Re: [OE-core][scarthgap][PATCH 3/3] vim: ignore CVE-2025-66476

Yoann Congal
2026-02-05T10:00:30Z

[-- Attachment #1: Type: text/plain, Size: 1563 bytes --]

Le lun. 2 févr. 2026 à 05:08, Ankur Tyagi via lists.openembedded.org
<ankur.tyagi85=gmail.com@lists.openembedded.org> a écrit :

> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>
> Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476
>
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> ---
> meta/recipes-support/vim/vim_9.1.bb | 2 ++
> 1 file changed, 2 insertions(+)
>

As far as I can tell, this patch is also needed on whinlatter.
Can you send it there please?

Thanks!

diff --git a/meta/recipes-support/vim/vim_9.1.bb b/meta/recipes-support/vim/
> vim_9.1.bb
> index fee9f055e9..c492342ffb 100644
> --- a/meta/recipes-support/vim/vim_9.1.bb
> +++ b/meta/recipes-support/vim/vim_9.1.bb
> @@ -21,3 +21,5 @@ ALTERNATIVE_LINK_NAME[xxd] = "${bindir}/xxd"
> # in many places for _FORTIFY_SOURCE=2. Security flags become part of CC.
> #
> lcl_maybe_fortify =
> "${@oe.utils.conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE=1',d)}"
> +
> +CVE_STATUS[CVE-2025-66476] = "not-applicable-platform: Issue only applies
> on Windows"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#230344):
> https://lists.openembedded.org/g/openembedded-core/message/230344
> Mute This Topic: https://lists.openembedded.org/mt/117591467/4316185
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> yoann.congal@smile.fr]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

--
Yoann Congal
Smile ECS

[-- Attachment #2: Type: text/html, Size: 3438 bytes --]