15239 2023-10-17 09:12:11 +0000 cve-check corruption of cvss3 data 2024-08-08 15:00:28 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core 4.2.3 x86 Multiple RESOLVED FIXED Medium+ normal 5.1 M2 1 rybczynska rybczynska meta.mr.watcher meta.watcher randy.macleod richard.purdie tim.orling yoann.congal --- --- Yes (doc changes required) oldest_to_newest 96715 0 rybczynska 2023-10-17 09:12:11 +0000 https://lists.yoctoproject.org/g/poky/message/13173 brings a report from a user showing a database with cvss3 all set to 0.0. A complete re-download of the database fixed the issue. It might be related to the fix https://git.openembedded.org/openembedded-core/commit/meta/recipes-core/meta/cve-update-nvd2-native.bb?id=61a5857efdcc0f49c69c0deb24fce99007aeef19 The database seems to be never updated after the fix applied. To be verified. 98660 1 yoann.congal 2024-03-28 15:01:22 +0000 Maybe fixed by "cve-update-nvd2-native: Fix CVE configuration update" [0]. And "cve-update-nvd2-native: Add an age threshold for incremental update"[1] may help to force the redownload without removing a file in DL_DIR. [0]: https://git.yoctoproject.org/poky/commit/?id=c698cf6723f344ddb1a755b4a2a0996aefa851f4 [1]: https://git.yoctoproject.org/poky/commit/?id=19f27037b2b785673c8f68f19ea783856f732e4d 99521 2 randy.macleod 2024-08-08 15:00:28 +0000 Closing based on Yoann's comment and lack of any follow-up. Reopen if needed.