[whinlatter,15/19] vim: ignore CVE-2025-66476

Message ID	e66803d93cfb7684510df0dd3c7d0e7d63f937b1.1770968514.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 15/19] vim: ignore CVE-2025-66476 Date: Fri, 13 Feb 2026 09:08:33 +0100 Message-ID: <e66803d93cfb7684510df0dd3c7d0e7d63f937b1.1770968514.git.yoann.congal@smile.fr> In-Reply-To: <cover.1770968514.git.yoann.congal@smile.fr> References: <cover.1770968514.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[whinlatter,01/19] linux-yocto/6.12: update to v6.12.69 \| expand [whinlatter,01/19] linux-yocto/6.12: update to v6.12.69 [whinlatter,03/19] openssl: upgrade 3.5.4 -> 3.5.5 [whinlatter,04/19] mobile-broadband-provider-info: upgrade 20250613 -> 20251101 [whinlatter,05/19] ffmpeg: ignore 10 CVEs [whinlatter,06/19] wic/engine: fix copying directories into wic image with ext* partition [whinlatter,07/19] oeqa/selftest/wic: test recursive dir copy on ext partitions [whinlatter,08/19] libsndfile1: patch CVE-2025-56226 [whinlatter,09/19] webkitgtk: workaround compile failure for large debug symbols [whinlatter,10/19] webkitgtk: upgrade 2.50.0 -> 2.50.4 [whinlatter,11/19] avahi: Backport fix CVE-2025-68276 [whinlatter,12/19] avahi: patch CVE-2026-24401 [whinlatter,13/19] avahi: patch CVE-2025-68468 [whinlatter,14/19] avahi: patch CVE-2025-68471 [whinlatter,15/19] vim: ignore CVE-2025-66476 [whinlatter,16/19] scripts/install-buildtools: Update to 5.3.1 [whinlatter,17/19] go: upgrade 1.25.6 -> 1.25.7 [whinlatter,18/19] devtool: deploy: Run pseudo with correct PATH [whinlatter,19/19] devtool: deploy: Reset PATH after strip_execs

Message ID

e66803d93cfb7684510df0dd3c7d0e7d63f937b1.1770968514.git.yoann.congal@smile.fr

State

RFC, archived

Delegated to:

Yoann Congal

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][whinlatter 15/19] vim: ignore CVE-2025-66476
Date: Fri, 13 Feb 2026 09:08:33 +0100
Message-ID: 
 <e66803d93cfb7684510df0dd3c7d0e7d63f937b1.1770968514.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1770968514.git.yoann.congal@smile.fr>
References: <cover.1770968514.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[whinlatter,01/19] linux-yocto/6.12: update to v6.12.69 | expand

Commit Message

Yoann Congal Feb. 13, 2026, 8:08 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Details https://nvd.nist.gov/vuln/detail/CVE-2025-66476

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-support/vim/vim_9.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-support/vim/vim_9.1.bb b/meta/recipes-support/vim/vim_9.1.bb
index fee9f055e9a..c492342ffb7 100644
--- a/meta/recipes-support/vim/vim_9.1.bb
+++ b/meta/recipes-support/vim/vim_9.1.bb
@@ -21,3 +21,5 @@  ALTERNATIVE_LINK_NAME[xxd] = "${bindir}/xxd"
 # in many places for _FORTIFY_SOURCE=2.  Security flags become part of CC.
 #
 lcl_maybe_fortify = "${@oe.utils.conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE=1',d)}"
+
+CVE_STATUS[CVE-2025-66476] = "not-applicable-platform: Issue only applies on Windows"

[whinlatter,15/19] vim: ignore CVE-2025-66476

Commit Message

Patch