From 003f3e2dc9476563201ce545955e745ff1ad8e2669416e59f497c708271bfafe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Mon, 31 Jan 2022 11:35:52 +0000 Subject: [PATCH 1/3] - fixes boo#1195336 CVE-2022-0393 - Updated to version 8.2.4266, fixes the following problems * Cannot use an import in 'patchexpr'. * Gnuplot file not recognized. * Not all gitconfig files are recognized. * All conceal tests are skipped without the screendumps feature. * json5 files are not recognized. * Cannot use an import in 'printexpr'. * Cannot use an import in 'charconvert'. * Resizing terminal may cause to behave like CTRL-Z. * Various file types not recognized. * Cannot use an import in the "expr" part of 'spellsuggest'. * Vim9: the switch for executing instructions is too long. * Some tests do not clean up properly. * When using the GUI CTRL-Z does not stop gvim. * Vim9: cannot export function that exists globally. * Entering a character with CTRL-V may include modifiers. * screenpos() has non-zero row for invisible text. * The normal_cmd() function is too long. * Condition with many "(" causes a crash. * Recursion test fails with MSVC. * Using setbufvar() may change the window title. * partial in 'opfunc' cannot use an imported function. * Window title test fails in some configurations. * Too much code for supporting old MSVC versions. * Illegal memory access with large 'tabstop' in Ex mode. * Illegal memory access when copying lines in Visual mode. * Vim9: cannot use a function from an autoload import directly. * Illegal memory access when undo makes Visual area invalid. * Illegal memory access with bracketed paste in Ex mode. OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=701 --- vim-8.2.4186.tar.gz | 3 -- vim-8.2.4266.tar.gz | 3 ++ vim.changes | 80 +++++++++++++++++++++++++++++++++++++++++++++ vim.spec | 2 +- 4 files changed, 84 insertions(+), 4 deletions(-) delete mode 100644 vim-8.2.4186.tar.gz create mode 100644 vim-8.2.4266.tar.gz diff --git a/vim-8.2.4186.tar.gz b/vim-8.2.4186.tar.gz deleted file mode 100644 index ed66247..0000000 --- a/vim-8.2.4186.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8eaea7c25165bff73f6d06e3c5829a0546f23cef8803258fc324ce0d253cbf21 -size 15973893 diff --git a/vim-8.2.4266.tar.gz b/vim-8.2.4266.tar.gz new file mode 100644 index 0000000..b947ef9 --- /dev/null +++ b/vim-8.2.4266.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e9cd8c4add5897c92c67bac4284df7a6973814871ee88c01b6f96ea259d022fe +size 16013662 diff --git a/vim.changes b/vim.changes index e8b33df..51e7184 100644 --- a/vim.changes +++ b/vim.changes @@ -1,3 +1,83 @@ +------------------------------------------------------------------- +Mon Jan 31 11:21:06 UTC 2022 - Ondřej Súkup + +- fixes boo#1195336 CVE-2022-0393 +- Updated to version 8.2.4266, fixes the following problems + * Cannot use an import in 'patchexpr'. + * Gnuplot file not recognized. + * Not all gitconfig files are recognized. + * All conceal tests are skipped without the screendumps feature. + * json5 files are not recognized. + * Cannot use an import in 'printexpr'. + * Cannot use an import in 'charconvert'. + * Resizing terminal may cause to behave like CTRL-Z. + * Various file types not recognized. + * Cannot use an import in the "expr" part of 'spellsuggest'. + * Vim9: the switch for executing instructions is too long. + * Some tests do not clean up properly. + * When using the GUI CTRL-Z does not stop gvim. + * Vim9: cannot export function that exists globally. + * Entering a character with CTRL-V may include modifiers. + * screenpos() has non-zero row for invisible text. + * The normal_cmd() function is too long. + * Condition with many "(" causes a crash. + * Recursion test fails with MSVC. + * Using setbufvar() may change the window title. + * partial in 'opfunc' cannot use an imported function. + * Window title test fails in some configurations. + * Too much code for supporting old MSVC versions. + * Illegal memory access with large 'tabstop' in Ex mode. + * Illegal memory access when copying lines in Visual mode. + * Vim9: cannot use a function from an autoload import directly. + * Illegal memory access when