diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-08-24 16:57:42 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-08-28 10:47:08 +0100 |
| commit | c291b03a40a5d5e8dad68bbf34f0b46525bed610 (patch) | |
| tree | a557d7499fa55f46a90cd237e9f4fcbeefe0dbb4 | |
| parent | 0844840c7d8e9e8ecf7c87662cb1ff8941b79c4f (diff) | |
| download | poky-c291b03a40a5d5e8dad68bbf34f0b46525bed610.tar.gz | |
cve-update: decrease update interval to 23 hours
If the job runs every day at the same time, it usually updates only
every second day, because it takes non-0 time for DB update and set the
timestamp. So it does not take full 24-hours from time when the DB was
updated until the next job starts.
(From OE-Core rev: 4a82ae1315b034b6386a82127e1ec8d6f504ec89)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-core/meta/cve-update-db-native.bb | 4 | ||||
| -rw-r--r-- | meta/recipes-core/meta/cve-update-nvd2-native.bb | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb index 8a3746a9c1..ecdb1ed8fd 100644 --- a/meta/recipes-core/meta/cve-update-db-native.bb +++ b/meta/recipes-core/meta/cve-update-db-native.bb | |||
| @@ -14,10 +14,10 @@ deltask do_populate_sysroot | |||
| 14 | NVDCVE_URL ?= "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-" | 14 | NVDCVE_URL ?= "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-" |
| 15 | FKIE_URL ?= "https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-" | 15 | FKIE_URL ?= "https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-" |
| 16 | 16 | ||
| 17 | # CVE database update interval, in seconds. By default: once a day (24*60*60). | 17 | # CVE database update interval, in seconds. By default: once a day (23*60*60). |
| 18 | # Use 0 to force the update | 18 | # Use 0 to force the update |
| 19 | # Use a negative value to skip the update | 19 | # Use a negative value to skip the update |
| 20 | CVE_DB_UPDATE_INTERVAL ?= "86400" | 20 | CVE_DB_UPDATE_INTERVAL ?= "82800" |
| 21 | 21 | ||
| 22 | # Timeout for blocking socket operations, such as the connection attempt. | 22 | # Timeout for blocking socket operations, such as the connection attempt. |
| 23 | CVE_SOCKET_TIMEOUT ?= "60" | 23 | CVE_SOCKET_TIMEOUT ?= "60" |
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb index 32a14a932b..83876c7467 100644 --- a/meta/recipes-core/meta/cve-update-nvd2-native.bb +++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb | |||
| @@ -20,10 +20,10 @@ NVDCVE_URL ?= "https://services.nvd.nist.gov/rest/json/cves/2.0" | |||
| 20 | # then setting this to get higher rate limits. | 20 | # then setting this to get higher rate limits. |
| 21 | NVDCVE_API_KEY ?= "" | 21 | NVDCVE_API_KEY ?= "" |
| 22 | 22 | ||
| 23 | # CVE database update interval, in seconds. By default: once a day (24*60*60). | 23 | # CVE database update interval, in seconds. By default: once a day (23*60*60). |
| 24 | # Use 0 to force the update | 24 | # Use 0 to force the update |
| 25 | # Use a negative value to skip the update | 25 | # Use a negative value to skip the update |
| 26 | CVE_DB_UPDATE_INTERVAL ?= "86400" | 26 | CVE_DB_UPDATE_INTERVAL ?= "82800" |
| 27 | 27 | ||
| 28 | # CVE database incremental update age threshold, in seconds. If the database is | 28 | # CVE database incremental update age threshold, in seconds. If the database is |
| 29 | # older than this threshold, do a full re-download, else, do an incremental | 29 | # older than this threshold, do a full re-download, else, do an incremental |