This bug was fixed in the package vim - 2:9.1.0777-1ubuntu1 --------------- vim (2:9.1.0777-1ubuntu1) plucky; urgency=medium
* Merge from Debian Unstable. Remaining changes: - debian/runtime/vimrc: + "syntax on" is a sane default for non-tiny Vim. - debian/patches/debian/ubuntu-grub-syntax.patch: + Add Ubuntu-specific "quiet" keyword. - debian/patches/ubuntu-mouse-off.patch: + Mouse mode is actively harmful in some chroots. - debian/patches/increase_timeout.diff: + Increase timeout for the Test_pattern_compile_speed patch. - debian/patches/0001-fix-flaky-terminal-mode-test.vim: + Fix flaky Vim terminal mode test. - debian/patches/0002-disable-failing-tests-on-ppc64.patch: + Disable some tests that were throwing an ENOMEM during build on ppc64el. The tests are only disabled when building on ppc64el. * Welcome to Plucky Puffin! (LP: #2084706) vim (2:9.1.0777-1) unstable; urgency=medium * Merge upstream patch v9.1.0777 + Security fixes: - 9.1.0764: Fix use-after-free when closing a buffer in a BufWinLeave autocmd, CVE-2024-47814 * Make autopkgtests validate the language bindings. The previous autopkgtests ran the entire upstream test suite whose flakiness made it useless as a marker for whether a package update broke Vim. Since the language bindings are the most likely to be affected by package updates, just test those in autopkgtests and remove the "flaky" restriction. * Declare compliance with Policy 4.7.0, no changes required vim (2:9.1.0709-2) unstable; urgency=medium * Build with -O1 on s390x to workaround #1082125 vim (2:9.1.0709-1) unstable; urgency=medium * Merge upstream patch v9.1.0709 + Security fixes: - 9.1.0707: Fix possibility of invalid cursor position, CVE-2024-45306 + 9.1.0706: Fix test_gettext tests when building in a shadow directory + 9.1.0709: Fix lookup of GUIEnter autocmd name in Turkish locale (Closes: #1074174) * Build-Depend on locales-all package to test new gettext() vimscript function * Delete runtime/doc/tags-* (language specific tags) during clean vim (2:9.1.0698-1) unstable; urgency=medium * Merge upstream tag v9.1.0698 + Security fixes: - 9.1.0647: Fix use-after-free in tagstack_clear_entry(), CVE-2024-41957 - 9.1.0648: Fix double free in dialog_changed(), CVE-2024-41965 - 9.1.0678: Fix use-after-free in alist_add(), CVE-2024-43374 - 9.1.0689: Fix buffer-overflow in do_search() when 'rightleft' is set, CVE-2024-43790 - 9.1.0697: Fix heap-buffer-overflow in ins_typebuf(), CVE-2024-43802 + 9.1.0568: Add support for completing paths from 'cdpath' in :cd (Closes: #509940) * Clarify defaults.vim instructions in system vimrc when wanting to source defaults.vim to build on top of its settings. * Adjust make parameter used to specify vim binary, since upstream changed the expected variable name in multiple makefiles -- Simon Quigley <tsimo...@ubuntu.com> Wed, 16 Oct 2024 11:24:20 -0500 ** Changed in: vim (Ubuntu Plucky) Status: Confirmed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41957 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41965 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43374 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43790 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43802 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-45306 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-47814 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to vim in Ubuntu. https://bugs.launchpad.net/bugs/2084706 Title: Add Plucky as a known Ubuntu distribution Status in vim package in Ubuntu: Fix Released Status in vim source package in Focal: Fix Committed Status in vim source package in Jammy: Fix Committed Status in vim source package in Noble: Fix Committed Status in vim source package in Oracular: Fix Committed Status in vim source package in Plucky: Fix Released Bug description: In several stable releases of Ubuntu, Vim needs accurate information about Ubuntu and Debian codenames. This information should be aligned with what is in distro-info-data. There is a minimal regression potential here; Vim simply reads a statically-set Perl array to determine if the release in the changelog and sources.list is supported or not. Any regression would present itself in external tooling that detects text highlighting, which is not a case I think we support in Ubuntu. A simple way to test this update is to download a package from the Plucky archive, and open the changelog with Vim. Instead of the changelog release (e.g. "plucky") showing as red, it should show as blue. I would also suggest editing sources.list, to ensure e.g. Kinetic shows as EOL. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vim/+bug/2084706/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp