cve-check: change the default feed

Move to the FKIE feed by default, as it is showing better stability
than NVD2. Content of the feed should be the same.

(From OE-Core rev: 10580a6d36aa1366732f9c030345bd4590eb9f74)

Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Marta Rybczynska
2025-03-18 07:54:02 +01:00
committed by Richard Purdie
parent 3552eccf0d
commit 8e11797a56

View File

@@ -32,7 +32,7 @@ CVE_PRODUCT ??= "${BPN}"
CVE_VERSION ??= "${PV}"
# Possible database sources: NVD1, NVD2, FKIE
NVD_DB_VERSION ?= "NVD2"
NVD_DB_VERSION ?= "FKIE"
# Use different file names for each database source, as they synchronize at different moments, so may be slightly different
CVE_CHECK_DB_FILENAME ?= "${@'nvdcve_2-2.db' if d.getVar('NVD_DB_VERSION') == 'NVD2' else 'nvdcve_1-3.db' if d.getVar('NVD_DB_VERSION') == 'NVD1' else 'nvdfkie_1-1.db'}"