diff mbox series

[2/3] sbom-cve-check-update-cvelist-native: Update source revision

Message ID 20260507-update-sbom-cve-check-v1-2-3c398db78f5f@bootlin.com
State Superseded, archived
Headers show
Series sbom-cve-check: Update to version 1.3.1 and update CVE databases | expand

Commit Message

Benjamin Robin (Schneider Electric) May 7, 2026, 4:30 p.m. UTC
Update source revision to cve_2026-05-07_1300Z

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
---
 .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb            | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comments

Alexander Kanavin May 8, 2026, 7:03 p.m. UTC | #1
Note that I submitted a patch that sets PV and tag checks properly,
and fixes upstream checks:

https://lists.openembedded.org/g/openembedded-core/message/236714

Can you rebase the version upgrade on it please?

Alex

On Thu, 7 May 2026 at 18:30, Benjamin Robin via lists.openembedded.org
<benjamin.robin=bootlin.com@lists.openembedded.org> wrote:
>
> Update source revision to cve_2026-05-07_1300Z
>
> Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> ---
>  .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb            | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
> index 338712216590..3763e7f21f7a 100644
> --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
> +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
> @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5"
>  SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix="
>  SBOM_CVE_CHECK_DB_NAME = "cvelist"
>
> -# 2026-03-19_baseline
> -SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7"
> +# cve_2026-05-07_1300Z
> +SRCREV = "dd0e93c75034d0167498174c886a56729edc44de"
>
>  require sbom-cve-check-update-db.inc
>
> --
> 2.54.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#236602): https://lists.openembedded.org/g/openembedded-core/message/236602
> Mute This Topic: https://lists.openembedded.org/mt/119200170/1686489
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Alexander Kanavin May 8, 2026, 7:42 p.m. UTC | #2
On Fri, 8 May 2026 at 21:03, Alexander Kanavin via
lists.openembedded.org <alex.kanavin=gmail.com@lists.openembedded.org>
wrote:
>
> Note that I submitted a patch that sets PV and tag checks properly,
> and fixes upstream checks:
>
> https://lists.openembedded.org/g/openembedded-core/message/236714
>
> Can you rebase the version upgrade on it please?

NVM, there's an issue Peter pointed out in my patch that I need to fix first.

Alex
Benjamin Robin (Schneider Electric) May 9, 2026, 9:05 a.m. UTC | #3
Hello Alexander,

On Friday, May 8, 2026 at 9:42 PM, Alexander Kanavin wrote:
> On Fri, 8 May 2026 at 21:03, Alexander Kanavin via
> lists.openembedded.org <alex.kanavin=gmail.com@lists.openembedded.org>
> wrote:
> >
> > Note that I submitted a patch that sets PV and tag checks properly,
> > and fixes upstream checks:
> >
> > https://lists.openembedded.org/g/openembedded-core/message/236714
> >
> > Can you rebase the version upgrade on it please?
> 
> NVM, there's an issue Peter pointed out in my patch that I need to fix first.

In your patch you could also update both recipes to the latest tag.
This way, we can drop my patch, this is simpler (for me) :)

> 
> Alex
>
diff mbox series

Patch

diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
index 338712216590..3763e7f21f7a 100644
--- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
+++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb
@@ -6,7 +6,7 @@  HOMEPAGE = "https://github.com/CVEProject/cvelistV5"
 SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix="
 SBOM_CVE_CHECK_DB_NAME = "cvelist"
 
-# 2026-03-19_baseline
-SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7"
+# cve_2026-05-07_1300Z
+SRCREV = "dd0e93c75034d0167498174c886a56729edc44de"
 
 require sbom-cve-check-update-db.inc