Version 0.3.4-1 of neovim is marked for autoremoval from testing on Fri 19 Jul 2019. It is affected by #930024. The removal of neovim will also cause the removal of (transitive) reverse dependencies: lua-nvim, neovim-qt, python-neovim, ruby-neovim. You should try to prevent the removal by fixing these RC bugs.
CVE-2019-12735: getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.
CVE-2019-12735: getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.
CVE-2019-12735: getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.
Please fix it.
The package has not entered testing even though the delay is over
normal
The package has not entered testing even though the 2-day delay is over.Check why.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/neovim.png){kind=link}