<feed xmlns='http://www.w3.org/2005/Atom'>
<title>rneovim.git/runtime/autoload/pythoncomplete.vim, branch master</title>
<subtitle>Neovim fork with Rahm's personal hacks.</subtitle>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/'/>
<entry>
<title>vim-patch:9.2.0699: [security]: possible code execution with python complete (#40363)</title>
<updated>2026-06-22T02:26:37+00:00</updated>
<author>
<name>zeertzjq</name>
<email>zeertzjq@outlook.com</email>
</author>
<published>2026-06-22T02:26:37+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=7d0adc08f76743f991c769f25b98980ade498a64'/>
<id>7d0adc08f76743f991c769f25b98980ade498a64</id>
<content type='text'>
Problem:  [security]: possible code execution with python complete
          (morningbread)
Solution: Use repr() to quote the doc strings correctly

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3

Supported by AI

https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Problem:  [security]: possible code execution with python complete
          (morningbread)
Solution: Use repr() to quote the doc strings correctly

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3

Supported by AI

https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:9.2.0597: [security]: possible code execution with python complete (#40117)</title>
<updated>2026-06-05T02:59:44+00:00</updated>
<author>
<name>zeertzjq</name>
<email>zeertzjq@outlook.com</email>
</author>
<published>2026-06-05T02:59:44+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=e887cfb3b564c2248d902d524a9616440057a87d'/>
<id>e887cfb3b564c2248d902d524a9616440057a87d</id>
<content type='text'>
Problem:  [security]: another possible code execution with python complete
          (David Carliez)
Solution: Strip default expressions and annotations from generated
          source for pythoncomplete and python3complete.

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468

https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Problem:  [security]: another possible code execution with python complete
          (David Carliez)
Solution: Strip default expressions and annotations from generated
          source for pythoncomplete and python3complete.

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468

https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:9.2.0568: pythoncomplete: g:pythoncomplete_allow_import had no effect (#40067)</title>
<updated>2026-05-31T13:00:32+00:00</updated>
<author>
<name>zeertzjq</name>
<email>zeertzjq@outlook.com</email>
</author>
<published>2026-05-31T13:00:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=3f4a108cf46f7de17d65949f86e629e584cd310a'/>
<id>3f4a108cf46f7de17d65949f86e629e584cd310a</id>
<content type='text'>
Problem:  The security patch 9.2.0561 added a vim.eval() call inside
          Completer.evalsource() to honor g:pythoncomplete_allow_import.
          But the 'vim' module is only imported inside the outer
          vimcomplete() / vimpy3complete() function, not at the script's
          top level, so referring to it from a Completer method raises
          NameError.  The surrounding bare 'except' silently swallows
          the error and leaves allow_imports at 0, meaning the opt-in
          never takes effect -- 'import os' (and any other
          buffer-level import) is always skipped, no candidates are
          produced for 'os.&lt;...&gt;' and
          Test_popup_and_preview_autocommand() fails on the Windows
          CI matrix (Linux skips the test because Python 2 is absent).
Solution: Re-import 'vim' at the top of evalsource() in both
          pythoncomplete.vim and python3complete.vim so the eval reads
          the global, and set g:pythoncomplete_allow_import = 1 in the
          test (it is the opt-in intended for callers that trust the
          buffer contents) (thinca).

closes: vim/vim#20386

https://github.com/vim/vim/commit/868ad62cb8bf8038322eab2badd31bd98b02b9df

Co-authored-by: thinca &lt;thinca@gmail.com&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Problem:  The security patch 9.2.0561 added a vim.eval() call inside
          Completer.evalsource() to honor g:pythoncomplete_allow_import.
          But the 'vim' module is only imported inside the outer
          vimcomplete() / vimpy3complete() function, not at the script's
          top level, so referring to it from a Completer method raises
          NameError.  The surrounding bare 'except' silently swallows
          the error and leaves allow_imports at 0, meaning the opt-in
          never takes effect -- 'import os' (and any other
          buffer-level import) is always skipped, no candidates are
          produced for 'os.&lt;...&gt;' and
          Test_popup_and_preview_autocommand() fails on the Windows
          CI matrix (Linux skips the test because Python 2 is absent).
Solution: Re-import 'vim' at the top of evalsource() in both
          pythoncomplete.vim and python3complete.vim so the eval reads
          the global, and set g:pythoncomplete_allow_import = 1 in the
          test (it is the opt-in intended for callers that trust the
          buffer contents) (thinca).

