#1033922#5
Date:
2023-04-03 23:10:57 UTC
From:
To:
Please unblock package vim

[ Reason ]
* Fixes 8 CVEs (1 fix requested by security team)
* Fixes keyboard input handling issues with terminals using kitty's
  keyboard protocol
* Numerous bug fixes to newer vim script handling
* Additional test coverage
* Various upstream refactorings which I would prefer to have in the
  package to reduce complexity of potential backports for future
  upstream security issues.

[ Impact ]
Missing the two bullets above would be the main impact.  I would be able
to backport the security fixes relatively easily, but the input handling
changes were spread out over a number of patches, some of which had
unrelated changes.

[ Tests ]
~6k LOC of new tests

[ Risks ]
src:vim is a key package (which I forgot and hence the delay for the
request), but that is related to vim-tiny/vim-common. These packages are
less affected by the updates, since vim-tiny is a minimal build of vim
(e.g., it has none of the vim script support) and doesn't pull in
vim-runtime.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

[ Other info ]
(Anything else the release team should know.)

unblock vim/2:9.0.1378-1

#1033922#12
Date:
2023-04-07 06:28:45 UTC
From:
To:
Unblocked.