[meta-oe,4/6] brotli: set CVE_PRODUCT to "google:brotli"

Message ID	20261112071348.4144113-4-ankur.tyagi85@gmail.com
State	New
Headers	show Received: from mail-pl1-f176.google.com (mail-pl1-f176.google.com [209.85.214.176]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.8436.1794467645444705927 for <openembedded-devel@lists.openembedded.org>; Wed, 11 Nov 2026 23:14:05 -0800 ip: 209.85.214.176, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][PATCH 4/6] brotli: set CVE_PRODUCT to "google:brotli" Date: Thu, 12 Nov 2026 20:13:46 +1300 Message-ID: <20261112071348.4144113-4-ankur.tyagi85@gmail.com> In-Reply-To: <20261112071348.4144113-1-ankur.tyagi85@gmail.com> References: <20261112071348.4144113-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8"
Series	[meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 \| expand [meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 [meta-oe,2/6] apitrace: patch CVE-2026-126050 [meta-webserver,3/6] cockpit: mark CVE-2024-2947 fixed [meta-oe,4/6] brotli: set CVE_PRODUCT to "google:brotli" [meta-networking,5/6] tinyproxy: patch CVE-2026-125371 [meta-oe,6/6] mpv: patch CVE-2026-123095

Message ID

20261112071348.4144113-4-ankur.tyagi85@gmail.com

State

New

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][PATCH 4/6] brotli: set CVE_PRODUCT to "google:brotli"
Date: Thu, 12 Nov 2026 20:13:46 +1300
Message-ID: <20261112071348.4144113-4-ankur.tyagi85@gmail.com>
In-Reply-To: <20261112071348.4144113-1-ankur.tyagi85@gmail.com>
References: <20261112071348.4144113-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="utf-8"

Series

[meta-oe,1/6] 7zip: upgrade 26.05 -> 26.06 | expand

Commit Message

Ankur Tyagi Nov. 12, 2026, 7:13 a.m. UTC

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

cve-check class is setting default CVE_PRODUCT to 'brotli' which ignores
the CVEs from NVD Database.

Reference:
CVE-2026-111497
https://nvd.nist.gov/vuln/detail/cve-2026-111497

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-extended/brotli/brotli_1.2.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
index dca16cb79b..14d7fe96e5 100644
--- a/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
+++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
@@ -20,3 +20,5 @@  do_install:append () {
 }
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_PRODUCT = "google:brotli"

[meta-oe,4/6] brotli: set CVE_PRODUCT to "google:brotli"

Commit Message

Patch