From f35b44d29bb327582821728d12eae4ef7e6d3f94 Mon Sep 17 00:00:00 2001
From: Thomas Perale <thomas.perale@mind.be>
Date: Tue, 20 Jan 2026 09:24:02 +0100
Subject: [PATCH] package/mp4v2: add CPE

The CPE `mp4v2:mp4v2` is valid for the package mp4v2. See the latest
CVE: CVE-2023-33719 that reference the upstream repository.

[1] https://nvd.nist.gov//vuln/detail/CVE-2023-33719

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 5a03ffed801f5558e334d0e0000668d6e3355af0)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 package/mp4v2/mp4v2.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/mp4v2/mp4v2.mk b/package/mp4v2/mp4v2.mk
index ae777cdc75..8d8e184b99 100644
--- a/package/mp4v2/mp4v2.mk
+++ b/package/mp4v2/mp4v2.mk
@@ -12,6 +12,8 @@ MP4V2_INSTALL_STAGING = YES
 MP4V2_LICENSE = MPL-1.1
 MP4V2_LICENSE_FILES = COPYING
 
+MP4V2_CPE_ID_VENDOR = mp4v2
+
 # help2man expects to be able to run utilities on the build machine to
 # grab --help output which doesn't work when cross compiling, so
 # disable it