From 634bd4bef31094d41c3a596235f521413c2074eb Mon Sep 17 00:00:00 2001
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Date: Thu, 12 Nov 2026 20:13:46 +1300
Subject: [PATCH] brotli: set CVE_PRODUCT to "google:brotli"

cve-check class is setting default CVE_PRODUCT to 'brotli' which ignores
the CVEs from NVD Database.

Reference:
CVE-2026-111497
https://nvd.nist.gov/vuln/detail/cve-2026-111497

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
---
 meta-oe/recipes-extended/brotli/brotli_1.2.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
index dca16cb79b..14d7fe96e5 100644
--- a/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
+++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
@@ -20,3 +20,5 @@ do_install:append () {
 }
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_PRODUCT = "google:brotli"