From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sdoshi@mvista.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 7E249C88E4D
	for <webhook@archiver.kernel.org>; Fri, 11 Sep 2026 13:24:10 +0000 (UTC)
Subject: Re: [scarthgap][PATCH 1/6] libxml2: Security Fix for CVE-2026-86137
To: openembedded-core@lists.openembedded.org
From: "Siddharth Doshi" <sdoshi@mvista.com>
X-Originating-Location: Rajkot, Gujarat, IN (157.32.44.194)
X-Originating-Platform: Linux Chrome 151
User-Agent: GROUPS.IO Web Poster
MIME-Version: 1.0
Date: Fri, 11 Sep 2026 06:24:01 -0700
References: <20260910200329.842463-1-sdoshi@mvista.com> <DLCIC1493YTD.2KR894JSU7SKE@smile.fr>
In-Reply-To: <DLCIC1493YTD.2KR894JSU7SKE@smile.fr>
Message-ID: <308852.1789133041123096150@lists.openembedded.org>
Content-Type: multipart/alternative; boundary="wz4C0MuSC1AAxz1iqbPm"
List-Id: <openembedded-core.lists.openembedded.org>
X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by
 aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for
 <openembedded-core@lists.openembedded.org>; Fri, 11 Sep 2026 13:24:10 -0000
X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/245644

--wz4C0MuSC1AAxz1iqbPm
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Yoann,

Richard sent a patch to master for libxml2--> libxml2: upgrade 2.15.3 -> 2.=
15.4 which fixes these CVE's
(ref: https://lists.openembedded.org/g/openembedded-core/message/245203 )

The same patch sent by Richard is applicable to wrynose too and considering=
 that i didn't send a patch to version upgrade libxml2 for wrynose.
However, if you still feel i should send the same thing for wrynose, i woul=
d do it.

Could you let me know i should proceed for it according to you ?

Regards,
Siddharth

--wz4C0MuSC1AAxz1iqbPm
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<div>Hello Yoann,<br /><br />Richard sent a patch to master for libxml2--&g=
t; libxml2: upgrade 2.15.3 -&gt; 2.15.4 which fixes these CVE's<br />(ref: =
<a href=3D"https://lists.openembedded.org/g/openembedded-core/message/24520=
3" target=3D"_blank" rel=3D"noopener">https://lists.openembedded.org/g/open=
embedded-core/message/245203</a>)<br /><br />The same patch sent by Richard=
 is applicable to wrynose too and considering that i didn't send a patch to=
 version upgrade libxml2 for wrynose.<br />However, if you still feel i sho=
uld send the same thing for wrynose, i would do it.<br /><br />Could you le=
t me know i should proceed for it according to you ?<br /><br />Regards,<br=
 />Siddharth</div>

--wz4C0MuSC1AAxz1iqbPm--