Please unblock package vim
[ Reason ]
* Fixes 8 CVEs (1 fix requested by security team)
* Fixes keyboard input handling issues with terminals using kitty's
keyboard protocol
* Numerous bug fixes to newer vim script handling
* Additional test coverage
* Various upstream refactorings which I would prefer to have in the
package to reduce complexity of potential backports for future
upstream security issues.
[ Impact ]
Missing the two bullets above would be the main impact. I would be able
to backport the security fixes relatively easily, but the input handling
changes were spread out over a number of patches, some of which had
unrelated changes.
[ Tests ]
~6k LOC of new tests
[ Risks ]
src:vim is a key package (which I forgot and hence the delay for the
request), but that is related to vim-tiny/vim-common. These packages are
less affected by the updates, since vim-tiny is a minimal build of vim
(e.g., it has none of the vim script support) and doesn't pull in
vim-runtime.
[ Checklist ]
[x] all changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in testing
[ Other info ]
(Anything else the release team should know.)
unblock vim/2:9.0.1378-1