vim - Debian Package Tracker

general

source: vim (main)
version: 2:9.1.0967-1
maintainer: Debian Vim Maintainers (DMD)
uploaders: James McCoy [DMD]
arch: all any
std-ver: 4.7.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2:8.1.0875-5+deb10u2
o-o-sec: 2:8.1.0875-5+deb10u6
oldstable: 2:8.2.2434-3+deb11u1
stable: 2:9.0.1378-2
testing: 2:9.1.0861-1
unstable: 2:9.1.0967-1

versioned links

2:8.1.0875-5+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:8.1.0875-5+deb10u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:8.2.2434-3+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:9.0.1378-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:9.1.0861-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2:9.1.0967-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

vim (40 bugs: 0, 19, 21, 0)
vim-athena
vim-common (6 bugs: 0, 2, 4, 0)
vim-doc (1 bugs: 0, 0, 1, 0)
vim-gtk3 (3 bugs: 0, 1, 2, 0)
vim-gui-common
vim-motif
vim-nox (1 bugs: 0, 0, 1, 0)
vim-runtime (32 bugs: 0, 14, 18, 0)
vim-tiny (1 bugs: 0, 1, 0, 0)
xxd (2 bugs: 0, 0, 2, 0)

action needed

A new upstream version is available: 9.1.0970 high

A new upstream version 9.1.0970 is available, you should consider packaging it.

Created: 2024-11-17 Last update: 2024-12-30 12:04

Depends on packages which need a new maintainer normal

The packages that vim depends on which need a new maintainer are:

lua5.1 (#996252)
- Depends: liblua5.1-0 liblua5.1-0 liblua5.1-0
- Build-Depends: lua5.1
docbook-xml (#802368)
- Build-Depends-Indep: docbook-xml

Created: 2022-10-24 Last update: 2024-12-30 13:33

16 bugs tagged patch in the BTS normal

The BTS contains patches fixing 16 bugs, consider including or untagging them.

Created: 2024-02-25 Last update: 2024-12-30 13:31

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2024-01-19 Last update: 2024-12-30 12:30

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2024-09-04 Last update: 2024-12-29 18:02

AppStream hints: 2 warnings normal

AppStream found metadata issues for packages:

vim-common: 1 warning
vim-gui-common: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2020-06-01 Last update: 2020-06-01 01:13

debian/patches: 4 patches to forward upstream low

Among the 4 debian patches available in version 2:9.1.0967-1 of the package, we noticed the following issues:

4 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2024-12-29 18:03

8 low-priority security issues in bookworm low

There are 8 open security issues in bookworm.

8 issues left for the package maintainer to handle:

CVE-2023-2610: (needs triaging) Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.
CVE-2023-4738: (needs triaging) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4752: (needs triaging) Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVE-2023-4781: (needs triaging) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVE-2023-5344: (needs triaging) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
CVE-2024-22667: (needs triaging) Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.
CVE-2024-43802: (needs triaging) Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tb_off position within the typebuf variable to point outside of the valid buffer size, which can then later lead to a heap-buffer overflow in e.g. ins_typebuf(). Therefore, when flushing the typeahead buffer, check if there is enough space left before advancing the off position. If not, fall back to flush current typebuf contents. It's not quite clear yet, what can lead to this situation. It seems to happen when error messages occur (which will cause Vim to flush the typeahead buffer) in comnination with several long mappgins and so it may eventually move the off position out of a valid buffer size. Impact is low since it is not easily reproducible and requires to have several mappings active and run into some error condition. But when this happens, this will cause a crash. The issue has been fixed as of Vim patch v9.1.0697. Users are advised to upgrade. There are no known workarounds for this issue.
CVE-2024-47814: (needs triaging) Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-06-10 Last update: 2024-12-29 10:00

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2024-10-15 Last update: 2024-10-15 12:03

