[scarthgap,3/3] vim: ignore CVE-2025-66476

Message ID	20260202040805.596021-3-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.210.174, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [OE-core][scarthgap][PATCH 3/3] vim: ignore CVE-2025-66476 Date: Mon, 2 Feb 2026 17:08:05 +1300 Message-ID: <20260202040805.596021-3-ankur.tyagi85@gmail.com> In-Reply-To: <20260202040805.596021-1-ankur.tyagi85@gmail.com> References: <20260202040805.596021-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,1/3] ffmpeg: upgrade 6.1.3 -> 6.1.4 \| expand [scarthgap,1/3] ffmpeg: upgrade 6.1.3 -> 6.1.4 [scarthgap,2/3] ffmpeg: ignore CVE-2025-25469 [scarthgap,3/3] vim: ignore CVE-2025-66476

Message ID

20260202040805.596021-3-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-core@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [OE-core][scarthgap][PATCH 3/3] vim: ignore CVE-2025-66476
Date: Mon,  2 Feb 2026 17:08:05 +1300
Message-ID: <20260202040805.596021-3-ankur.tyagi85@gmail.com>
In-Reply-To: <20260202040805.596021-1-ankur.tyagi85@gmail.com>
References: <20260202040805.596021-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,1/3] ffmpeg: upgrade 6.1.3 -> 6.1.4 | expand

Commit Message

Ankur Tyagi Feb. 2, 2026, 4:08 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta/recipes-support/vim/vim_9.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-support/vim/vim_9.1.bb b/meta/recipes-support/vim/vim_9.1.bb
index fee9f055e9..c492342ffb 100644
--- a/meta/recipes-support/vim/vim_9.1.bb
+++ b/meta/recipes-support/vim/vim_9.1.bb
@@ -21,3 +21,5 @@  ALTERNATIVE_LINK_NAME[xxd] = "${bindir}/xxd"
 # in many places for _FORTIFY_SOURCE=2.  Security flags become part of CC.
 #
 lcl_maybe_fortify = "${@oe.utils.conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE=1',d)}"
+
+CVE_STATUS[CVE-2025-66476] = "not-applicable-platform: Issue only applies on Windows"

[scarthgap,3/3] vim: ignore CVE-2025-66476

Commit Message

Patch