Public bug reported:
A new release of vim is available for merging from Debian.
Ubuntu Proposed: 2:9.2.0524-1ubuntu1
Debian Unstable: 2:9.2.0782-1
### New Debian Changes ###
vim (2:9.2.0782-1) unstable; urgency=medium
* New upstream tag
+ Security fixes (Closes: #1140775)
- 9.2.0561: possible code execution with python3complete (Closes:
#1139728, CVE-2026-52858)
- 9.2.0565: out-of-bounds read in :terminal if a cell has 5 combining
marks (Closes: #1139729, CVE-2026-52859)
- 9.2.0597: Allocation failure not handled when defining a dictionary
function (Closes: #1139730, CVE-2026-52860)
- 9.2.0653: out-of-bounds read with a crafted spell file, CVE-2026-55693
- 9.2.0662: out-of-bounds write with a crafted spell file,
CVE-2026-55892
- 9.2.0663: possible code execution in netrw when deleting a file with a
"|" in its name, CVE-2026-55895
- 9.2.0670: out-of-bounds read of text properties when handling a
crafted undo file, CVE-2026-57451
- 9.2.0671: Possible out-of-bounds read when opening a sodium-encrypted
file, CVE-2026-57452
- 9.2.0678: Possible powershell code execution when opening a zip file,
CVE-2026-57453
- 9.2.0679: out-of-bounds read of text properties when handling a
crafted undo file, CVE-2026-57454
- 9.2.0698: out-of-bounds write when using soundfold() on a large input,
CVE-2026-57455
- 9.2.0699: possible code execution when using python complete,
CVE-2026-57456
* Skip Test_clientserver_serverlist_list() and Test_remote_serverlist()
-- James McCoy <[email protected]> Tue, 07 Jul 2026 21:46:03 -0400
### Old Ubuntu Delta ###
vim (2:9.2.0524-1ubuntu1) stonking; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/p/0001-fix-flaky-terminal-mode-test.vim:
Fix flaky Vim terminal mode test
- d/p/0002-disable-failing-tests-on-ppc64.patch:
Disable some tests that were failing during build on
ppc64el. The tests are only disabled when building on ppc64el.
- d/p/0003-skip-test-failing-on-s390x-only.patch:
Skip tests failing on s390x
- d/p/increase_timeout.diff: Increase timeout
for the Test_pattern_compile_speed patch.
- d/p/debian/ubuntu-grub-syntax.patch:
Add Ubuntu-specific "quiet" keyword.
- d/runtime/vimrc: "syntax on" is a sane default for non-tiny Vim.
- d/p/disable-test-term-gettty.patch: disable a test
which was failing due to changes outside of vim (LP: #2142681)
- debian/patches/0004-skip-autocmd-test-failing-on-s390x-only.patch:
Skip tests failing on s390x
- debian/patches/flaky-visual-block-test.patch:
skip flaky visual block test.
- debian/patches/flaky-statusline-test.patch:
skip flaky statusline test.
-- Gianfranco Costamagna <[email protected]> Thu, 18 Jun 2026
10:08:28 +0200
** Affects: vim (Ubuntu)
Importance: Wishlist
Status: New
** Tags: dcr-merge
** Changed in: vim (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: vim (Ubuntu)
Milestone: None => ubuntu-26.05
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2160265
Title:
Merge vim 2:9.2.0782-1 from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vim/+bug/2160265/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
