[ubuntu/mantic-proposed] vim 2:9.0.1658-1ubuntu1 (Accepted)

[Julian Andres Klode]

vim (2:9.0.1658-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - debian/runtime/vimrc:
      + "syntax on" is a sane default for non-tiny Vim.
    - debian/patches/debian/ubuntu-grub-syntax.patch:
      + Add Ubuntu-specific "quiet" keyword.
    - debian/patches/ubuntu-mouse-off.patch:
     + Mouse mode is actively harmful in some chroots.
    - debian/patches/patches/increase_timeout.diff:
      + Increase timeout for the Test_pattern_compile_speed patch.
    - debian/patches/0001-fix-flaky-terminal-mode-test.vim:
      + Fix flaky Vim terminal mode test.
    - debian/patches/0002-disable-failing-tests-on-ppc64.patch:
      + Disable some tests that were throwing an ENOMEM during build on
        ppc64el. The tests are only disabled when building on ppc64el.
  * Dropped changes:
    - Remove the CVE patches, included upstream

vim (2:9.0.1658-1) unstable; urgency=medium

  * Merge upstream patch v9.0.1658
    + Vulnerability fixes
      - 9.0.1392: Using NULL pointer with nested :open command, CVE-2023-1264
      - 9.0.1402: Crash when using null_class, CVE-2023-1355
      - 9.0.1531: Crash when register contents ends up being invalid,
        CVE-2023-2609
      - 9.0.1532: Crash when expanding "~" in substitute causes very long
        text, (Closes: #1035955, CVE-2023-2610)
    + 9.0.1409: Racket files are recognized as their own filetype, rather than
      as scheme
    + 9.0.1619: Always recognize the codes for focus gained/lost, even if Vim
      doesn't expect the terminal to support them.  (Closes: #1038401)
    + Document behavior of C-x / C-a on numbers outside the range of a 64-bit
      value.  (Closes: #1031256)
  * Refresh patches, dropping backport of v9.0.1499
  * Include uganda.txt, sponsor.txt, and versionX.txt in vim-common so the
    intro screen has functional help links when only vim-tiny and vim-common
    are installed
  * Declare compliance with Policy 4.6.2, no changes needed
  * Remove non-functional diversion handling in vim-runtime.postinst

Date: Mon, 03 Jul 2023 16:21:02 +0200
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/vim/2:9.0.1658-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 03 Jul 2023 16:21:02 +0200
Source: vim
Built-For-Profiles: noudeb
Architecture: source
Version: 2:9.0.1658-1ubuntu1
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Closes: 1031256 1035955 1038401
Changes:
 vim (2:9.0.1658-1ubuntu1) mantic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - debian/runtime/vimrc:
       + "syntax on" is a sane default for non-tiny Vim.
     - debian/patches/debian/ubuntu-grub-syntax.patch:
       + Add Ubuntu-specific "quiet" keyword.
     - debian/patches/ubuntu-mouse-off.patch:
      + Mouse mode is actively harmful in some chroots.
     - debian/patches/patches/increase_timeout.diff:
       + Increase timeout for the Test_pattern_compile_speed patch.
     - debian/patches/0001-fix-flaky-terminal-mode-test.vim:
       + Fix flaky Vim terminal mode test.
     - debian/patches/0002-disable-failing-tests-on-ppc64.patch:
       + Disable some tests that were throwing an ENOMEM during build on
         ppc64el. The tests are only disabled when building on ppc64el.
   * Dropped changes:
     - Remove the CVE patches, included upstream
 .
 vim (2:9.0.1658-1) unstable; urgency=medium
 .
   * Merge upstream patch v9.0.1658
     + Vulnerability fixes
       - 9.0.1392: Using NULL pointer with nested :open command, CVE-2023-1264
       - 9.0.1402: Crash when using null_class, CVE-2023-1355
       - 9.0.1531: Crash when register contents ends up being invalid,
         CVE-2023-2609
       - 9.0.1532: Crash when expanding "~" in substitute causes very long
         text, (Closes: #1035955, CVE-2023-2610)
     + 9.0.1409: Racket files are recognized as their own filetype, rather than
       as scheme
     + 9.0.1619: Always recognize the codes for focus gained/lost, even if Vim
       doesn't expect the terminal to support them.  (Closes: #1038401)
     + Document behavior of C-x / C-a on numbers outside the range of a 64-bit
       value.  (Closes: #1031256)
   * Refresh patches, dropping backport of v9.0.1499
   * Include uganda.txt, sponsor.txt, and versionX.txt in vim-common so the
     intro screen has functional help links when only vim-tiny and vim-common
     are installed
   * Declare compliance with Policy 4.6.2, no changes needed
   * Remove non-functional diversion handling in vim-runtime.postinst
Checksums-Sha1:
 91c9ac31b59273043b48b04c88a9762f373b85d5 3041 vim_9.0.1658-1ubuntu1.dsc
 68a82e6957fbc666c287def0a012be5dc91d73ac 11172116 vim_9.0.1658.orig.tar.xz
 fc412bdf244456fd0327d28363cbb9f8ce5d93e0 204256 vim_9.0.1658-1ubuntu1.debian.tar.xz
 d4a7038b5ba6f3b968a0c6bb87a440607fdcf40d 8776 vim_9.0.1658-1ubuntu1_source.buildinfo
Checksums-Sha256:
 fbb4df427b397bee225717565d0f1929f4c87022f3a2dfa5c5df5a3f66f136d4 3041 vim_9.0.1658-1ubuntu1.dsc
 789b78c2e0635332dcc2e1b8714836783085834a9297e3a625de11e4119922bb 11172116 vim_9.0.1658.orig.tar.xz
 f4a436aebe21a3b28a5636edbce9047755b1e1e2ee5da5f67b2e44c40fcf365b 204256 vim_9.0.1658-1ubuntu1.debian.tar.xz
 a7530d567fd825edf0e86997515c74099dfef72710e8abca5eb13c36230fc2fe 8776 vim_9.0.1658-1ubuntu1_source.buildinfo
Files:
 736b2bac81b9c8d1d852babf361ddbe0 3041 editors optional vim_9.0.1658-1ubuntu1.dsc
 175d6bc345823c10e763f30d9ab7b61a 11172116 editors optional vim_9.0.1658.orig.tar.xz
 953577c43258e32db2444f8fe695fcaf 204256 editors optional vim_9.0.1658-1ubuntu1.debian.tar.xz
 63e0e4e371a3e4186713d263246b0d12 8776 editors optional vim_9.0.1658-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Vim Maintainers <team+vim at tracker.debian.org>