undo makes Visual area invalid. + * Illegal memory access with bracketed paste in Ex mode. + * Reading before the start of the line. + * Some functions in normal.c are very long. + * Long/int compiler warnings; function arguments swapped. + * Vim9: no error when using a number for map() second argument + * Vim9: depth argument of :lockvar not parsed in :def function. + * Filter-map test fails. + * Vim9: using "lockvar!" in :def function does not work. + * No tests for clicking in the GUI tabline. + * Possible crash when invoking timer callback fails. + * MS-Windows: set_guifontwide() is included but won't work. + * Vim9: map() gives type error when type was not declared. + * Some compilers don't like a goto label without statement. + * Crash when recording and using Select mode. + * test_garbagecollect_now() does not check v:testing as documented. + * Invalid check for NULL pointer. + * Accessing freed memory. + * Record buffer wrong if character in Select mode was not typed. + * *.tf file could be fileytpe "tf" or "terraform". + * Build fails with unusual configuration. + * Error for using flatten() in Vim9 script is unclear. + * Some type casts are redundant. + * Put in Visual mode cannot be repeated. + * Lua tests fail with Lua 5.4.4. + * ":retab 0" may cause illegal memory access. + * One error message not in errors.h. (Antonio Colombo) + * Stack corruption when looking for spell suggestions. + * No proper test for moving the window separator. + * The timeout limit for spell suggestions is always 5000 milli seconds. + * Channel out callback test is flaky on Mac. + * Vala files are not recognized. + * Generating the normal command table at runtime is inefficient. + * Using freed memory when substitute uses a recursive function call. + * Using short instead of int. + * Theoretical computation overflow. + * Vim9: finding global function without g: prefix but not finding global + variable is inconsistent. + * Coverity warns for array overrun. + * Number of test functions for GUI events is growing. + * Vim9: can still use a global function without g: at the script level. + * Accessing invalid memory when a regular expression checks the Visual + area while matching in a string. + * Some search tests fail. + * No test for the GUI find/replace dialog. + * Vim9: can use old style autoload function name. + * Autoload tests fails. + * Compiler warning for uninitialized variable. + ------------------------------------------------------------------- Sun Jan 23 15:43:30 UTC 2022 - Dirk Müller diff --git a/vim.spec b/vim.spec index 19fa532..f61a6b5 100644 --- a/vim.spec +++ b/vim.spec @@ -17,7 +17,7 @@ %define pkg_version 8.2 -%define patchlevel 4186 +%define patchlevel 4266 %define patchlevel_compact %{patchlevel} %define VIM_SUBDIR vim82 %define site_runtimepath %{_datadir}/vim/site From ca58a863610d3ea974c1c0eaaadda14ff6972ddc27d188a34216942163b9f14e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Thu, 3 Feb 2022 12:20:53 +0000 Subject: [PATCH 2/3] =?UTF-8?q?-=20Updated=20to=20version=208.2.4286,=20fi?= =?UTF-8?q?xes=20the=20following=20problems=20=20=20*=20Compiler=20warning?= =?UTF-8?q?=20for=20uninitialized=20variable.=20=20=20*=20Unused=20entry?= =?UTF-8?q?=20in=20keymap=20enum.=20=20=20*=20CI=20log=20output=20is=20lon?= =?UTF-8?q?g.=20=20=20*=20Coverity=20warns=20for=20using=20a=20NULL=20poin?= =?UTF-8?q?ter.=20=20=20*=20Generating=20nv=5Fcmdidxs.h=20requires=20build?= =?UTF-8?q?ing=20Vim=20twice.=20=20=20*=20Vim9=20expr=20test=20fails=20wit?= =?UTF-8?q?hout=20the=20channel=20feature.=20(Dominique=20Pell=C3=A9)=20?= =?UTF-8?q?=20=20*=20The=20EBCDIC=20support=20is=20outdated.=20=20=20*=20B?= =?UTF-8?q?asic=20and=20form=20filetype=20detection=20is=20incomplete.=20?= =?UTF-8?q?=20=20*=20Cannot=20use=20an=20autoload=20function=20from=20a=20?= =?UTF-8?q?package=20under=20start.=20=20=20*=20Separate=20test=20function?= =?UTF-8?q?=20for=20the=20GUI=20scrollbar.=20=20=20*=20Vim9:=20an=20import?= =?UTF-8?q?=20does=20not=20shadow=20a=20command=20modifier.=20=20=20*=20Bu?= =?UTF-8?q?ild=20with=20Athena=20GUI=20fails.=20(Elimar=20Riesebieter)=20?= =?UTF-8?q?