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2020-02-26 Last update: 2023-09-13 08:27

testing migrations

This package will soon be part of the auto-libsodium transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- Migration status for vim (2:9.1.0861-1 to 2:9.1.0967-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ autopkgtest for vim/2:9.1.0967-1: amd64: Pass, arm64: Pass, armel: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ autopkgtest for vim-youcompleteme/0+20240827+gitb6e8c64+ds-3: amd64: Regression or new test ♻ (reference ♻), arm64: Regression or new test ♻ (reference ♻), armel: Regression or new test ♻ (reference ♻), armhf: Regression or new test ♻ (reference ♻), i386: Regression or new test ♻ (reference ♻), ppc64el: Regression or new test ♻ (reference ♻), s390x: Regression or new test ♻ (reference ♻)
- ∙ ∙ Too young, only 1 of 5 days old
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/v/vim.html
- ∙ ∙ Waiting for reproducibility test results on armhf - info ♻
- ∙ ∙ Waiting for reproducibility test results on i386 - info ♻
- Not considered

news

[rss feed]

[2024-12-29] Accepted vim 2:9.1.0967-1 (source) into unstable (James McCoy)
[2024-11-16] vim 2:9.1.0861-1 MIGRATED to testing (Debian testing watch)
[2024-11-13] Accepted vim 2:9.1.0861-1 (source) into unstable (James McCoy)
[2024-10-24] vim 2:9.1.0777-1 MIGRATED to testing (Debian testing watch)
[2024-10-13] Accepted vim 2:9.1.0777-1 (source) into unstable (James McCoy)
[2024-09-28] vim 2:9.1.0709-2 MIGRATED to testing (Debian testing watch)
[2024-09-21] Accepted vim 2:9.1.0709-2 (source) into unstable (James McCoy)
[2024-09-03] Accepted vim 2:9.1.0709-1 (source) into unstable (James McCoy)
[2024-08-28] Accepted vim 2:9.1.0698-1 (source) into unstable (James McCoy)
[2024-06-23] vim 2:9.1.0496-1 MIGRATED to testing (Debian testing watch)
[2024-06-20] Accepted vim 2:9.1.0496-1 (source) into unstable (James McCoy)
[2024-05-03] vim 2:9.1.0377-1 MIGRATED to testing (Debian testing watch)
[2024-04-27] Accepted vim 2:9.1.0377-1 (source) into unstable (James McCoy)
[2024-04-26] Accepted vim 2:9.1.0374-1 (source) into unstable (Simon Quigley)
[2024-03-24] Accepted vim 2:9.1.0199-1 (source) into unstable (James McCoy)
[2024-01-20] vim 2:9.1.0016-1 MIGRATED to testing (Debian testing watch)
[2024-01-11] Accepted vim 2:9.1.0016-1 (source) into unstable (Simon Quigley)
[2024-01-05] vim 2:9.1.0-1 MIGRATED to testing (Debian testing watch)
[2024-01-05] vim 2:9.1.0-1 MIGRATED to testing (Debian testing watch)
[2024-01-03] Accepted vim 2:9.1.0-1 (source) into unstable (Simon Quigley)
[2024-01-01] Accepted vim 2:9.0.2189-1 (source) into unstable (James McCoy)
[2023-11-23] vim 2:9.0.2116-1 MIGRATED to testing (Debian testing watch)
[2023-11-20] Accepted vim 2:9.0.2116-1 (source) into unstable (James McCoy)
[2023-11-13] Accepted vim 2:9.0.2103-1 (source) into unstable (James McCoy)
[2023-11-04] Accepted vim 2:9.0.2087-1 (source) into unstable (James McCoy)
[2023-10-13] Accepted vim 2:9.0.2018-1 (source) into unstable (James McCoy)
[2023-09-28] Accepted vim 2:8.1.0875-5+deb10u6 (source) into oldoldstable (Bastien Roucariès) (signed by: Bastien ROUCARIÈS)
[2023-09-14] vim 2:9.0.1894-1 MIGRATED to testing (Debian testing watch)
[2023-09-11] Accepted vim 2:9.0.1894-1 (source) into unstable (James McCoy)
[2023-07-08] vim 2:9.0.1672-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 102
RC: 0
I&N: 49
M&W: 53
F&P: 0
patch: 16

links

homepage
lintian (0, 2)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
l10n (-, 100)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2:9.1.0861-1ubuntu1
137 bugs (5 patches)
patches for 2:9.1.0861-1ubuntu1