Hi, I reviewed the earlier series. It looks like the follow-up upstream regression fixes for CVE-2026-58469 and CVE-2026-58472 were not included in the backport. These follow-up commits are required to complete the backport, and I have included them in my series . I kindly request you to review my series as well.
Thanks, Hetvi Thakar ________________________________ From: Yoann Congal <[email protected]> Sent: 22 July 2026 23:13 To: Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) <[email protected]>; [email protected] <[email protected]> Cc: xe-linux-external (Internal Group) <[email protected]> Subject: Re: [OE-core][scarthgap][PATCH 1/4] wget: Fix CVE-2026-58469 On Wed Jul 22, 2026 at 12:12 PM CEST, Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.openembedded.org wrote: > From: Hetvi Thakar <[email protected]> > > This patch applies the upstream fix as referenced in [2], > using the commit shown in [1]. > > It also includes the upstream follow-up fixes referenced in [3] > and [4]. These correct the trailing whitespace check introduced > by the original fix and add the required <ctype.h> include for > isspace(). > > [1] > https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826 > [2] https://nvd.nist.gov/vuln/detail/CVE-2026-58469 > [3] > https://gitlab.com/gnuwget/wget/-/commit/7b1cdecc49bc77bde220fc575c8a00386c3f3bcf > [4] > https://gitlab.com/gnuwget/wget/-/commit/82d945ff5dc9942b78b2bf736aac298c24fe00a1 > > Signed-off-by: Hetvi Thakar <[email protected]> Hello, I received another similar series 2 hours before yours: https://patchwork.yoctoproject.org/project/oe-core/list/?series=48993 Can you help review it? Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241796): https://lists.openembedded.org/g/openembedded-core/message/241796 Mute This Topic: https://lists.openembedded.org/mt/120391440/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
