On Sat Jul 25, 2026 at 4:32 PM CEST, Siddharth Doshi via lists.openembedded.org wrote: > From: Siddharth Doshi <[email protected]> > > Picking patch as per [1], and same patch is mentioned in [2] > > References: > [1] https://github.com/vim/vim/commit/8af0f098c3a42a28661d0295364e > [2] https://security-tracker.debian.org/tracker/CVE-2026-43961 > > Signed-off-by: Siddharth Doshi <[email protected]> > --- > .../vim/files/CVE-2026-43961.patch | 104 ++++++++++++++++++ > meta/recipes-support/vim/vim.inc | 1 + > 2 files changed, 105 insertions(+) > create mode 100644 meta/recipes-support/vim/files/CVE-2026-43961.patch
This patch triggers a fuzz warning: |ERROR: vim-tiny-9.2.0340-r0 do_patch: QA Issue: Fuzz detected: | |Applying patch CVE-2026-43961.patch |patching file runtime/pack/dist/opt/netrw/autoload/netrw.vim |patching file src/testdir/test_plugin_netrw.vim |Hunk #1 succeeded at 639 with fuzz 1 (offset 10 lines). |patching file src/version.c | | |The context lines in the patches can be updated with devtool: | | devtool modify vim-tiny | devtool finish --force-patch-refresh vim-tiny <layer_path> | |Don't forget to review changes done by devtool! | |Patch log indicates that patches do not apply cleanly. [patch-fuzz] |ERROR: vim-tiny-9.2.0340-r0 do_patch: Fatal QA errors were found, failing task. |ERROR: Logfile of failure stored in: ...bitbake-builds/poky-wrynose/build/tmp/work/x86-64-v3-poky-linux/vim-tiny/9.2.0340/temp/log.do_patch.3626438 |ERROR: Task (...bitbake-builds/poky-wrynose/layers/openembedded-core/meta/recipes-support/vim/vim-tiny_9.2.bb:do_patch) failed with exit code '1' |ERROR: vim-9.2.0340-r0 do_patch: QA Issue: Fuzz detected: | |Applying patch CVE-2026-43961.patch |patching file runtime/pack/dist/opt/netrw/autoload/netrw.vim |patching file src/testdir/test_plugin_netrw.vim |Hunk #1 succeeded at 639 with fuzz 1 (offset 10 lines). |patching file src/version.c | | |The context lines in the patches can be updated with devtool: | | devtool modify vim | devtool finish --force-patch-refresh vim <layer_path> | |Don't forget to review changes done by devtool! | |Patch log indicates that patches do not apply cleanly. [patch-fuzz] |ERROR: vim-9.2.0340-r0 do_patch: Fatal QA errors were found, failing task. |ERROR: Logfile of failure stored in: ...bitbake-builds/poky-wrynose/build/tmp/work/x86-64-v3-poky-linux/vim/9.2.0340/temp/log.do_patch.3628755 |ERROR: Task (...bitbake-builds/poky-wrynose/layers/openembedded-core/meta/recipes-support/vim/vim_9.2.bb:do_patch) failed with exit code '1' There was another vim CVE series from Vijay Anusuri[0] but I've requested changes so, now, this series is applied directly on top of https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next Maybe you can work with Vijay Anusuri and send a single consolidated series with both your vim CVE fixes? I'll hold this series in the meantime. [0]: https://lore.kernel.org/openembedded-core/[email protected]/T/#t -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#242026): https://lists.openembedded.org/g/openembedded-core/message/242026 Mute This Topic: https://lists.openembedded.org/mt/120440619/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
