On Thu Jul 30, 2026 at 11:27 AM CEST, bhavesh.maheshwari via 
lists.openembedded.org wrote:
> Pick patch from [1] mentioned in [2] taken from NVD report in [3].
>
> [1] https://github.com/curl/curl/commit/88c7e16cceec816a2df45c89
> [2] https://curl.se/docs/CVE-2026-9079.html
> [3] https://nvd.nist.gov/vuln/detail/CVE-2026-9079
>
> Signed-off-by: Bhavesh R Maheshwari <[email protected]>
> ---
>  .../curl/curl/CVE-2026-9079.patch             | 289 ++++++++++++++++++
>  meta/recipes-support/curl/curl_8.19.0.bb      |   1 +
>  2 files changed, 290 insertions(+)
>  create mode 100644 meta/recipes-support/curl/curl/CVE-2026-9079.patch

Hello,

This series does not apply on top of the review branch anymore:
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-review
| ERROR: curl-8.19.0-r0 do_patch: QA Issue: Fuzz detected:
| 
| Applying patch CVE-2026-9079.patch
| patching file lib/setopt.c
| Hunk #1 succeeded at 1694 (offset 15 lines).
| patching file tests/data/Makefile.am
| patching file tests/data/test1648
| patching file tests/libtest/Makefile.inc
| Hunk #1 succeeded at 100 with fuzz 1.
| patching file tests/libtest/lib1648.c
| 
| 
| The context lines in the patches can be updated with devtool:
| 
|     devtool modify curl
|     devtool finish --force-patch-refresh curl <layer_path>
| 
| Don't forget to review changes done by devtool!
| 
| Patch log indicates that patches do not apply cleanly. [patch-fuzz]
| ERROR: curl-8.19.0-r0 do_patch: Fatal QA errors were found, failing task.
| ERROR: Logfile of failure stored in: 
.../wrynose/bitbake-builds/poky-wrynose/build/tmp/work/x86-64-v3-poky-linux/curl/8.19.0/temp/log.do_patch.475571
| ERROR: Task 
(.../wrynose/bitbake-builds/poky-wrynose/layers/openembedded-core/meta/recipes-support/curl/curl_8.19.0.bb:do_patch)
 failed with exit code '1'

Can you please rebase and send a v2?

Please note that there are other pending curl CVE patches, I'd recommand
reviewing/testing patches to identify conflict at the earliest.

Thanks!
-- 
Yoann Congal
Smile ECS

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#244247): 
https://lists.openembedded.org/g/openembedded-core/message/244247
Mute This Topic: https://lists.openembedded.org/mt/120516246/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to