mirror of
https://git.yoctoproject.org/poky
synced 2026-07-23 04:17:46 +02:00
623f85f957
Pick patch from [1], [2] & [3] also mentioned at NVD report in [4,5 & 6] [1]75661a66a1[2]664701eb75[3]7088926316[4] https://nvd.nist.gov/vuln/detail/CVE-2026-34982 [5] https://nvd.nist.gov/vuln/detail/CVE-2026-34714 [6] https://nvd.nist.gov/vuln/detail/CVE-2026-35177 More info : CVE-2026-34982 - vim: arbitrary command execution via modeline sandbox bypass. CVE-2026-34714 - vim: Arbitrary code execution via crafted file. CVE-2026-35177 - vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass. (From OE-Core rev: 1b4ee99b86262ade31b69a2ba9f80791b15ea130) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>