From 9b21c2e7ed4b8f70dfeb5c10e38a93e54da34479cb6d84ba1e71d32b20386f84 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Tue, 13 Sep 2022 07:50:39 +0000 Subject: [PATCH] - Updated to version 9.0.0453, fixes the following problems - boo#1203194 - CVE-2022-3134 - boo#1203110 - CVE-2022-3099 * Writefile test leaves files behind. * Freeing the wrong string on failure. * Coverity complains about unused value. * Covertity still complains about using return value of getc(). * GUI: when CTRL-D is mapped in Insert mode it gets inserted. (Yasuhiro Matsumoto) * Some code blocks are nested too deep. * repeating a mapping does not use the right script context. * The do_arg_all() function is too long. * Crash when 'tagfunc' closes the window. * Cannot use a partial with :defer. * Using separate delete() call instead of writefile() 'D' flag. * Inverted condition is a bit confusing. * Signals test often fails on FreeBSD. * Cygwin: multibyte characters may be broken in terminal window. * Clang warnings for function prototypes. * :findrepl does not escape '&' and '~' properly. * :defer not tested with exceptions and ":qa!". * Members of funccall_T are inconsistently named. * Using :defer in expression funcref not tested. * GUI test sometimes hangs on CI. * CI uses older clang version. * Javascript module files are not recoginzed. * 'equalalways' may be off when 'laststatus' is zero. * Crash when passing invalid arguments to assert_fails(). * Arguments in a partial not used by a :def function. * Deferred functions not invoked when partial func exits. OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=745 --- vim-9.0.0381.tar.gz | 3 -- vim-9.0.0453.tar.gz | 3 ++ vim.changes | 83 +++++++++++++++++++++++++++++++++++++++++++++ vim.spec | 2 +- 4 files changed, 87 insertions(+), 4 deletions(-) delete mode 100644 vim-9.0.0381.tar.gz create mode 100644 vim-9.0.0453.tar.gz diff --git a/vim-9.0.0381.tar.gz b/vim-9.0.0381.tar.gz deleted file mode 100644 index 6a75b8b..0000000 --- a/vim-9.0.0381.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7fe9855eef941d23efa06729184477769e1fae94c09dfd29e74f3d1e96cfb403 -size 16831181 diff --git a/vim-9.0.0453.tar.gz b/vim-9.0.0453.tar.gz new file mode 100644 index 0000000..d619762 --- /dev/null +++ b/vim-9.0.0453.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b90063706a2a9ee234275e0dd4b71a11e24867c33203c432fd6e9799fdc3bff9 +size 16847442 diff --git a/vim.changes b/vim.changes index 2155c14..61628b5 100644 --- a/vim.changes +++ b/vim.changes @@ -1,3 +1,86 @@ +------------------------------------------------------------------- +Tue Sep 13 07:41:04 UTC 2022 - Ondřej Súkup + +- Updated to version 9.0.0453, fixes the following problems +- boo#1203194 - CVE-2022-3134 +- boo#1203110 - CVE-2022-3099 + * Writefile test leaves files behind. + * Freeing the wrong string on failure. + * Coverity complains about unused value. + * Covertity still complains about using return value of getc(). + * GUI: when CTRL-D is mapped in Insert mode it gets inserted. (Yasuhiro + Matsumoto) + * Some code blocks are nested too deep. + * repeating a mapping does not use the right script context. + * The do_arg_all() function is too long. + * Crash when 'tagfunc' closes the window. + * Cannot use a partial with :defer. + * Using separate delete() call instead of writefile() 'D' flag. + * Inverted condition is a bit confusing. + * Signals test often fails on FreeBSD. + * Cygwin: multibyte characters may be broken in terminal window. + * Clang warnings for function prototypes. + * :findrepl does not escape '&' and '~' properly. + * :defer not tested with exceptions and ":qa!". + * Members of funccall_T are inconsistently named. + * Using :defer in expression funcref not tested. + * GUI test sometimes hangs on CI. + * CI uses older clang version. + * Javascript module files are not recoginzed. + * 'equalalways' may be off when 'laststatus' is zero. + * Crash when passing invalid arguments to assert_fails(). + * Arguments in a partial not used by a :def function. + * Deferred functions not invoked when partial func exits. + * matchstr() does match column offset. (Yasuhiro Matsumoto) + * GUI test sometimes fails on MS-Windows. + * #{g:x} was seen as a curly-braces expression. + * Struct member cts_lnum is unused. + * Only created files can be cleaned up with one call. + * Compiler warning for unused argument. + * ASAN reports a memory leak. + * matchstr() still does not match column offset when done after a text + search. + * ml_get error when appending lines in popup window. + * Jsonnet files are not recognized. + * Manually deleting temp test files. + * The :defer command does not check the function argument count and types. + * Function went missing. + * Not enough testing of the :all command. + * "for" and "while" not recognized after :vim9cmd and :legacy. (Emanuele + Torre) + * gitattributes files are not recognized. + * Autocmd test is a bit flaky on MS-Windows. + * Failed flaky tests report only start time. + * Drupal theme files are not recognized. + * Autocmd test uses common file name. + * Not all keys are tested for the MS-Windows GUI. + * Cannot use repeat() with a blob. + * Current mode shows in message window. + * Crash when using for loop variable in closure. + * Coverity warns for not checking allocation failure. + * gitignore files are not recognized. + * Compiler warning for uninitialized variable. + * CI: running tests in parallel causes flakiness. + * No error when a custom completion function returns something else than + the expected list. + * Cannot put virtual text above a line. + * Cursor wrong if inserting before line with virtual text above. + * Crash when using mkdir() with "R" flag in compiled function. + * Closure in for loop test fails on some systems. + * Virtual text "above" doesn't handel line numbers. + * Blueprint files are not recognized. + * Trying to declare g:variable gives confusing error. + * When opening/closing window text moves up/down. + * Message window may be positioned too low. + * Using :echowin while at the hit-enter prompt causes problems. + * SubRip files are not recognized. + * There is no easy way to translate a string with a key code into a + readable string. + * Return value of argument check functions is inconsistent. + * Virtual text "above" does not work with 'nowrap'. + * Visual highlighting extends into virtual text prop. + * On an AZERTY keyboard digit keys get the shift modifier. + ------------------------------------------------------------------- Mon Sep 5 07:42:36 UTC 2022 - Ondřej Súkup diff --git a/vim.spec b/vim.spec index d7914b9..e5bc194 100644 --- a/vim.spec +++ b/vim.spec @@ -17,7 +17,7 @@ %define pkg_version 9.0 -%define patchlevel 0381 +%define patchlevel 0453 %define patchlevel_compact %{patchlevel} %define VIM_SUBDIR vim90 %define site_runtimepath %{_datadir}/vim/site