[ubuntu/kinetic-proposed] vim 2:9.0.0135-1ubuntu1 (Accepted)

Steve Langasek steve.langasek at ubuntu.com
Tue Aug 16 18:27:14 UTC 2022


vim (2:9.0.0135-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    + debian/runtime/vimrc:
      "syntax on" is a sane default for non-tiny vim.
    + debian/patches/debian/ubuntu-grub-syntax.patch:
      Add Ubuntu-specific "quiet" keyword.
    + debian/patches/ubuntu-mouse-off.patch:
      Mouse mode is actively harmful in some chroots.
    + debian/patches/patches/increase_timeout.diff:
      Increase timeout for the Test_pattern_compile_speed patch.
    + debian/patches/0001-fix-flaky-terminal-mode-test.vim: Fix flaky vim
      terminal mode test
    + debian/patches/0002-disable-failing-tests-on-ppc64.patch: Disable some
      tests that were throwing an ENOMEM during build on ppc64el. The tests
      are only disabled when building on ppc64el.
  * Dropped, no longer needed:
    + debian/patches/debian/update-upstart-syntax.patch: we no longer
      support upstart; no reason to carry a patch to an editor to improve
      syntax highlighting for upstart files.
    + debian/patches/ubuntu-fix-ftbfs.patch: Resolve FTBFS in kinetic

vim (2:9.0.0135-1) unstable; urgency=medium

  * Merge upstream patch v8.2.5172
    + ftplugin/perl.vim: Only add : to 'isfname' in Perl buffers.  (Closes:
      #761800)
    + ftplugin/tap.vim: Set fold-related options local to the buffer. (Closes:
      #954113)
    + syntax/debcontrol.vim: Fix highlighting of sections with a slash (e.g.,
      "non-free/utils").  (Closes: #1010839)
    + syntax/tap.vim: Match TODO/SKIP markers case-insensitively. (Closes:
      #954016)
    + syntax/perl.vim: Properly highlight code on the same line as the start
      of a here-doc block.  (Closes: #136455)
    + Various CVE fixes (Closes: #1015984, #1016068)
      - 8.2.5043: can open a cmdline window from a substitute expression,
        CVE-2022-1942
      - 8.2.5050: using freed memory when searching for pattern in path,
        CVE-2022-1968
      - 8.2.5063: error for a command may go over the end of IObuff,
        CVE-2022-2000
      - 8.2.5120: searching for quotes may go over the end of the line,
        CVE-2022-2124
      - 8.2.5122: lisp indenting may run over the end of the line,
        CVE-2022-2125
      - 8.2.5123: using invalid index when looking for spell suggestions,
        CVE-2022-2126
      - 8.2.5126: substitute may overrun destination buffer, CVE-2022-2129
      - 9.0.0018: going over the end of the typeahead, CVE-2022-2285
      - 9.0.0025: accessing beyond allocated memory with the cmdline window,
        CVE-2022-2288
      - 9.0.0035: spell dump may go beyond end of an array, CVE-2022-2304
      - 8.2.5162: reading before the start of the line with BS in Replace
        mode, CVE-2022-2207
      - 8.2.4895: buffer overflow with invalid command with composing chars,
        CVE-2022-1616
      - 8.2.4899: with latin1 encoding CTRL-W might go before the cmdline,
        CVE-2022-1619
      - 8.2.4919: can add invalid bytes with :spellgood, CVE-2022-1621
      - 8.2.4956: reading past end of line with "gf" in Visual block mode,
        CVE-2022-1720
      - 8.2.4977: memory access error when substitute expression changes
        window, CVE-2022-1785
      - 8.2.5013: after text formatting cursor may be in an invalid position,
        CVE-2022-1851
      - 8.2.5023: substitute overwrites allocated buffer, CVE-2022-1897
      - 8.2.5024: using freed memory with "]d", CVE-2022-1898
      - 9.0.0060: accessing uninitialized memory when completing long line,
        CVE-2022-2522
  * Temporarily skip Test_Debugger_breakadd_expr

