From 9998adb090688d01a880a50a92b733c37cef9d59 Mon Sep 17 00:00:00 2001
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Date: Wed, 23 Sep 2026 22:40:18 +1200
Subject: [PATCH] colord: ignore CVE-2026-85062

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-85062

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
---
 meta-oe/recipes-support/colord/colord.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-oe/recipes-support/colord/colord.bb b/meta-oe/recipes-support/colord/colord.bb
index e918500161..f129eb32a9 100644
--- a/meta-oe/recipes-support/colord/colord.bb
+++ b/meta-oe/recipes-support/colord/colord.bb
@@ -54,3 +54,4 @@ do_install:append() {
 USERADD_PACKAGES = "${PN}"
 USERADD_PARAM:${PN} = "--system --user-group --shell /bin/false --no-create-home --home-dir ${localstatedir}/lib/colord colord"
 
+CVE_STATUS[CVE-2026-85062] = "cpe-incorrect: this CVE is for JavaScript colord tool"