-
vim (2:7.4.052-1ubuntu3.1) trusty-security; urgency=medium
* SECURITY UPDATE: arbitrary shell execution via modelines
- debian/patches/upstream/CVE-2016-1248.patch: Only allow valid
characters in 'filetype', 'syntax' and 'keymap'. Tests adapted
back to vim 7.3 by James McCoy of Debian, thanks! Patch is also
updated to add the tests to the set that are run during the build.
- CVE-2016-1248
-- Steve Beattie <email address hidden> Wed, 23 Nov 2016 18:06:44 -0800
-
vim (2:7.4.052-1ubuntu3) trusty; urgency=medium
* No-change rebuild for Tcl 8.6.
-- Matthias Klose <email address hidden> Thu, 02 Jan 2014 20:29:37 +0100
-
vim (2:7.4.052-1ubuntu2) trusty; urgency=low
* upstream/completion-crash.patch: Fix crash with Insert mode completion.
-- Adam Conrad <email address hidden> Tue, 10 Dec 2013 15:32:41 -0700
-
vim (2:7.4.052-1ubuntu1) trusty; urgency=low
* Merge with Debian unstable, remaining changes:
- debian/runtime/vimrc:
+ "syntax on" is a sane default for non-tiny vim
- debian/patches/debian/ubuntu-grub-syntax.patch:
+ Add Ubuntu-specific "quiet" keyword.
- debian/patches/debian/update-upstart-syntax.patch:
+ Add setuid and setgid to syntax file.
* debian/patches/debian/ubuntu-dists.patch:
- Add devel and trusty as valid distribution targets.
* debian/patches/debian/ubuntu-arches.patch:
- Support arm64, ppc64el, and x32 as valid arches.
vim (2:7.4.052-1) unstable; urgency=low
* Merge upstream tag v7-4-052
- Remove upstream/python-ftplugin-keywordprg.patch, merged upstream
* debian/watch: Use the pasv option.
* debian/control: Version the ruby1.8{,-dev} Build-Conflicts now that the
Provides: have been dropped.
vim (2:7.4.027-1) unstable; urgency=low
* Merge upstream tag v7-4-027
+ 7.4.003: Refresh a stale pointer in new regex engine to avoid
dereferencing a freed pointer. (Closes: #722081)
+ 7.4.024: Read an undo file owned by the current user, even if that
differs from the owner of the edited file. (Closes: #721944)
+ Use old regex engine for yamlBlockMappingKey highlighting to workaround
performance problem with new engine. (Closes: #719510)
-- Adam Conrad <email address hidden> Fri, 18 Oct 2013 15:02:17 +0100
-
vim (2:7.4.000-1ubuntu2) saucy; urgency=low
* Use lua5.2 for the current lua transition in main (LP: #1196921)
* Ignore test86 for now, as it seems to do goofy things on powerpc.
-- Adam Conrad <email address hidden> Sun, 11 Aug 2013 13:11:28 -0600