[scarthgap,25/25] libtheora: set CVE_PRODUCT

Message ID	6334c612dbc96e1e6593c8b02f073e5170e82e31.1770626074.git.yoann.congal@smile.fr
State	RFC
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.54, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 25/25] libtheora: set CVE_PRODUCT Date: Mon, 9 Feb 2026 10:29:08 +0100 Message-ID: <6334c612dbc96e1e6593c8b02f073e5170e82e31.1770626074.git.yoann.congal@smile.fr> In-Reply-To: <cover.1770626074.git.yoann.congal@smile.fr> References: <cover.1770626074.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/25] curl: fix CVE-2025-10148 \| expand [scarthgap,01/25] curl: fix CVE-2025-10148 [scarthgap,02/25] curl: patch CVE-2025-14524 [scarthgap,03/25] expat: patch CVE-2026-24515 [scarthgap,04/25] expat: patch CVE-2026-25210 [scarthgap,05/25] glib-2.0: patch CVE-2026-0988 [scarthgap,06/25] inetutils: Fix CVE-2026-24061 [scarthgap,07/25] libpng: patch CVE-2026-22695 [scarthgap,08/25] libpng: patch CVE-2026-22801 [scarthgap,09/25] libtasn1: Fix CVE-2025-13151 [scarthgap,10/25] libxml2: patch CVE-2026-0989 [scarthgap,11/25] libxml2: patch CVE-2026-0990 [scarthgap,12/25] libxml2: patch CVE-2026-0992 [scarthgap,13/25] libxml2: add follow-up patch for CVE-2026-0992 [scarthgap,14/25] python3: patch CVE-2025-13837 [scarthgap,15/25] python-urllib3: Backport fix for CVE-2026-21441 [scarthgap,16/25] zlib: ignore CVE-2026-22184 [scarthgap,17/25] ffmpeg: upgrade 6.1.3 -> 6.1.4 [scarthgap,18/25] ffmpeg: ignore CVE-2025-25469 [scarthgap,19/25] glibc: stable 2.39 branch updates [scarthgap,20/25] meta/classes: fix missing vardeps for CVE status variables [scarthgap,21/25] improve_kernel_cve_report: add script for postprocesing of kernel CVE data [scarthgap,22/25] lighttpd: Fix trailing slash on files in mod_dirlisting [scarthgap,23/25] docbook-xml-dtd4: fix the fetching failure [scarthgap,24/25] pseudo: Update to 1.9.3 release [scarthgap,25/25] libtheora: set CVE_PRODUCT

Message ID

6334c612dbc96e1e6593c8b02f073e5170e82e31.1770626074.git.yoann.congal@smile.fr

State

RFC

Delegated to:

Yoann Congal

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 25/25] libtheora: set CVE_PRODUCT
Date: Mon,  9 Feb 2026 10:29:08 +0100
Message-ID: 
 <6334c612dbc96e1e6593c8b02f073e5170e82e31.1770626074.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1770626074.git.yoann.congal@smile.fr>
References: <cover.1770626074.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/25] curl: fix CVE-2025-10148 | expand

Commit Message

Yoann Congal Feb. 9, 2026, 9:29 a.m. UTC

From: Ken Kurematsu <k.kurematsu@nskint.co.jp>

In the NVD database, the product name of libtheora is theora.
This was set to ensure that cve-check works correctly.

Signed-off-by: Ken Kurematsu <k.kurematsu@nskint.co.jp>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a8ddda60332e2a3219e905c1545b5da917f855c6)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-multimedia/libtheora/libtheora_1.1.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-multimedia/libtheora/libtheora_1.1.1.bb b/meta/recipes-multimedia/libtheora/libtheora_1.1.1.bb
index 11674af379f..5e94bc29751 100644
--- a/meta/recipes-multimedia/libtheora/libtheora_1.1.1.bb
+++ b/meta/recipes-multimedia/libtheora/libtheora_1.1.1.bb
@@ -16,6 +16,8 @@  SRC_URI[sha256sum] = "b6ae1ee2fa3d42ac489287d3ec34c5885730b1296f0801ae577a35193d
 
 UPSTREAM_CHECK_REGEX = "libtheora-(?P<pver>\d+(\.\d)+)\.(tar\.gz|tgz)"
 
+CVE_PRODUCT = "theora"
+
 inherit autotools pkgconfig
 
 EXTRA_OECONF = "--disable-examples"

[scarthgap,25/25] libtheora: set CVE_PRODUCT

Commit Message

Patch