mbox series

[0/3] sbom-cve-check: Update to version 1.3.1 and update CVE databases

Message ID 20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com
Headers show
Series sbom-cve-check: Update to version 1.3.1 and update CVE databases | expand

Message

Benjamin Robin (Schneider Electric) May 7, 2026, 4:30 p.m. UTC
This series updates:
 - sbom-cve-check to version 1.3.1 which mainly fix a potential dead lock.
 - sbom-cve-check-update-* recipes to the latest revision

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
---
Benjamin Robin (Schneider Electric) (3):
      python3-sbom-cve-check: Update to version 1.3.1
      sbom-cve-check-update-cvelist-native: Update source revision
      sbom-cve-check-update-nvd-native: Update source revision

 ...ython3-sbom-cve-check_1.3.0.bb => python3-sbom-cve-check_1.3.1.bb} | 4 ++--
 .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb            | 4 ++--
 .../sbom-cve-check/sbom-cve-check-update-nvd-native.bb                | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)
---
base-commit: 4f7d1a0885d7d6f2a533f7388ed5f5a35d6f99bc
change-id: 20260507-update-sbom-cve-check-1050ff02aefc

Best regards,
--  
Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>

Comments

Marko, Peter May 7, 2026, 4:57 p.m. UTC | #1
> -----Original Message-----
> From: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> Sent: Thursday, May 7, 2026 6:30 PM
> To: openembedded-core@lists.openembedded.org
> Cc: richard.purdie@linuxfoundation.org; Marko, Peter (FT D EU SK BFS1)
> <Peter.Marko@siemens.com>; ross.burton@arm.com; jpewhacker@gmail.com;
> olivier.benjamin@bootlin.com; antonin.godard@bootlin.com; mathieu.dubois-
> briand@bootlin.com; thomas.petazzoni@bootlin.com; pascal.eberhard@se.com;
> wahid.essid@se.com; Benjamin Robin (Schneider Electric)
> <benjamin.robin@bootlin.com>
> Subject: [PATCH 0/3] sbom-cve-check: Update to version 1.3.1 and update CVE
> databases
> 
> This series updates:
>  - sbom-cve-check to version 1.3.1 which mainly fix a potential dead lock.

Thanks a lot for this update!
I wouldn't say "potential" as our pipelines were getting stuck on sbom-cve-check-recipe tasks daily.

Peter

>  - sbom-cve-check-update-* recipes to the latest revision
> 
> Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> ---
> Benjamin Robin (Schneider Electric) (3):
>       python3-sbom-cve-check: Update to version 1.3.1
>       sbom-cve-check-update-cvelist-native: Update source revision
>       sbom-cve-check-update-nvd-native: Update source revision
> 
>  ...ython3-sbom-cve-check_1.3.0.bb => python3-sbom-cve-check_1.3.1.bb} | 4 ++--
>  .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb            | 4 ++--
>  .../sbom-cve-check/sbom-cve-check-update-nvd-native.bb                | 4 ++--
>  3 files changed, 6 insertions(+), 6 deletions(-)
> ---
> base-commit: 4f7d1a0885d7d6f2a533f7388ed5f5a35d6f99bc
> change-id: 20260507-update-sbom-cve-check-1050ff02aefc
> 
> Best regards,
> --
> Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Benjamin Robin (Schneider Electric) May 8, 2026, 9:57 a.m. UTC | #2
Hello Peter,

On Thursday, May 7, 2026 at 6:57 PM, Marko, Peter wrote:
> > Subject: [PATCH 0/3] sbom-cve-check: Update to version 1.3.1 and update CVE
> > databases
> > 
> > This series updates:
> >  - sbom-cve-check to version 1.3.1 which mainly fix a potential dead lock.
> 
> Thanks a lot for this update!
> I wouldn't say "potential" as our pipelines were getting stuck on sbom-cve-check-recipe tasks daily.
> 
> Peter

Really don't hesitate to send an email, or to contact me on IRC if you find
any issues with sbom-cve-check. Or you could also create an issue on GitHub.

Sorry about that bug... The bug has existed since the first release of
sbom-cve-check. In the past, I have tested to run multiple instances of
sbom-cve-check in parallel, but you really need to launch most of them at
the exact same time to trigger this issue.

> >  - sbom-cve-check-update-* recipes to the latest revision
> > 
> > Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> > ---
> > Benjamin Robin (Schneider Electric) (3):
> >       python3-sbom-cve-check: Update to version 1.3.1
> >       sbom-cve-check-update-cvelist-native: Update source revision
> >       sbom-cve-check-update-nvd-native: Update source revision
> > 
> >  ...ython3-sbom-cve-check_1.3.0.bb => python3-sbom-cve-check_1.3.1.bb} | 4 ++--
> >  .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb            | 4 ++--
> >  .../sbom-cve-check/sbom-cve-check-update-nvd-native.bb                | 4 ++--
> >  3 files changed, 6 insertions(+), 6 deletions(-)