On 12 Dec 2024, at 06:54, Marta Rybczynska via lists.openembedded.org
<[email protected]> wrote:
>
> This series is allowing choice of the NVD feed to use, you can
> configure them using the NVD_DB_VERSION variable in local.conf
>
> Available feeds:
> - NVD2 (default) - the current NVD API v2 feed
> - NVD1 - the old NVD feed (deprecated, but still working)
> - FKIE - the NVD feed restoration from FKIE-CAD
>
> Marta Rybczynska (4):
> cve-update-db-native: restore
> cve-update-db-native: update structure
> cve-update-db-native: add the fkie source
> cve-check: allow feed choice
If I select FKIE this fails to fetch:
File:
'/home/rosbur01/Yocto/poky/meta/recipes-core/meta/cve-update-db-native.bb',
lineno: 301, function: update_db_nvdjson
0297: import json
0298: bb.warn(str(jsondata)[:1000])
0299: root = json.loads(jsondata)
0300:
*** 0301: for elt in root['CVE_Items']:
0302: if not elt['impact']:
0303: continue
0304:
0305: accessVector = None
Exception: KeyError: 'CVE_Items'
Adding a dump of the JSON shows that the keys are lowercase, which the parser
is not expecting:
WARNING: cve-update-db-native-1.0-r0 do_fetch: b'{\n "timestamp":
"2024-12-16T01:00:10+00:00",\n "cve_count": 2392,\n "feed_name":
"CVE-2002",\n "source": "fkie-cad/nvd-json-data-feeds",\n "cve_items”:
Ross
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#208772):
https://lists.openembedded.org/g/openembedded-core/message/208772
Mute This Topic: https://lists.openembedded.org/mt/110075962/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
