Hitendra Prajapati ba66043d77 vim: fix for CVE-2026-28421, CVE-2026-41411 & CVE-2026-44656 ...

Pick patch from [1], [2] & [3] also mentioned at NVD report in [4,5 & 6]

[1] 65c1a143c3
[2] c78194e41d
[3] 190cb3c2b9
[4] https://nvd.nist.gov/vuln/detail/CVE-2026-28421
[5] https://nvd.nist.gov/vuln/detail/CVE-2026-41411
[6] https://nvd.nist.gov/vuln/detail/CVE-2026-44656

More info :
CVE-2026-28421 - Validate block tree indices and readfile() line bounds.
CVE-2026-41411 - Disallow backticks before attempting to expand filenames.
CVE-2026-44656 - Prevent shell execution from 'path' backticks via modelines.

(From OE-Core rev: 3fe9e5132aab67f1ee3139c88a89d5c6c94313c1)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-07-20 09:04:32 +01:00

..

classes

meta/lib/oe/package.py: fix path to kernel sources in save_debugsources_info

2026-06-16 20:42:20 +01:00

classes-global

classes/base: prefer gnu-prefixed HOSTTOOLS

2026-06-10 14:35:20 +01:00

classes-recipe

classes/gtk-icon-cache: fix libdir passed to the postrm intercept

2026-06-26 16:55:54 +01:00

conf

conf/machine: fix typos in ARM and x86 README files

2026-06-19 12:49:07 +01:00

files

meta/files/layers.example.json: switch to https clone URIs

2026-05-04 13:57:32 +01:00

lib

oeqa: Drop /git/ from our urls

2026-07-02 13:42:26 +01:00

recipes-bsp

grub/glibc: Bump versions to resolve hashequiv/reproducibility issues

2026-07-02 13:42:25 +01:00

recipes-connectivity

dhcpcd: patch CVE-2026-56117

2026-07-20 09:04:32 +01:00

recipes-core

build-appliance-image: Update to scarthgap head revisions

2026-07-02 13:52:11 +01:00

recipes-devtools

python3: fix CVE-2026-4224

2026-07-02 13:42:26 +01:00

recipes-extended

sudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers

2026-07-20 09:04:31 +01:00

recipes-gnome

gdk-pixbuf: Fix CVE-2026-5201

2026-05-12 21:31:34 +01:00

recipes-graphics

xwayland: Fix CVE-2026-34003

2026-07-02 13:42:26 +01:00

recipes-kernel

linux-yocto/6.6: address ltp hang

2026-06-26 16:55:55 +01:00

recipes-multimedia

tiff: fix CVE-2026-4775

2026-06-26 16:55:53 +01:00

recipes-rt

rt-tests: rt_bmark.py: fix TypeError

2024-08-06 19:11:18 -07:00

recipes-sato

webkitgtk: upgrade 2.44.3 -> 2.44.4

2025-11-14 06:45:29 -08:00

recipes-support

vim: fix for CVE-2026-28421, CVE-2026-41411 & CVE-2026-44656

2026-07-20 09:04:32 +01:00

site

site: remove at-spi2-core values

2023-09-02 07:45:29 +01:00

COPYING.MIT

…

recipes.txt

…