diff --git a/meta-forgefirm/recipes-extended/orcania/orcania_2.3.3.bb b/meta-forgefirm/recipes-extended/orcania/orcania_2.3.3.bb
new file mode 100644
index 0000000..36a326c
--- /dev/null
+++ b/meta-forgefirm/recipes-extended/orcania/orcania_2.3.3.bb
@@ -0,0 +1,13 @@
+DESCRIPTION = "Potluck with different functions for C programs (babelouest base library)"
+HOMEPAGE = "https://github.com/babelouest/orcania"
+
+LICENSE = "LGPL-2.1-or-later"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=fc178bcd425090939a8b634d1d6a9594"
+
+# Pinned to the v2.3.3 release tag: the version ulfius v2.7.15 builds against.
+SRC_URI = "git://github.com/babelouest/orcania;protocol=https;branch=master"
+SRCREV = "ffc8b55d09a3488f4f6be38034b33bc64bf8b0ce"
+
+S = "${WORKDIR}/git"
+
+inherit cmake pkgconfig
diff --git a/meta-forgefirm/recipes-extended/uflius/ulfius_git.bb b/meta-forgefirm/recipes-extended/uflius/ulfius_git.bb
deleted file mode 100644
index 6a35723..0000000
--- a/meta-forgefirm/recipes-extended/uflius/ulfius_git.bb
+++ /dev/null
@@ -1,25 +0,0 @@
-DESCRIPTION = "C library for web frameworks"
-HOMEPAGE = "https://github.com/babelouest/ulfius"
-
-LICENSE = "LGPL-2.1"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=40d2542b8c43a3ec2b7f5da31a697b88"
-
-SRC_URI = "git://github.com/babelouest/ulfius;protocol=https;branch=master"
-SRCREV = "${AUTOREV}"
-
-S = "${WORKDIR}/git"
-
-inherit cmake pkgconfig
-
-# For some reason, this package wants to install headers from other packages
-# do_install:append() {
-#   rm -f ${D}${includedir}/orcania.h
-#   rm -f ${D}${includedir}/orcania-cfg.h
-#   rm -f ${D}${includedir}/yder.h
-#   rm -f ${D}${includedir}/yder-cfg.h
-# }
-
-DEPENDS = "gnutls jansson libmicrohttpd"
-RDEPENDS:${PN} = "gnutls jansson libmicrohttpd"
-
-EXTRA_OECMAKE += "-DWITH_JOURNALD=off"
diff --git a/meta-forgefirm/recipes-extended/ulfius/ulfius_2.7.15.bb b/meta-forgefirm/recipes-extended/ulfius/ulfius_2.7.15.bb
new file mode 100644
index 0000000..5204cf5
--- /dev/null
+++ b/meta-forgefirm/recipes-extended/ulfius/ulfius_2.7.15.bb
@@ -0,0 +1,23 @@
+DESCRIPTION = "Web Framework to build REST APIs, Webservices or any HTTP endpoint in C"
+HOMEPAGE = "https://github.com/babelouest/ulfius"
+
+LICENSE = "LGPL-2.1-or-later"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=40d2542b8c43a3ec2b7f5da31a697b88"
+
+# Pinned to the v2.7.15 release tag, together with orcania v2.3.3 and
+# yder v1.4.20 (its release-mate dependency versions). AUTOREV against master
+# was unbuildable: master's CMake requires orcania/yder versions that have no
+# release tags, and the git:// fetch never brought in the bundled-subproject
+# fallback (audit M10).
+SRC_URI = "git://github.com/babelouest/ulfius;protocol=https;branch=master"
+SRCREV = "a0603447d3ed63c0880db396b9c395fb4bf6b559"
+
+S = "${WORKDIR}/git"
+
+inherit cmake pkgconfig
+
+# curl backs the default-ON WITH_CURL client-request API (find_package REQUIRED).
+DEPENDS = "gnutls jansson libmicrohttpd curl orcania yder"
+
+# No systemd journald on the forgefirm image.
+EXTRA_OECMAKE += "-DWITH_JOURNALD=off"
diff --git a/meta-forgefirm/recipes-extended/yder/yder_1.4.20.bb b/meta-forgefirm/recipes-extended/yder/yder_1.4.20.bb
new file mode 100644
index 0000000..99a9f66
--- /dev/null
+++ b/meta-forgefirm/recipes-extended/yder/yder_1.4.20.bb
@@ -0,0 +1,18 @@
+DESCRIPTION = "Logging library for C applications (babelouest)"
+HOMEPAGE = "https://github.com/babelouest/yder"
+
+LICENSE = "LGPL-2.1-or-later"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=40d2542b8c43a3ec2b7f5da31a697b88"
+
+# Pinned to the v1.4.20 release tag: the version ulfius v2.7.15 builds against.
+SRC_URI = "git://github.com/babelouest/yder;protocol=https;branch=master"
+SRCREV = "dffe82c0483bb95d0d518ba1e36c568e63a24628"
+
+S = "${WORKDIR}/git"
+
+inherit cmake pkgconfig
+
+DEPENDS = "orcania"
+
+# No systemd journald on the forgefirm image.
+EXTRA_OECMAKE += "-DWITH_JOURNALD=off"