This bug was fixed in the package vim - 2:9.1.0777-1ubuntu1 --------------- vim (2:9.1.0777-1ubuntu1) plucky; urgency=medium
* Merge from Debian Unstable. Remaining changes: - debian/runtime/vimrc: + "syntax on" is a sane default for non-tiny Vim. - debian/patches/debian/ubuntu-grub-syntax.patch: + Add Ubuntu-specific "quiet" keyword. - debian/patches/ubuntu-mouse-off.patch: + Mouse mode is actively harmful in some chroots. - debian/patches/increase_timeout.diff: + Increase timeout for the Test_pattern_compile_speed patch. - debian/patches/0001-fix-flaky-terminal-mode-test.vim: + Fix flaky Vim terminal mode test. - debian/patches/0002-disable-failing-tests-on-ppc64.patch: + Disable some tests that were throwing an ENOMEM during build on ppc64el. The tests are only disabled when building on ppc64el. * Welcome to Plucky Puffin! (LP: #2084706) vim (2:9.1.0777-1) unstable; urgency=medium * Merge upstream patch v9.1.0777 + Security fixes: - 9.1.0764: Fix use-after-free when closing a buffer in a BufWinLeave autocmd, CVE-2024-47814 * Make autopkgtests validate the language bindings. The previous autopkgtests ran the entire upstream test suite whose flakiness made it useless as a marker for whether a package update broke Vim. Since the language bindings are the most likely to be affected by package updates, just test those in autopkgtests and remove the "flaky" restriction. * Declare compliance with Policy 4.7.0, no changes required vim (2:9.1.0709-2) unstable; urgency=medium * Build with -O1 on s390x to workaround #1082125 vim (2:9.1.0709-1) unstable; urgency=medium * Merge upstream patch v9.1.0709 + Security fixes: - 9.1.0707: Fix possibility of invalid cursor position, CVE-2024-45306 + 9.1.0706: Fix test_gettext tests when building in a shadow directory + 9.1.0709: Fix lookup of GUIEnter autocmd name in Turkish locale (Closes: #1074174) * Build-Depend on locales-all package to test new gettext() vimscript function * Delete runtime/doc/tags-* (language specific tags) during clean vim (2:9.1.0698-1) unstable; urgency=medium * Merge upstream tag v9.1.0698 + Security fixes: - 9.1.0647: Fix use-after-free in tagstack_clear_entry(), CVE-2024-41957 - 9.1.0648: Fix double free in dialog_changed(), CVE-2024-41965 - 9.1.0678: Fix use-after-free in alist_add(), CVE-2024-43374 - 9.1.0689: Fix buffer-overflow in do_search() when 'rightleft' is set, CVE-2024-43790 - 9.1.0697: Fix heap-buffer-overflow in ins_typebuf(), CVE-2024-43802 + 9.1.0568: Add support for completing paths from 'cdpath' in :cd (Closes: #509940) * Clarify defaults.vim instructions in system vimrc when wanting to source defaults.vim to build on top of its settings. * Adjust make parameter used to specify vim binary, since upstream changed the expected variable name in multiple makefiles -- Simon Quigley <tsimo...@ubuntu.com> Wed, 16 Oct 2024 11:24:20 -0500 ** Changed in: vim (Ubuntu Plucky) Status: Confirmed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41957 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-41965 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43374 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43790 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43802 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-45306 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-47814 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2084706 Title: Add Plucky as a known Ubuntu distribution To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vim/+bug/2084706/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs