16329 2026-06-22 15:25:56 +0000 [scarthgap] migrate from unreliable NVD API to FKIE git fetch for CVE data 2026-06-25 14:45:19 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core 5.0.22 x86 Multiple NEW Medium+ normal 5.0.22 1 yoann.congal yoann.congal ccasciato meta.mr.watcher meta.watcher paul tim.orling --- --- Yes (doc changes required) oldest_to_newest 105982 0 yoann.congal 2026-06-22 15:25:56 +0000 NVD REST API continues to be unreliable. A migration to the FKIE git based data feed for CVE NVD data might be worth the stable exception. 105985 1 yoann.congal 2026-06-22 22:44:43 +0000 A good starting point: cve-update-db-native: add the fkie source https://git.openembedded.org/openembedded-core/commit/?id=f6253ac8189db09fbe87141aca1733cb37a4d78f That was later patched with: https://git.openembedded.org/openembedded-core/log/?qt=grep&q=FKIE 106009 2 tim.orling 2026-06-25 14:45:19 +0000 This probably needs a proposal sent to architecture and oe-core mailing lists, since we would be looking for an exception to normal stable process.