| Message ID | 20260507-update-sbom-cve-check-v1-2-3c398db78f5f@bootlin.com |
|---|---|
| State | Superseded, archived |
| Headers | show |
| Series | sbom-cve-check: Update to version 1.3.1 and update CVE databases | expand |
Note that I submitted a patch that sets PV and tag checks properly, and fixes upstream checks: https://lists.openembedded.org/g/openembedded-core/message/236714 Can you rebase the version upgrade on it please? Alex On Thu, 7 May 2026 at 18:30, Benjamin Robin via lists.openembedded.org <benjamin.robin=bootlin.com@lists.openembedded.org> wrote: > > Update source revision to cve_2026-05-07_1300Z > > Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com> > --- > .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb > index 338712216590..3763e7f21f7a 100644 > --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb > +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb > @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" > SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" > SBOM_CVE_CHECK_DB_NAME = "cvelist" > > -# 2026-03-19_baseline > -SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7" > +# cve_2026-05-07_1300Z > +SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" > > require sbom-cve-check-update-db.inc > > -- > 2.54.0 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#236602): https://lists.openembedded.org/g/openembedded-core/message/236602 > Mute This Topic: https://lists.openembedded.org/mt/119200170/1686489 > Group Owner: openembedded-core+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [alex.kanavin@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- >
On Fri, 8 May 2026 at 21:03, Alexander Kanavin via lists.openembedded.org <alex.kanavin=gmail.com@lists.openembedded.org> wrote: > > Note that I submitted a patch that sets PV and tag checks properly, > and fixes upstream checks: > > https://lists.openembedded.org/g/openembedded-core/message/236714 > > Can you rebase the version upgrade on it please? NVM, there's an issue Peter pointed out in my patch that I need to fix first. Alex
Hello Alexander, On Friday, May 8, 2026 at 9:42 PM, Alexander Kanavin wrote: > On Fri, 8 May 2026 at 21:03, Alexander Kanavin via > lists.openembedded.org <alex.kanavin=gmail.com@lists.openembedded.org> > wrote: > > > > Note that I submitted a patch that sets PV and tag checks properly, > > and fixes upstream checks: > > > > https://lists.openembedded.org/g/openembedded-core/message/236714 > > > > Can you rebase the version upgrade on it please? > > NVM, there's an issue Peter pointed out in my patch that I need to fix first. In your patch you could also update both recipes to the latest tag. This way, we can drop my patch, this is simpler (for me) :) > > Alex >
diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb index 338712216590..3763e7f21f7a 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -# 2026-03-19_baseline -SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7" +# cve_2026-05-07_1300Z +SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" require sbom-cve-check-update-db.inc
Update source revision to cve_2026-05-07_1300Z Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com> --- .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)