Date: Tue, 16 Aug 2022 09:32:41 -0700
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/vim/2:9.0.0135-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 16 Aug 2022 09:32:41 -0700
Source: vim
Built-For-Profiles: noudeb
Architecture: source
Version: 2:9.0.0135-1ubuntu1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Langasek <steve.langasek at ubuntu.com>
Closes: 136455 761800 954016 954113 1010839 1015984 1016068
Changes:
 vim (2:9.0.0135-1ubuntu1) kinetic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     + debian/runtime/vimrc:
       "syntax on" is a sane default for non-tiny vim.
     + debian/patches/debian/ubuntu-grub-syntax.patch:
       Add Ubuntu-specific "quiet" keyword.
     + debian/patches/ubuntu-mouse-off.patch:
       Mouse mode is actively harmful in some chroots.
     + debian/patches/patches/increase_timeout.diff:
       Increase timeout for the Test_pattern_compile_speed patch.
     + debian/patches/0001-fix-flaky-terminal-mode-test.vim: Fix flaky vim
       terminal mode test
     + debian/patches/0002-disable-failing-tests-on-ppc64.patch: Disable some
       tests that were throwing an ENOMEM during build on ppc64el. The tests
       are only disabled when building on ppc64el.
   * Dropped, no longer needed:
     + debian/patches/debian/update-upstart-syntax.patch: we no longer
       support upstart; no reason to carry a patch to an editor to improve
       syntax highlighting for upstart files.
     + debian/patches/ubuntu-fix-ftbfs.patch: Resolve FTBFS in kinetic
 .
 vim (2:9.0.0135-1) unstable; urgency=medium
 .
   * Merge upstream patch v8.2.5172
     + ftplugin/perl.vim: Only add : to 'isfname' in Perl buffers.  (Closes:
       #761800)
     + ftplugin/tap.vim: Set fold-related options local to the buffer. (Closes:
       #954113)
     + syntax/debcontrol.vim: Fix highlighting of sections with a slash (e.g.,
       "non-free/utils").  (Closes: #1010839)
     + syntax/tap.vim: Match TODO/SKIP markers case-insensitively. (Closes:
       #954016)
     + syntax/perl.vim: Properly highlight code on the same line as the start
       of a here-doc block.  (Closes: #136455)
     + Various CVE fixes (Closes: #1015984, #1016068)
       - 8.2.5043: can open a cmdline window from a substitute expression,
         CVE-2022-1942
       - 8.2.5050: using freed memory when searching for pattern in path,
         CVE-2022-1968
       - 8.2.5063: error for a command may go over the end of IObuff,
         CVE-2022-2000
       - 8.2.5120: searching for quotes may go over the end of the line,
         CVE-2022-2124
       - 8.2.5122: lisp indenting may run over the end of the line,
         CVE-2022-2125
       - 8.2.5123: using invalid index when looking for spell suggestions,
         CVE-2022-2126
       - 8.2.5126: substitute may overrun destination buffer, CVE-2022-2129
       - 9.0.0018: going over the end of the typeahead, CVE-2022-2285
       - 9.0.0025: accessing beyond allocated memory with the cmdline window,
         CVE-2022-2288
       - 9.0.0035: spell dump may go beyond end of an array, CVE-2022-2304
       - 8.2.5162: reading before the start of the line with BS in Replace
         mode, CVE-2022-2207
       - 8.2.4895: buffer overflow with invalid command with composing chars,
         CVE-2022-1616
       - 8.2.4899: with latin1 encoding CTRL-W might go before the cmdline,
         CVE-2022-1619
       - 8.2.4919: can add invalid bytes with :spellgood, CVE-2022-1621
       - 8.2.4956: reading past end of line with "gf" in Visual block mode,
         CVE-2022-1720
       - 8.2.4977: memory access error when substitute expression changes
         window, CVE-2022-1785
       - 8.2.5013: after text formatting cursor may be in an invalid position,
         CVE-2022-1851
       - 8.2.5023: substitute overwrites allocated buffer, CVE-2022-1897
       - 8.2.5024: using freed memory with "]d", CVE-2022-1898
       - 9.0.0060: accessing uninitialized memory when completing long line,
         CVE-2022-2522
   * Temporarily skip Test_Debugger_breakadd_expr
Checksums-Sha1:
 f899f4eab3967952f5d28bdaabee197eafe86cdf 3040 vim_9.0.0135-1ubuntu1.dsc
 279eaec7eb3250f1c0d493ecd0e2aca5fb28788f 10917252 vim_9.0.0135.orig.tar.xz
 15adf15218e56adacb89c9245f3dabf5d09e2efe 171808 vim_9.0.0135-1ubuntu1.debian.tar.xz
 9e122a1a12c32969ff58da77e7b072531df49cf4 8556 vim_9.0.0135-1ubuntu1_source.buildinfo
Checksums-Sha256:
 981d394803a939682b4509437ba3a5d55214a884655f17d26567c6845706bbe8 3040 vim_9.0.0135-1ubuntu1.dsc
 e7ff123fa1d56350cd064cdc54a27ea4b40c5b985fe11e030e764cb70e182999 10917252 vim_9.0.0135.orig.tar.xz
 aa93acebf0873b93ebbeb389741c89eae1932dae563a20024fd3ce451a9b3172 171808 vim_9.0.0135-1ubuntu1.debian.tar.xz
 43ec0f2c211c34c4c4691cb6ab3bba3bbc70874a878e8195fdfd431e6b999fe0 8556 vim_9.0.0135-1ubuntu1_source.buildinfo
Files:
 a3984e93172a57c043ea4d3ba424a8d3 3040 editors optional vim_9.0.0135-1ubuntu1.dsc
 bcd64eca7d2a54543f895da2abe9972c 10917252 editors optional vim_9.0.0135.orig.tar.xz
 291e5d04357b3b7d4f10aa5367a4c487 171808 editors optional vim_9.0.0135-1ubuntu1.debian.tar.xz
 ef3d57631ce5361d7eafea55f76d9afd 8556 editors optional vim_9.0.0135-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Vim Maintainers <team+vim at tracker.debian.org>


More information about the kinetic-changes mailing list