]> code.ossystems Code Review - openembedded-core.git/commit
cve-update-db: New recipe to update CVE database
authorPierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Wed, 6 Nov 2019 15:37:16 +0000 (17:37 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 6 Nov 2019 20:44:15 +0000 (20:44 +0000)
commite344a27003cc9e39058b41c0e96463f231ebf245
treeefaed0664b1edd52876231600ab8e72345ce4306
parent151f7fb11bb4c91dd6edaebcc63fa3c1a2cbfe8b
cve-update-db: New recipe to update CVE database

cve-check-tool-native do_populate_cve_db task was using deprecated NVD
xml data feeds, cve-update-db uses NVD json data feeds.

Sqlite database schema was updated to take into account CVSSv3 CVE
scores and operator in affected product versions.
A new META table was added to store the last modification date of the
NVD json data feeds.

(From OE-Core rev: 546d14135c50c6a571dfbf3baf6e9b22ce3d58e0)

Signed-off-by: Pierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Conflicts:
meta/conf/distro/include/maintainers.inc
meta/conf/distro/include/maintainers.inc
meta/recipes-core/meta/cve-update-db.bb [new file with mode: 0644]