closes: vim/vim#20386

https://github.com/vim/vim/commit/868ad62cb8bf8038322eab2badd31bd98b02b9df

Co-authored-by: thinca &lt;thinca@gmail.com&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:9.2.0561: [security]: possible code execution with python3complete</title>
<updated>2026-05-30T03:46:27+00:00</updated>
<author>
<name>zeertzjq</name>
<email>zeertzjq@outlook.com</email>
</author>
<published>2026-05-30T03:41:48+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=de8c2db57796a18d918def998526d68ae50c9ed0'/>
<id>de8c2db57796a18d918def998526d68ae50c9ed0</id>
<content type='text'>
Problem:  [security]: possible code execution with python3complete
Solution: Disable execution of import/from statements

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c

https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Problem:  [security]: possible code execution with python3complete
Solution: Disable execution of import/from statements

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c

https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d

Co-authored-by: Christian Brabandt &lt;cb@256bit.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:6c391a74fe90 (#15654)</title>
<updated>2021-09-13T14:33:41+00:00</updated>
<author>
<name>Christian Clason</name>
<email>christian.clason@uni-due.de</email>
</author>
<published>2021-09-13T14:33:41+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=5fd21b8d3e9dcb2b3dc3bdab4b58218ac908e3e8'/>
<id>5fd21b8d3e9dcb2b3dc3bdab4b58218ac908e3e8</id>
<content type='text'>
Update runtime files
https://github.com/vim/vim/commit/6c391a74fe90190796ca0b0c010112948a6e75d7

omit autoload/getscript.vim

skip doc/eval.txt (needs 8.2.2468)
skip doc/various.txt (needs 8.2.3400)

(typofixes courtesy of @dundargoc)</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Update runtime files
https://github.com/vim/vim/commit/6c391a74fe90190796ca0b0c010112948a6e75d7

omit autoload/getscript.vim

skip doc/eval.txt (needs 8.2.2468)
skip doc/various.txt (needs 8.2.3400)

(typofixes courtesy of @dundargoc)</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:4f4d51a942cc</title>
<updated>2021-05-01T18:22:52+00:00</updated>
<author>
<name>Jan Edmund Lazo</name>
<email>jan.lazo@mail.utoronto.ca</email>
</author>
<published>2021-05-01T18:08:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=b16c7c515c34d2f695a595527594325abc6a640b'/>
<id>b16c7c515c34d2f695a595527594325abc6a640b</id>
<content type='text'>
Update runtime files.
https://github.com/vim/vim/commit/4f4d51a942cc2c6b3e936ee0f93f00c2d000065c

Omit "??" operator.
Patches v8.2.1794,v8.2.1798 are not ported yet.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Update runtime files.
https://github.com/vim/vim/commit/4f4d51a942cc2c6b3e936ee0f93f00c2d000065c

