Re: [OE-core][PATCH] vim: upgrade 9.1.2144 -> 9.2.0

["Yu, Mingli" <mingli.yu@windriver.com>]

The number of the vim CVEs in 2026 has reached 15 so far [1], and may 
still be growing. Could we keep upgrading vim to resolve the vim CVEs 
for LTS branch maintenance as we have done in the past?

[1] https://github.com/vim/vim/security

Thanks,

On 3/3/26 18:23, David Partain wrote:
> CAUTION: This email comes from a non Wind River email account!
> Do not click links or open attachments unless you recognize the sender and know the content is safe.
> 
> On Tue, 2026-02-24 at 16:45 +0000, Peter Marko via lists.openembedded.org wrote:
>> Alternatively, we could also continue updating vim in LTS like we did in the
>> past.
>> For now, there are two active CVEs in LTS releases.
>> Please let me know if I need to backport patches now or if vim upgrade would
>> be accepted.
> 
> Greetings,
> 
> I've found it quite useful in the past that vim simply gets updated to the
> latest, even in the LTS branch we use.  Keeping up with vim CVEs is painful
> otherwise. As such, I would prefer to keep doing things as they have been done
> in the past.
> 
> Cheers,
> 
> David
> 
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#232302): https://lists.openembedded.org/g/openembedded-core/message/232302
> Mute This Topic: https://lists.openembedded.org/mt/117978611/3618448
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [mingli.yu@eng.windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>