[Deepin Integration]~[V23-Beta3] feat: update vim to 2:9.1.0777-1 by deepin-community-bot[bot]@deepin-community/vim by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
vim	2:9.1.0777-1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-2190/testing/ ./

Changelog | 更新信息

vim (2:9.1.0777-1) unstable; urgency=medium

• Merge upstream patch v9.1.0777
  • Security fixes:
    • 9.1.0764: Fix use-after-free when closing a buffer in a BufWinLeave
      autocmd, CVE-2024-47814
• Make autopkgtests validate the language bindings. The previous
  autopkgtests ran the entire upstream test suite whose flakiness made it
  useless as a marker for whether a package update broke Vim. Since the
  language bindings are the most likely to be affected by package updates,
  just test those in autopkgtests and remove the "flaky" restriction.
• Declare compliance with Policy 4.7.0, no changes required

[deepin-bot]

Integration Test Info

安全更新

GHSA: GHSA-rj48-v4mq-j4vg

use-after-free when closing buffers in Vim < 9.1.0764

Date: 06.10.2024
Severity: Low
CVE: CVE-2024-47814
CWE: Use After Free (CWE-416)

deepin-community/sig-deepin-security#10

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#2190

[babyfengfjx]

@luodeepin 请开展集成验证。

[luodeepin]

测试通过

1. 包版本正确
2. 发散测试 VIM命令正常可用
3. 没有新增严重问题