Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-05-09 Thread Marta Rybczynska
On Wed, Apr 5, 2023 at 8:44 PM Steve Sakoman wrote: > On Wed, Apr 5, 2023 at 8:43 AM Marta Rybczynska > wrote: > > > > > > > > On Wed, Apr 5, 2023 at 5:55 PM Steve Sakoman wrote: > >> > >> Hi Marta, > >> > >> Is this safe to backport to the stable branches, or should I let it > >> "age" in

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-04-05 Thread Steve Sakoman
On Wed, Apr 5, 2023 at 8:43 AM Marta Rybczynska wrote: > > > > On Wed, Apr 5, 2023 at 5:55 PM Steve Sakoman wrote: >> >> Hi Marta, >> >> Is this safe to backport to the stable branches, or should I let it >> "age" in master for a while? >> > > Hi Steve, > I vote to let it age for a little

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-04-05 Thread Marta Rybczynska
On Wed, Apr 5, 2023 at 5:55 PM Steve Sakoman wrote: > Hi Marta, > > Is this safe to backport to the stable branches, or should I let it > "age" in master for a while? > > Hi Steve, I vote to let it age for a little moment. In the meantime I'm trying to figure out when exactly NVD will turn off

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-04-05 Thread Steve Sakoman
Hi Marta, Is this safe to backport to the stable branches, or should I let it "age" in master for a while? Thanks! Steve On Wed, Mar 29, 2023 at 12:03 AM Marta Rybczynska wrote: > > Add new fetcher for the NVD database using the 2.0 API [1]. > The implementation changes as little as possible,

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-03-31 Thread Alexandre Belloni via lists.openembedded.org
On 31/03/2023 23:40:58+0200, Alexandre Belloni via lists.openembedded.org wrote: > Hello Marta, > > This fails oe-selftest with: > > ERROR: cve-update-nvd2-native-1.0-r0 do_fetch: QA Issue: Recipe > cve-update-nvd2-native in >

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-03-31 Thread Alexandre Belloni via lists.openembedded.org
Hello Marta, This fails oe-selftest with: ERROR: cve-update-nvd2-native-1.0-r0 do_fetch: QA Issue: Recipe cve-update-nvd2-native in /home/pokybuild/yocto-worker/oe-selftest-debian/build/meta/recipes-core/meta/cve-update-nvd2-native.bb does not have an assigned maintainer. Please add an entry

Re: [OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-03-29 Thread Marta Rybczynska
On Wed, 29 Mar 2023, 12:03 Marta Rybczynska via lists.openembedded.org, wrote: > Add new fetcher for the NVD database using the 2.0 API [1]. > The implementation changes as little as possible, keeping the current > database format (but using a different database file for the transition >

[OE-core] [PATCH] cve-update-nvd2-native: new CVE database fetcher

2023-03-29 Thread Marta Rybczynska
Add new fetcher for the NVD database using the 2.0 API [1]. The implementation changes as little as possible, keeping the current database format (but using a different database file for the transition period), with a notable exception of not using the META table. Minor changes that could be