This bug was fixed in the package vim - 2:9.1.0777-1ubuntu1

---------------
vim (2:9.1.0777-1ubuntu1) plucky; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - debian/runtime/vimrc:
      + "syntax on" is a sane default for non-tiny Vim.
    - debian/patches/debian/ubuntu-grub-syntax.patch:
      + Add Ubuntu-specific "quiet" keyword.
    - debian/patches/ubuntu-mouse-off.patch:
     + Mouse mode is actively harmful in some chroots.
    - debian/patches/increase_timeout.diff:
      + Increase timeout for the Test_pattern_compile_speed patch.
    - debian/patches/0001-fix-flaky-terminal-mode-test.vim:
      + Fix flaky Vim terminal mode test.
    - debian/patches/0002-disable-failing-tests-on-ppc64.patch:
      + Disable some tests that were throwing an ENOMEM during build on
        ppc64el. The tests are only disabled when building on ppc64el.
  * Welcome to Plucky Puffin! (LP: #2084706)

vim (2:9.1.0777-1) unstable; urgency=medium

  * Merge upstream patch v9.1.0777
    + Security fixes:
      - 9.1.0764: Fix use-after-free when closing a buffer in a BufWinLeave
        autocmd, CVE-2024-47814
  * Make autopkgtests validate the language bindings. The previous
    autopkgtests ran the entire upstream test suite whose flakiness made it
    useless as a marker for whether a package update broke Vim. Since the
    language bindings are the most likely to be affected by package updates,
    just test those in autopkgtests and remove the "flaky" restriction.
  * Declare compliance with Policy 4.7.0, no changes required

vim (2:9.1.0709-2) unstable; urgency=medium

  * Build with -O1 on s390x to workaround #1082125

vim (2:9.1.0709-1) unstable; urgency=medium

  * Merge upstream patch v9.1.0709
    + Security fixes:
      - 9.1.0707: Fix possibility of invalid cursor position, CVE-2024-45306
    + 9.1.0706: Fix test_gettext tests when building in a shadow directory
    + 9.1.0709: Fix lookup of GUIEnter autocmd name in Turkish locale (Closes:
      #1074174)
  * Build-Depend on locales-all package to test new gettext() vimscript function
  * Delete runtime/doc/tags-* (language specific tags) during clean

vim (2:9.1.0698-1) unstable; urgency=medium

  * Merge upstream tag v9.1.0698
    + Security fixes:
      - 9.1.0647: Fix use-after-free in tagstack_clear_entry(), CVE-2024-41957
      - 9.1.0648: Fix double free in dialog_changed(), CVE-2024-41965
      - 9.1.0678: Fix use-after-free in alist_add(), CVE-2024-43374
      - 9.1.0689: Fix buffer-overflow in do_search() when 'rightleft' is set,
        CVE-2024-43790
      - 9.1.0697: Fix heap-buffer-overflow in ins_typebuf(), CVE-2024-43802
    + 9.1.0568: Add support for completing paths from 'cdpath' in :cd (Closes:
      #509940)
  * Clarify defaults.vim instructions in system vimrc when wanting to source
    defaults.vim to build on top of its settings.
  * Adjust make parameter used to specify vim binary, since upstream changed
    the expected variable name in multiple makefiles

 -- Simon Quigley <tsimo...@ubuntu.com>  Wed, 16 Oct 2024 11:24:20 -0500

** Changed in: vim (Ubuntu Plucky)
       Status: Confirmed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41957

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41965

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43374

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43790

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43802

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-45306

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-47814

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to vim in Ubuntu.
https://bugs.launchpad.net/bugs/2084706

Title:
  Add Plucky as a known Ubuntu distribution

Status in vim package in Ubuntu:
  Fix Released
Status in vim source package in Focal:
  Fix Committed
Status in vim source package in Jammy:
  Fix Committed
Status in vim source package in Noble:
  Fix Committed
Status in vim source package in Oracular:
  Fix Committed
Status in vim source package in Plucky:
  Fix Released

Bug description:
  In several stable releases of Ubuntu, Vim needs accurate information
  about Ubuntu and Debian codenames. This information should be aligned
  with what is in distro-info-data.

  There is a minimal regression potential here; Vim simply reads a
  statically-set Perl array to determine if the release in the changelog
  and sources.list is supported or not. Any regression would present
  itself in external tooling that detects text highlighting, which is
  not a case I think we support in Ubuntu.

  A simple way to test this update is to download a package from the
  Plucky archive, and open the changelog with Vim. Instead of the
  changelog release (e.g. "plucky") showing as red, it should show as
  blue. I would also suggest editing sources.list, to ensure e.g.
  Kinetic shows as EOL.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vim/+bug/2084706/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to