Omit "??" operator.
Patches v8.2.1794,v8.2.1798 are not ported yet.
</pre>
</div>
</content>
</entry>
<entry>
<title>doc [ci skip] #10383</title>
<updated>2019-07-19T19:32:04+00:00</updated>
<author>
<name>Justin M. Keyes</name>
<email>justinkz@gmail.com</email>
</author>
<published>2019-07-19T19:32:04+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=afef973262bea3fe1563dc0571bb4168ac0914aa'/>
<id>afef973262bea3fe1563dc0571bb4168ac0914aa</id>
<content type='text'>
- test/README.md: document luassert `TableFormatLevel`
- CONTRIBUTING.md: absorb parts of the old "Development tips" wiki page</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- test/README.md: document luassert `TableFormatLevel`
- CONTRIBUTING.md: absorb parts of the old "Development tips" wiki page</pre>
</div>
</content>
</entry>
<entry>
<title>vim-patch:a0f849e</title>
<updated>2016-05-03T17:25:18+00:00</updated>
<author>
<name>KillTheMule</name>
<email>KillTheMule@users.noreply.github.com</email>
</author>
<published>2016-05-01T20:19:40+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=3c45e3b42a6c8c48d4f2bc7d51ccfa0f6781d849'/>
<id>3c45e3b42a6c8c48d4f2bc7d51ccfa0f6781d849</id>
<content type='text'>
Update runtime files.

https://github.com/vim/vim/commit/a0f849ee40cbea3c889345256786b640b0becca2

Missing files runtime/doc/tags and runtime/doc/todo.txt. Excluded
runtime/syntax/vim.vim, since we diverged quite a bit from vim in this file.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Update runtime files.

https://github.com/vim/vim/commit/a0f849ee40cbea3c889345256786b640b0becca2

Missing files runtime/doc/tags and runtime/doc/todo.txt. Excluded
runtime/syntax/vim.vim, since we diverged quite a bit from vim in this file.
</pre>
</div>
</content>
</entry>
<entry>
<title>re-integrate runtime/  vim-patch:0  #938</title>
<updated>2014-07-29T02:12:31+00:00</updated>
<author>
<name>Justin M. Keyes</name>
<email>justinkz@gmail.com</email>
</author>
<published>2014-07-11T04:05:51+00:00</published>
<link rel='alternate' type='text/html' href='http://git.josher.dev/rneovim.git/commit/?id=a98a6996c291b3e300d27b791eded9eed333d677'/>
<id>a98a6996c291b3e300d27b791eded9eed333d677</id>
<content type='text'>
Vim runtime files based on 7.4.384 / hg changeset 7090d7f160f7

Excluding:
  Amiga icons (*.info, icons/)
  doc/hangulin.txt
  tutor/
  spell/
  lang/ (only used for menu translations)
  macros/maze/, macros/hanoi/, macros/life/, macros/urm/
      These were used to test vi compatibility.
  termcap
      "Demonstration of a termcap file (for the Amiga and Archimedes)"

Helped-by: Rich Wareham &lt;rjw57@cam.ac.uk&gt;
Helped-by: John &lt;john.schmidt.h@gmail.com&gt;
Helped-by: Yann &lt;yann@yann-salaun.com&gt;
Helped-by: Christophe Badoit &lt;c.badoit@lesiteimmo.com&gt;
Helped-by: drasill &lt;github@tof2k.com&gt;
Helped-by: Tae Sandoval Murgan &lt;taecilla@gmail.com&gt;
Helped-by: Lowe Thiderman &lt;lowe.thiderman@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Vim runtime files based on 7.4.384 / hg changeset 7090d7f160f7

Excluding:
  Amiga icons (*.info, icons/)
  doc/hangulin.txt
  tutor/
  spell/
  lang/ (only used for menu translations)
  macros/maze/, macros/hanoi/, macros/life/, macros/urm/
      These were used to test vi compatibility.
  termcap
      "Demonstration of a termcap file (for the Amiga and Archimedes)"

Helped-by: Rich Wareham &lt;rjw57@cam.ac.uk&gt;
Helped-by: John &lt;john.schmidt.h@gmail.com&gt;
Helped-by: Yann &lt;yann@yann-salaun.com&gt;
Helped-by: Christophe Badoit &lt;c.badoit@lesiteimmo.com&gt;
Helped-by: drasill &lt;github@tof2k.com&gt;
Helped-by: Tae Sandoval Murgan &lt;taecilla@gmail.com&gt;
Helped-by: Lowe Thiderman &lt;lowe.thiderman@gmail.com&gt;
</pre>
</div>
</content>
</entry>
</feed>
