-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Jan 2025 13:00:20 +0000 Source: vim Binary: vim vim-dbgsym vim-gtk3 vim-gtk3-dbgsym vim-motif vim-motif-dbgsym vim-nox vim-nox-dbgsym vim-tiny vim-tiny-dbgsym xxd xxd-dbgsym Architecture: amd64 Version: 2:9.0.1378-2+deb12u1 Distribution: bookworm Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Sean Whitton Description: vim - Vi IMproved - enhanced vi editor vim-gtk3 - Vi IMproved - enhanced vi editor - with GTK3 GUI vim-motif - Vi IMproved - enhanced vi editor - with Motif GUI vim-nox - Vi IMproved - enhanced vi editor - with scripting languages suppo vim-tiny - Vi IMproved - enhanced vi editor - compact version xxd - tool to make (or reverse) a hex dump Closes: 1035955 1053694 1084806 Changes: vim (2:9.0.1378-2+deb12u1) bookworm; urgency=high . * Backport security fixes: - 9.0.1532: Crash when expanding "~" in substitute (Closes: #1035955, CVE-2023-2610) - 9.0.1848: buffer-overflow in vim_regsub_both() (CVE-2023-4738) - 9.0.1858: heap use after free in ins_compl_get_exp() (CVE-2023-4752) - 9.0.1873: heap-buffer-overflow in vim_regsub_both (CVE-2023-4781) - 9.0.1969: buffer-overflow in trunc_string() (Closes: #1053694, CVE-2023-5344) - 9.0.2142: stack-buffer-overflow in option callback functions (CVE-2024-22667) - 9.1.0697: heap-buffer-overflow in ins_typebuf (CVE-2024-43802) - 9.1.0764: use-after-free when closing a buffer (Closes: #1084806, CVE-2024-47814). Checksums-Sha1: d7a70d1af46e9a13a59a9eb00453461d02bf0c56 3971596 vim-dbgsym_9.0.1378-2+deb12u1_amd64.deb 24ebad6de6f0edd329b1e6f56fc2ce4e05282f34 4571612 vim-gtk3-dbgsym_9.0.1378-2+deb12u1_amd64.deb 74d293a5a87820c73af2f9e3a4b11b52ae09061d 1878228 vim-gtk3_9.0.1378-2+deb12u1_amd64.deb e15b33948cf66d5d879cc160a2760ac3ca99d987 4562432 vim-motif-dbgsym_9.0.1378-2+deb12u1_amd64.deb 33aa819cc452dc805e907c6152b27e6b37b5c596 1868356 vim-motif_9.0.1378-2+deb12u1_amd64.deb b6e451ce64ca8682e3df959e24a2b0431ec7b861 4248816 vim-nox-dbgsym_9.0.1378-2+deb12u1_amd64.deb b6af49370f52c5985c270122a69b466670c4021e 1748460 vim-nox_9.0.1378-2+deb12u1_amd64.deb 2ecd8461c998b9668358024db34c37c6d9759005 1628896 vim-tiny-dbgsym_9.0.1378-2+deb12u1_amd64.deb 03db739d1fb97c7c7804099edbeba2690bb64da5 719520 vim-tiny_9.0.1378-2+deb12u1_amd64.deb 6a930ec85b32fadebfdf82e1904bd05ae01334ff 19231 vim_9.0.1378-2+deb12u1_amd64-buildd.buildinfo bb0d52d3ce47859b72997af04789858fc5e733e2 1567816 vim_9.0.1378-2+deb12u1_amd64.deb d575af40c17534b235c550b69664ffddaf98ca29 15076 xxd-dbgsym_9.0.1378-2+deb12u1_amd64.deb fa3bbc40ddfb1e7b8bb79164f4b626ce0ad05a34 83992 xxd_9.0.1378-2+deb12u1_amd64.deb Checksums-Sha256: ab4f3195441c72217a0600a55f51a3f720a4516b3b081af66ce058740f78b36c 3971596 vim-dbgsym_9.0.1378-2+deb12u1_amd64.deb e2347535c409f834fc23ab1d6aba22aaf3ea644f796a59a9fefb9bcd4bf72fe1 4571612 vim-gtk3-dbgsym_9.0.1378-2+deb12u1_amd64.deb d18414c950f9e8fe2530b0a3739963f0d1638dbe3fc480ac1ab5b2511dd7499c 1878228 vim-gtk3_9.0.1378-2+deb12u1_amd64.deb b36dcdfa918d50a39909ef129e8ca051b01fbee4f9660954fbbb5b1b13985309 4562432 vim-motif-dbgsym_9.0.1378-2+deb12u1_amd64.deb 