From 003f3e2dc9476563201ce545955e745ff1ad8e2669416e59f497c708271bfafe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Mon, 31 Jan 2022 11:35:52 +0000 Subject: [PATCH] - fixes boo#1195336 CVE-2022-0393 - Updated to version 8.2.4266, fixes the following problems * Cannot use an import in 'patchexpr'. * Gnuplot file not recognized. * Not all gitconfig files are recognized. * All conceal tests are skipped without the screendumps feature. * json5 files are not recognized. * Cannot use an import in 'printexpr'. * Cannot use an import in 'charconvert'. * Resizing terminal may cause to behave like CTRL-Z. * Various file types not recognized. * Cannot use an import in the "expr" part of 'spellsuggest'. * Vim9: the switch for executing instructions is too long. * Some tests do not clean up properly. * When using the GUI CTRL-Z does not stop gvim. * Vim9: cannot export function that exists globally. * Entering a character with CTRL-V may include modifiers. * screenpos() has non-zero row for invisible text. * The normal_cmd() function is too long. * Condition with many "(" causes a crash. * Recursion test fails with MSVC. * Using setbufvar() may change the window title. * partial in 'opfunc' cannot use an imported function. * Window title test fails in some configurations. * Too much code for supporting old MSVC versions. * Illegal memory access with large 'tabstop' in Ex mode. * Illegal memory access when copying lines in Visual mode. * Vim9: cannot use a function from an autoload import directly. * Illegal memory access when undo makes Visual area invalid. * Illegal memory access with bracketed paste in Ex mode. OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=701 --- vim-8.2.4186.tar.gz | 3 -- vim-8.2.4266.tar.gz | 3 ++ vim.changes | 80 +++++++++++++++++++++++++++++++++++++++++++++ vim.spec | 2 +- 4 files changed, 84 insertions(+), 4 deletions(-) delete mode 100644 vim-8.2.4186.tar.gz create mode 100644 vim-8.2.4266.tar.gz diff --git a/vim-8.2.4186.tar.gz b/vim-8.2.4186.tar.gz deleted file mode 100644 index ed66247..0000000 --- a/vim-8.2.4186.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8eaea7c25165bff73f6d06e3c5829a0546f23cef8803258fc324ce0d253cbf21 -size 15973893 diff --git a/vim-8.2.4266.tar.gz b/vim-8.2.4266.tar.gz new file mode 100644 index 0000000..b947ef9 --- /dev/null +++ b/vim-8.2.4266.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e9cd8c4add5897c92c67bac4284df7a6973814871ee88c01b6f96ea259d022fe +size 16013662 diff --git a/vim.changes b/vim.changes index e8b33df..51e7184 100644 --- a/vim.changes +++ b/vim.changes @@ -1,3 +1,83 @@ +------------------------------------------------------------------- +Mon Jan 31 11:21:06 UTC 2022 - Ondřej Súkup + +- fixes boo#1195336 CVE-2022-0393 +- Updated to version 8.2.4266, fixes the following problems + * Cannot use an import in 'patchexpr'. + * Gnuplot file not recognized. + * Not all gitconfig files are recognized. + * All conceal tests are skipped without the screendumps feature. + * json5 files are not recognized. + * Cannot use an import in 'printexpr'. + * Cannot use an import in 'charconvert'. + * Resizing terminal may cause to behave like CTRL-Z. + * Various file types not recognized. + * Cannot use an import in the "expr" part of 'spellsuggest'. + * Vim9: the switch for executing instructions is too long. + * Some tests do not clean up properly. + * When using the GUI CTRL-Z does not stop gvim. + * Vim9: cannot export function that exists globally. + * Entering a character with CTRL-V may include modifiers. + * screenpos() has non-zero row for invisible text. + * The normal_cmd() function is too long. + * Condition with many "(" causes a crash. + * Recursion test fails with MSVC. + * Using setbufvar() may change the window title. + * partial in 'opfunc' cannot use an imported function. + * Window title test fails in some configurations. + * Too much code for supporting old MSVC versions. + * Illegal memory access with large 'tabstop' in Ex mode. + * Illegal memory access when copying lines in Visual mode. + * Vim9: cannot use a function from an autoload import directly. + * Illegal memory access when undo makes Visual area invalid. + * Illegal memory access with bracketed paste in Ex mode. + * Reading before the start of the line. + * Some functions in normal.c are very long. + * Long/int compiler warnings; function arguments swapped. + * Vim9: no error when using a number for map() second argument + * Vim9: depth argument of :lockvar not parsed in :def function. + * Filter-map test fails. + * Vim9: using "lockvar!" in :def function does not work. + * No tests for clicking in the GUI tabline. + * Possible crash when invoking timer callback fails. + * MS-Windows: set_guifontwide() is included but won't work. + * Vim9: map() gives type error when type was not declared. + * Some compilers don't like a goto label without statement. + * Crash when recording and using Select mode. + * test_garbagecollect_now() does not check v:testing as documented. + * Invalid check for NULL pointer. + * Accessing freed memory. + * Record buffer wrong if character in Select mode was not typed. + * *.tf file could be fileytpe "tf" or "terraform". + * Build fails with unusual configuration. + * Error for using flatten() in Vim9 script is unclear. + * Some type casts are redundant. + * Put in Visual mode cannot be repeated. + * Lua tests fail with Lua 5.4.4. + * ":retab 0" may cause illegal memory access. + * One error message not in errors.h. (Antonio Colombo) + * Stack corruption when looking for spell suggestions. + * No proper test for moving the window separator. + * The timeout limit for spell suggestions is always 5000 milli seconds. + * Channel out callback test is flaky on Mac. + * Vala files are not recognized. + * Generating the normal command table at runtime is inefficient. + * Using freed memory when substitute uses a recursive function call. + * Using short instead of int. + * Theoretical computation overflow. + * Vim9: finding global function without g: prefix but not finding global + variable is inconsistent. + * Coverity warns for array overrun. + * Number of test functions for GUI events is growing. + * Vim9: can still use a global function without g: at the script level. + * Accessing invalid memory when a regular expression checks the Visual + area while matching in a string. + * Some search tests fail. + * No test for the GUI find/replace dialog. + * Vim9: can use old style autoload function name. + * Autoload tests fails. + * Compiler warning for uninitialized variable. + ------------------------------------------------------------------- Sun Jan 23 15:43:30 UTC 2022 - Dirk Müller diff --git a/vim.spec b/vim.spec index 19fa532..f61a6b5 100644 --- a/vim.spec +++ b/vim.spec @@ -17,7 +17,7 @@ %define pkg_version 8.2 -%define patchlevel 4186 +%define patchlevel 4266 %define patchlevel_compact %{patchlevel} %define VIM_SUBDIR vim82 %define site_runtimepath %{_datadir}/vim/site