Re: [OE-core][PATCH] cve-check: add support for cvss v4.0

[Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>]

On Tue, Oct 22, 2024 at 11:27:50PM +0200, Peter Marko via lists.openembedded.org wrote:
> From: Peter Marko <peter.marko@siemens.com>
> 
> https://nvd.nist.gov/general/news/cvss-v4-0-official-support
> 
> CVSS v4.0 was released in November 2023
> NVD announced support for it in June 2024
> 
> Current stats are:
> * cvss v4 provided, but also v3, so cve-check showed a value
> sqlite> select count(*) from nvd where scorev4 != 0.0 and scorev3 != 0.0;
> 2069
> * only cvss v4 provided, so cve-check did not show any
> sqlite> select count(*) from nvd where scorev4 != 0.0 and scorev3 = 0.0;
> 260
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>

Hi Peter,

Thanks for your patch, but it seems it does not apply cleanly on master.
I got the following error:

error: patch failed: meta/classes/cve-check.bbclass:534

Could you rebase your patch on master please ?

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com