=20=20*=20Vim9:=20cannot=20change=20item=20type=20with=20map()?= =?UTF-8?q?=20after=20range().=20=20=20*=20list-dict=20test=20crashes.=20?= =?UTF-8?q?=20=20*=20Using=20freed=20memory=20with=20:lopen=20and=20:bwipe?= =?UTF-8?q?.=20=20=20*=20Restricted=20mode=20requires=20the=20-Z=20command?= =?UTF-8?q?=20line=20option.=20=20=20*=20Using=20a=20variable=20for=20the?= =?UTF-8?q?=20return=20value=20is=20not=20needed.=20=20=20*=20Old=20mac=20?= =?UTF-8?q?resources=20files=20are=20no=20longer=20used.=20=20=20*=20Vim9:?= =?UTF-8?q?=20type=20of=20item=20in=20for=20loop=20not=20checked=20properl?= =?UTF-8?q?y.=20=20=20*=20Vim9:=20strict=20type=20checking=20after=20copy(?= =?UTF-8?q?)=20and=20deepcopy().=20-=20fixes=20boo#1195499=20CVE-2022-0417?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=702 --- vim-8.2.4266.tar.gz | 3 --- vim-8.2.4286.tar.gz | 3 +++ vim.changes | 26 ++++++++++++++++++++++++++ vim.spec | 2 +- 4 files changed, 30 insertions(+), 4 deletions(-) delete mode 100644 vim-8.2.4266.tar.gz create mode 100644 vim-8.2.4286.tar.gz diff --git a/vim-8.2.4266.tar.gz b/vim-8.2.4266.tar.gz deleted file mode 100644 index b947ef9..0000000 --- a/vim-8.2.4266.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e9cd8c4add5897c92c67bac4284df7a6973814871ee88c01b6f96ea259d022fe -size 16013662 diff --git a/vim-8.2.4286.tar.gz b/vim-8.2.4286.tar.gz new file mode 100644 index 0000000..4941821 --- /dev/null +++ b/vim-8.2.4286.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e7f4fc0c04668940bd2c31dfa1d344c4391cb5ac6697ee6f0c97499318ee86db +size 15963099 diff --git a/vim.changes b/vim.changes index 51e7184..6b5fdee 100644 --- a/vim.changes +++ b/vim.changes @@ -1,6 +1,32 @@ +------------------------------------------------------------------- +Thu Feb 3 12:18:46 UTC 2022 - Ondřej Súkup + +- Updated to version 8.2.4286, fixes the following problems + * Compiler warning for uninitialized variable. + * Unused entry in keymap enum. + * CI log output is long. + * Coverity warns for using a NULL pointer. + * Generating nv_cmdidxs.h requires building Vim twice. + * Vim9 expr test fails without the channel feature. (Dominique Pellé) + * The EBCDIC support is outdated. + * Basic and form filetype detection is incomplete. + * Cannot use an autoload function from a package under start. + * Separate test function for the GUI scrollbar. + * Vim9: an import does not shadow a command modifier. + * Build with Athena GUI fails. (Elimar Riesebieter) + * Vim9: cannot change item type with map() after range(). + * list-dict test crashes. + * Using freed memory with :lopen and :bwipe. + * Restricted mode requires the -Z command line option. + * Using a variable for the return value is not needed. + * Old mac resources files are no longer used. + * Vim9: type of item in for loop not checked properly. + * Vim9: strict type checking after copy() and deepcopy(). + ------------------------------------------------------------------- Mon Jan 31 11:21:06 UTC 2022 - Ondřej Súkup +- fixes boo#1195499 CVE-2022-0417 - fixes boo#1195336 CVE-2022-0393 - Updated to version 8.2.4266, fixes the following problems * Cannot use an import in 'patchexpr'. diff --git a/vim.spec b/vim.spec index f61a6b5..2366d27 100644 --- a/vim.spec +++ b/vim.spec @@ -17,7 +17,7 @@ %define pkg_version 8.2 -%define patchlevel 4266 +%define patchlevel 4286 %define patchlevel_compact %{patchlevel} %define VIM_SUBDIR vim82 %define site_runtimepath %{_datadir}/vim/site From 273a2838455e8604acc86a55159f989993448d0761a360f0fc1bad4965d2c372 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Thu, 3 Feb 2022 12:46:42 +0000 Subject: [PATCH 3/3] - fixes boo#1195509 CVE-2022-0443 OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=703 --- vim.changes | 1 + 1 file changed, 1 insertion(+) diff --git a/vim.changes b/vim.changes index 6b5fdee..47d64b0 100644 --- a/vim.changes +++ b/vim.changes @@ -1,6 +1,7 @@ ------------------------------------------------------------------- Thu Feb 3 12:18:46 UTC 2022 - Ondřej Súkup +- fixes boo#1195509 CVE-2022-0443 - Updated to version 8.2.4286, fixes the following problems * Compiler warning for uninitialized variable. * Unused entry in keymap enum.