yves-Alexis Perez (@corsac)]

Yves-Alexis Perez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
11693a23 by Yves-Alexis Perez at 2026-11-01T17:45:33+01:00
allocate DSA for vim

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -187740,7 +187740,6 @@ CVE-2026-46508 (Turborepo is a high-performance build system for JavaScript and
 	NOT-FOR-US: Turborepo
 CVE-2026-46483 (Vim is an open source, command line text editor. Prior to 9.2.0479, a  ...)
 	- vim 2:9.2.0524-1 (bug #1136803)
-	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w
 	NOTE: https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1 (v9.2.0479)
@@ -239546,7 +239545,6 @@ CVE-2026-2026 (A vulnerability has been identified where weak file permissions i
 	NOT-FOR-US: Tenable
 CVE-2026-26269 (Vim is an open source, command line text editor. Prior to 9.1.2148, a  ...)
 	- vim 2:9.2.0119-1 (bug #1127930)
-	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	[bullseye] - vim <postponed> (Minor issue, requires launching vim with netbeans integration enabled)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68
@@ -242260,7 +242258,6 @@ CVE-2026-25754 (AdonisJS is a TypeScript-first web framework. Prior to versions
 	NOT-FOR-US: AdonisJS
 CVE-2026-25749 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
 	- vim 2:9.1.2141-1
-	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	[bullseye] - vim <postponed> (Minor issue)
 	NOTE: https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43
@@ -317627,7 +317624,6 @@ CVE-2025-2799 (The WP Event Manager \u2013 Events Calendar, Registrations, Sell
 CVE-2025-53906 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
 	[experimental] - vim 2:9.1.1766-1
 	- vim 2:9.1.1829-1 (bug #1109374)
-	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	[bullseye] - vim <postponed> (Minor issue; path traversal requiring direct user interaction)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/07/15/2
@@ -317636,7 +317632,6 @@ CVE-2025-53906 (Vim is an open source, command line text editor. Prior to versio
 CVE-2025-53905 (Vim is an open source, command line text editor. Prior to version 9.1. ...)
 	[experimental] - vim 2:9.1.1766-1
 	- vim 2:9.1.1829-1 (bug #1109374)
-	[trixie] - vim <no-dsa> (Minor issue)
 	[bookworm] - vim <no-dsa> (Minor issue)
 	[bullseye] - vim <postponed> (Minor issue; path traversal requiring direct user interaction)
 	NOTE: https://www.openwall.com/lists/oss-security/2025/07/15/1


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Nov 2026] DSA-6600-1 vim - security update
+	{CVE-2025-53905 CVE-2025-53906 CVE-2026-25749 CVE-2026-26269 CVE-2026-28417 CVE-2026-28418 CVE-2026-28419 CVE-2026-28420 CVE-2026-28421 CVE-2026-28422 CVE-2026-32249 CVE-2026-33412 CVE-2026-34982 CVE-2026-35177 CVE-2026-39881 CVE-2026-41411 CVE-2026-42307 CVE-2026-43961 CVE-2026-44656 CVE-2026-45130 CVE-2026-46483 CVE-2026-47162 CVE-2026-47167 CVE-2026-52858 CVE-2026-52859 CVE-2026-52860 CVE-2026-55693 CVE-2026-55892 CVE-2026-55895 CVE-2026-57452 CVE-2026-57455 CVE-2026-57456 CVE-2026-59856 CVE-2026-59857 CVE-2026-59858 CVE-2026-73072 CVE-2026-73073 CVE-2026-73076 CVE-2026-73077 CVE-2026-73078}
+	[trixie] - vim 2:9.1.1230-2+deb13u1
 [31 Oct 2026] DSA-6599-1 nss - security update
 	[trixie] - nss 2:3.110-1+deb13u5
 [30 Oct 2026] DSA-6598-1 thunderbird - security update


=====================================
data/dsa-needed.txt
=====================================
@@ -179,9 +179,6 @@ tomcat10
 --
 tomcat11
 --
-vim
-  Lee Garrett provided an update for review, <90276a53-99c9-4412-a26f-d84e87a8cb49 at rocketjump.eu>
---
 weechat
   Upstream recommends to use branch from https://github.com/weechat/weechat/commits/4.6/, cf #1142597
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11693a23566d979678678f957813a81b978c0587

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11693a23566d979678678f957813a81b978c0587
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/fdba412f/attachment-0001.htm>