From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <adongare@cisco.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 154E9C43327
	for <webhook@archiver.kernel.org>; Mon, 29 Jun 2026 12:08:54 +0000 (UTC)
Subject: Re: [scarthgap] [PATCH 1/7] curl: ignore CVE-2026-4873
To: openembedded-core@lists.openembedded.org
From: "Anil Dongare -X (adongare - E INFOCHIPS PRIVATE LIMITED at Cisco)" <adongare@cisco.com>
X-Originating-Location: Mumbai, Maharashtra, IN (151.186.177.21)
X-Originating-Platform: Windows Edge 149
User-Agent: GROUPS.IO Web Poster
MIME-Version: 1.0
Date: Mon, 29 Jun 2026 05:08:47 -0700
References: <20260629104801.972184-1-adongare@cisco.com> <DJLIGNIA29T0.UP5MNHAPJBCH@smile.fr>
In-Reply-To: <DJLIGNIA29T0.UP5MNHAPJBCH@smile.fr>
Message-ID: <330317.1782734927543862033@lists.openembedded.org>
Content-Type: multipart/alternative; boundary="JUFWkvWuNrPLStQcPHtm"
List-Id: <openembedded-core.lists.openembedded.org>
X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by
 aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for
 <openembedded-core@lists.openembedded.org>; Mon, 29 Jun 2026 12:08:54 -0000
X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239760

--JUFWkvWuNrPLStQcPHtm
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi Yoann,

Thank you for the clarification.

You are right, CVE-2026-4873 should also be handled for wrynose, and I miss=
ed
sending the corresponding wrynose patch before continuing with the scarthga=
p
series.

I will review the pending wrynose items from Patchwork, prepare the require=
d
wrynose fixes, and send them first. After that, I will rebase and resend th=
e
scarthgap curl CVE patches as needed.

Apologies for the inconvenience.

Regards,
Anil Dongare.

--JUFWkvWuNrPLStQcPHtm
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<div>Hi Yoann,<br /><br />Thank you for the clarification.<br /><br />You a=
re right, CVE-2026-4873 should also be handled for wrynose, and I missed<br=
 />sending the corresponding wrynose patch before continuing with the scart=
hgap<br />series.<br /><br />I will review the pending wrynose items from P=
atchwork, prepare the required<br />wrynose fixes, and send them first. Aft=
er that, I will rebase and resend the<br />scarthgap curl CVE patches as ne=
eded.<br /><br />Apologies for the inconvenience.<br /><br />Regards,<br />=
Anil Dongare.</div>

--JUFWkvWuNrPLStQcPHtm--