13680 2019-12-04 23:14:34 +0000 New cve-check made download problems fatal 2020-04-02 06:12:18 +0000 1 1 7 Build System, Metadata & Runtime OE-Core devtools / tool chain unspecified All Multiple RESOLVED FIXED cve-check.bbclass Medium+ normal 3.1 M4 1 bunk chee.yang.lee chee.yang.lee meta.mr.watcher meta.watcher randy.macleod ross.burton tim.orling --- --- Don't know oldest_to_newest 85718 0 bunk 2019-12-04 23:14:34 +0000 Different from the old cve-check, the new one made download errors fatal. There might be situations where this makes sense, but this makes it impossible to run the CVE checking as part of a normal automated build since this adds a dependency on data at a 3rd party location that might be temporarily or permanently unavailable. For everything else static premirror contents solves this problem, but CVE data is not static. Testcase: Build with INHERIT += "cve-check" with networking disabled (everything except CVE data was already downloaded). Old cve-check: WARNING: cve-check-tool-native-5.6.4-r0 do_populate_cve_db: Error in executing cve-check-update WARNING: cve-check-tool-native-5.6.4-r0 do_populate_cve_db: Failed to update cve-check-tool database, CVEs won't be checked Relevant part from the new cve-check: ERROR: cve-update-db-native-1.0-r0 do_populate_cve_db: Error executing a python function in exec_python_func() autogenerated: The stack trace of python calls that resulted in this exception/failure was: ... 0065: if proxy_opener: 0066: response = proxy_opener.open(meta_url) 0067: else: 0068: req = urllib.request.Request(meta_url) *** 0069: response = urllib.request.urlopen(req) ... Exception: urllib.error.URLError: <urlopen error [Errno -2] Name or service not known> ERROR: cve-update-db-native-1.0-r0 do_populate_cve_db: <urlopen error [Errno -2] Name or service not known> ERROR: cve-update-db-native-1.0-r0 do_populate_cve_db: Function failed: do_populate_cve_db 86859 1 chee.yang.lee 2020-03-30 02:30:29 +0000 this should fix the problem http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=117a6dac73b7642f56e9e51a890748679d6dbab4