From 9b223b9817e871ff2c37bc1d391104d2ad50cf92a3a089a08bd565809eb63417 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20S=C3=BAkup?= Date: Wed, 10 May 2023 17:06:58 +0000 Subject: [PATCH] - Updated to version 9.0.1538, fixes the following problems - fixes boo#1211256 CVE-2023-2609 * No error when calling remote_startserver() with an empty string. * Error when heredoc content looks like heredoc. * Line number not displayed when using 'smoothscroll'. * Assert message is confusing with boolean result. assert_inrange() replaces message instead of adding it. * Catch does not work when lines are joined with a newline. * Error message lacks mentioning the erroneous argument. * Misleading variable name for error message. * Crash when using wrong arg types to assert_match(). * Inserting lines when scrolling with 'smoothscroll' set. * Text scrolls unnecessarily when splitting and 'splitkeep' is not "cursor". * Test waits unnecessarily long before checking screendump. * reverse() does not work for a String. * Cannot use special keys in mapping. * Search stats not always visible when searching backwards. * Global 'filetype' is set when it is detected from the file content. * Completion for option name includes all bool options. * Failing redo of command with control characters. * Some functions give two error messages. * Some error messages are not marked for translation. * Passing -1 for bool is not always rejected. * 'smoothscroll' does not always work properly. * Condition is always true. * Crash when using negative value for term_cols. * Libsodium encryption is only used with "huge" features, even when manually enabled through configure. (Tony Mechelynck) * Code style test doesn't check for space after "if". * Cursor moves to wrong line when 'foldmethod' is "diff". (Rick Howe) OBS-URL: https://build.opensuse.org/package/show/editors/vim?expand=0&rev=812 --- vim-9.0.1504.tar.gz | 3 --- vim-9.0.1538.tar.gz | 3 +++ vim.changes | 42 ++++++++++++++++++++++++++++++++++++++++++ vim.spec | 3 ++- 4 files changed, 47 insertions(+), 4 deletions(-) delete mode 100644 vim-9.0.1504.tar.gz create mode 100644 vim-9.0.1538.tar.gz diff --git a/vim-9.0.1504.tar.gz b/vim-9.0.1504.tar.gz deleted file mode 100644 index cbc5b4e..0000000 --- a/vim-9.0.1504.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:35564632155dde1e7b2cc2607588244035e1406caba8fda24bbe36f8712325f3 -size 17008872 diff --git a/vim-9.0.1538.tar.gz b/vim-9.0.1538.tar.gz new file mode 100644 index 0000000..f103a5c --- /dev/null +++ b/vim-9.0.1538.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1deb740a47eb8dd94c3282a371cf7f0d77b27c852278c456b83354cbca58b6c8 +size 17014991 diff --git a/vim.changes b/vim.changes index d0a59e9..20d9f49 100644 --- a/vim.changes +++ b/vim.changes @@ -1,3 +1,45 @@ +------------------------------------------------------------------- +Wed May 10 17:04:52 UTC 2023 - Ondřej Súkup + +- Updated to version 9.0.1538, fixes the following problems +- fixes boo#1211256 CVE-2023-2609 + * No error when calling remote_startserver() with an empty string. + * Error when heredoc content looks like heredoc. + * Line number not displayed when using 'smoothscroll'. + * Assert message is confusing with boolean result. assert_inrange() + replaces message instead of adding it. + * Catch does not work when lines are joined with a newline. + * Error message lacks mentioning the erroneous argument. + * Misleading variable name for error message. + * Crash when using wrong arg types to assert_match(). + * Inserting lines when scrolling with 'smoothscroll' set. + * Text scrolls unnecessarily when splitting and 'splitkeep' is not "cursor". + * Test waits unnecessarily long before checking screendump. + * reverse() does not work for a String. + * Cannot use special keys in mapping. + * Search stats not always visible when searching backwards. + * Global 'filetype' is set when it is detected from the file content. + * Completion for option name includes all bool options. + * Failing redo of command with control characters. + * Some functions give two error messages. + * Some error messages are not marked for translation. + * Passing -1 for bool is not always rejected. + * 'smoothscroll' does not always work properly. + * Condition is always true. + * Crash when using negative value for term_cols. + * Libsodium encryption is only used with "huge" features, even when manually + enabled through configure. (Tony Mechelynck) + * Code style test doesn't check for space after "if". + * Cursor moves to wrong line when 'foldmethod' is "diff". (Rick Howe) + * Crash when register contents ends up being invalid. + * Crash when expanding "~" in substitute causes very long text. + * Test for 'smoothscroll' is ineffective. + * Test for expanding "~" in substitute takes too long. + * Test commented out in a wrong way. + * CI: sound dummy stopped working. + * Message for opening the cmdline window is not translated. + * :wqall does not trigger ExitPre. (Bart Libert) + ------------------------------------------------------------------- Tue May 2 09:11:18 UTC 2023 - Ondřej Súkup diff --git a/vim.spec b/vim.spec index dd9d8b3..01478ef 100644 --- a/vim.spec +++ b/vim.spec @@ -17,7 +17,7 @@ %define pkg_version 9.0 -%define patchlevel 1504 +%define patchlevel 1538 %define patchlevel_compact %{patchlevel} %define VIM_SUBDIR vim90 %define site_runtimepath %{_datadir}/vim/site @@ -205,6 +205,7 @@ interpreters built in %package -n xxd Summary: A hex dump utility +Conflicts: vim <= 9.0.1418 %description -n xxd xxd creates a hex dump of a given file or standard input. It can also convert