On Wed, Jan 29, 2025 at 03:17:26PM +0000, Sean Whitton wrote: > Fixes for eight CVEs, backported from upstream, all already in sid. > Tested with Vim's existing extensive test suite, and some of the fixes add new > tests, too. Everything passes. > > These are all simple CVEs caused by the usual suspect C programming issues, so > there is no expected negative impact on users.
FYI, one of the new tests added by these patches if failing the build on armel, armhf, i386, and mipsel. The test was disabled upstream because they were also seeing timeouts in certain scenarios -- https://github.com/vim/vim/compare/v9.0.1533...v9.0.1535 Cheers, -- James GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB
