-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 20 Nov 2023 11:05:25 -0500
Source: vim
Architecture: source
Version: 2:9.0.2116-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Vim Maintainers <team+vim@tracker.debian.org>
Changed-By: James McCoy <jamessan@debian.org>
Changes:
vim (2:9.0.2116-1) unstable; urgency=medium
.
* Merge upstream patch v9.0.2116
+ Security fixes
- 9.0.2106: Use-after-free in win_close(), CVE-2023-48231
- 9.0.2107: FPE in adjust_plines_for_skipcol, CVE-2023-48232
- 9.0.2108: overflow with count for :s command. Abort command if count
is too large, CVE-2023-48233
- 9.0.2109: overflow in nv_z_get_count. Limit max value of count,
CVE-2023-48234
- 9.0.2110: overflow in ex address parsing. Verify lnum is positive
before subtracting from LONG_MAX, CVE-2023-48235
- 9.0.2111: overflow in get_number. Return 0 when the count gets too
large, CVE-2023-48236
- 9.0.2112: overflow in shift_line. Limit indent to INT_MAX,
CVE-2023-48237
+ 9.0.2116: Crash when callback function aborts because of recursiveness.
- Fixes FTBFS on armel
Checksums-Sha1:
02d26c67bb6bd12d06894f4ca5bf86fe0a9ee159 3177 vim_9.0.2116-1.dsc
bcd610332d16d000fd08a2f6588bdc87ce960751 11392984 vim_9.0.2116.orig.tar.xz
88af3956add894086350058340417c12c6bc930b 187300 vim_9.0.2116-1.debian.tar.xz
Checksums-Sha256:
13a3f80cc7cdf03e65ba8016d3746325ab9013ccdf4860dc816dab9e10e391a1 3177 vim_9.0.2116-1.dsc
b8e4d64b949ec16e37b8fe2df011475a1a6ac1eeb25fc518ae0fb97ce8b6a828 11392984 vim_9.0.2116.orig.tar.xz
566fd27b303da29bf7e621a78697cf443c1862e46054d96e05ffe1ac4ae7ba1d 187300 vim_9.0.2116-1.debian.tar.xz
Files:
075f6a630651550a793674055c86dc9a 3177 editors optional vim_9.0.2116-1.dsc
f46dfb8b4376e8eb9ca0dc713b66a103 11392984 editors optional vim_9.0.2116.orig.tar.xz
1e44c49343df15c72ed2df55e2648a46 187300 editors optional vim_9.0.2116-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKoBAEBCgCSFiEEkb+/TWlWvV33ty0j3+aRrjMbo9sFAmVbhBlfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDkx
QkZCRjRENjk1NkJENURGN0I3MkQyM0RGRTY5MUFFMzMxQkEzREIUHGphbWVzc2Fu
QGRlYmlhbi5vcmcACgkQ3+aRrjMbo9t39xAAgbCfPbc+yjk3Oqdmq5UwMvH4Atfu
kG7kcjkscQu5OkTP2z6F2SA7/DggM5uGvr6kNTX8558hRq4JpXsImIIIdq44cmQH
O7Gnbl6GWVUx0V3bgnkGYIgkxbzOgYYyUBvsblAmkKAvWNfd0YbX5X3v+1meDz3a
bH0svvUW1bYXn8IVh/5gu1nB9CVBzH9b8izt2cCgBAthX/AYyEmpkt8eXwJEhpgj
RCBhB2G6oBByESAJoASORmgguUJfNTWoNt5lM0ydeIImNYf2jwS7rOPiL52XY3kp
0czPfTBdBP8OYUtx7EQcZdqDeeSmf4up4wS0i9HLFYq/VLx9SVda8ryYkjJm2w4v
fc4RJgnv7FTB5kLd8HPpC68Q7Aw/1nyJo3bqfzI8jii4WDGzZqbXtDo8GYUtZjHd
rmQFvdZbQz4YKobMndbZtTBBJZy2TnwvTo9xReHEfJ/A8H+6w3/jU35T70Ek9cXF
vOQV9KCuQDViQN1QEmFl90MPxjMKQYMP+dxgQkBqGco76MZoXbDR2CP6Fj8mcteC
8bTm7mjYKQH1g80SM4L3MXbJHrHl99IVpoyoXreHBeGZn8P3bvUapGOzuwFGPOJO
xKdgh4+HNqsZzy6pqmw6RLpGlVxBHF66HMicF7nbMq0I3Uqqy6ezIZ4GjWT+FCSX
eTAlaCyZFslJrkg=
=jRKm
-----END PGP SIGNATURE-----