5a222297947bd8710349ad9dd2aec758041c4d8bb760563048343701de558042 1868356 vim-motif_9.0.1378-2+deb12u1_amd64.deb 99cd2a683c7da9f1a1b874bc7dd4ccbdedbe67d650df3aa05c3f2666de8f70cd 4248816 vim-nox-dbgsym_9.0.1378-2+deb12u1_amd64.deb 5f457063141c09e60caeb8da19d3354e661eacb00431fef2498ba2610d743f19 1748460 vim-nox_9.0.1378-2+deb12u1_amd64.deb 7fbd81a6df458a55431760148a64f9fac852245640b5fdb6f3e136fd13b54af4 1628896 vim-tiny-dbgsym_9.0.1378-2+deb12u1_amd64.deb 193b1506324b68175f92fc73048d2d509a1b7a88ef7321392d9299d116d157da 719520 vim-tiny_9.0.1378-2+deb12u1_amd64.deb 2cd026acf867c9d8318bde174799273ba33b40bd54e043d352d6b7bc78a43c03 19231 vim_9.0.1378-2+deb12u1_amd64-buildd.buildinfo 8dfc9d7bfe0265fa44e1ee98f26f798be450fb31fff7ebeb5c3fe3380fb2d33c 1567816 vim_9.0.1378-2+deb12u1_amd64.deb 560843750ce1673677a8f50456ab8f260010af53499264b9d37c0b06f464f024 15076 xxd-dbgsym_9.0.1378-2+deb12u1_amd64.deb 08910e1b7ad6cf9034237da88da6e857e60331373959d75713a05d187e7f5663 83992 xxd_9.0.1378-2+deb12u1_amd64.deb Files: 2d4ab8837e0f19bcd3160dea4f8240f9 3971596 debug optional vim-dbgsym_9.0.1378-2+deb12u1_amd64.deb c6ec72cf08a2780de1e77df8e8a35f87 4571612 debug optional vim-gtk3-dbgsym_9.0.1378-2+deb12u1_amd64.deb f2cf461aff39621e76c3053505849e73 1878228 editors optional vim-gtk3_9.0.1378-2+deb12u1_amd64.deb b5a03a6187efee664fd467261c8b184f 4562432 debug optional vim-motif-dbgsym_9.0.1378-2+deb12u1_amd64.deb 512fd89acd13a4760239f2e454ae81aa 1868356 editors optional vim-motif_9.0.1378-2+deb12u1_amd64.deb 03010ee1e2c1f9634d1e7cd9baf6ca87 4248816 debug optional vim-nox-dbgsym_9.0.1378-2+deb12u1_amd64.deb bd76262d661452c55b8e7a97b68f2949 1748460 editors optional vim-nox_9.0.1378-2+deb12u1_amd64.deb 63fa721d35aefc3c9f8e2508ceea376e 1628896 debug optional vim-tiny-dbgsym_9.0.1378-2+deb12u1_amd64.deb e91764de659e04d51bc4b6a96d7c6a26 719520 editors important vim-tiny_9.0.1378-2+deb12u1_amd64.deb b076b6534ce76555acf779a838101f1e 19231 editors optional vim_9.0.1378-2+deb12u1_amd64-buildd.buildinfo bce2cda96731e2e4881cb07c354e665e 1567816 editors optional vim_9.0.1378-2+deb12u1_amd64.deb 4bb6919787a8f893748591c303e4dd61 15076 debug optional xxd-dbgsym_9.0.1378-2+deb12u1_amd64.deb 1ff9f41bbc404311816991ed07a097cb 83992 editors optional xxd_9.0.1378-2+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmeerOcACgkQOni7ZmUp KEfGoA/9ErJAuk2DMrThzm8UG5LCRDHsooPxMtR3tcaNsG6ohus9M4n0DWVhdamD a62yPqEvqgq0dXoqZnMhf2Fw5yISF5CHnKqhgjHGs5Jx8ncoTByLFXTuNKgGJb1w 6KwO10bW+vVjG3b0+aysBQDvuSnCt6osiimmhtD0Syh/pUHIn/1DssQUoEkXa5v3 ZFfW2MlUXsi33cm6lNzRWWqGQuAjS6YTgDp/gTa/wSylFcfI8N2Jt1HmeBE2DqX6 JHaICNHgUtZUgdhuhWJVmBwVIE/3kYaY0Wma1CLFJ4AiCZdkqc9UGt6u/u1aRzvW SdHliuCYXwycoVGDk2qPZ1bq8Q15jCCPiX7BYBhAHXDejE/wzAtoniLD61jrlsAj SarmQKmH5Hl6oihaxQDyPkR2z88Me+BBJJ4/s1/hRZzvsGVF6Lfcfg6OaP2wTwhL AvQP/AB+EgF6yJs6zM3S7IB0fRvTPuV0OoMFzsEbSWq+grPOLOU3AT58PbjDRcbo JRmQU+EeVuKp4eSfIoyOZVKqD6yFgOHX5+eZwD8aWDjoIJ8P1SrCrdoLj1ohymZH 5BS6gtXb8H+MTB5Z0gcxQLfW6QFN3sBCH5Lp0FhPt4jQ6AifcNzW2S4rlme6Wv4I nU6f/4u9Hr522UK4kEgSrHJa0KQyeecv1ceOwzdxa8mMJgq2xSU= =k1vm -----END PGP SIGNATURE-----