On Thu Jul 23, 2026 at 10:44 AM CEST, Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) wrote: > Hi, > > I reviewed the earlier series. > It looks like the follow-up upstream regression fixes for > CVE-2026-58469 and CVE-2026-58472 were not included in the backport. > These follow-up commits are required to complete the backport, and I > have included them in my series . > I kindly request you to review my series as well. > > Thanks, > Hetvi Thakar
Hello, I can choose to continue with your series indeed but it lacks a corresponding master series. Amaury's series[0] on master has the same issue as this one. So I doubt it will merge in this v1 state. Can you help review/fix the series on master? Then, I'll consider your series. Thanks! [0]: https://lore.kernel.org/openembedded-core/[email protected]/T/#t > > > ________________________________ > From: [email protected] > <[email protected]> on behalf of Yoann Congal via > lists.openembedded.org <[email protected]> > Sent: Wednesday, July 22, 2026 23:11 > To: Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) > <[email protected]>; [email protected] > <[email protected]> > Cc: xe-linux-external (Internal Group) <[email protected]> > Subject: Re: [OE-core][wrynose][PATCH 1/4] wget: Fix CVE-2026-58469 > > On Wed Jul 22, 2026 at 12:07 PM CEST, Hetvi Thakar -X (hthakar - E INFOCHIPS > PRIVATE LIMITED at Cisco) via lists.openembedded.org wrote: >> From: Hetvi Thakar <[email protected]> >> >> This patch applies the upstream fix as referenced in [2], >> using the commit shown in [1]. >> >> It also includes the upstream follow-up fixes referenced in [3] >> and [4]. These correct the trailing whitespace check introduced >> by the original fix and add the required <ctype.h> include for >> isspace(). >> >> [1] >> https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826 >> [2] https://nvd.nist.gov/vuln/detail/CVE-2026-58469 >> [3] >> https://gitlab.com/gnuwget/wget/-/commit/7b1cdecc49bc77bde220fc575c8a00386c3f3bcf >> [4] >> https://gitlab.com/gnuwget/wget/-/commit/82d945ff5dc9942b78b2bf736aac298c24fe00a1 >> >> Signed-off-by: Hetvi Thakar <[email protected]> > > Hello, > > I received another similar series 2 hours before yours: > https://patchwork.yoctoproject.org/project/oe-core/list/?series=48992 > Can you help review it? > > Regards, > -- > Yoann Congal > Smile ECS -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#242020): https://lists.openembedded.org/g/openembedded-core/message/242020 Mute This Topic: https://lists.openembedded.org/mt/120391416/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
