From: Peter Marko Date: Sun, 24 Aug 2025 14:57:42 +0000 (+0200) Subject: cve-update: decrease update interval to 23 hours X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4a82ae1315b034b6386a82127e1ec8d6f504ec89;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git cve-update: decrease update interval to 23 hours If the job runs every day at the same time, it usually updates only every second day, because it takes non-0 time for DB update and set the timestamp. So it does not take full 24-hours from time when the DB was updated until the next job starts. Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb index 8a3746a9c13..ecdb1ed8fdb 100644 --- a/meta/recipes-core/meta/cve-update-db-native.bb +++ b/meta/recipes-core/meta/cve-update-db-native.bb @@ -14,10 +14,10 @@ deltask do_populate_sysroot NVDCVE_URL ?= "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-" FKIE_URL ?= "https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-" -# CVE database update interval, in seconds. By default: once a day (24*60*60). +# CVE database update interval, in seconds. By default: once a day (23*60*60). # Use 0 to force the update # Use a negative value to skip the update -CVE_DB_UPDATE_INTERVAL ?= "86400" +CVE_DB_UPDATE_INTERVAL ?= "82800" # Timeout for blocking socket operations, such as the connection attempt. CVE_SOCKET_TIMEOUT ?= "60" diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb index 32a14a932b6..83876c74673 100644 --- a/meta/recipes-core/meta/cve-update-nvd2-native.bb +++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb @@ -20,10 +20,10 @@ NVDCVE_URL ?= "https://services.nvd.nist.gov/rest/json/cves/2.0" # then setting this to get higher rate limits. NVDCVE_API_KEY ?= "" -# CVE database update interval, in seconds. By default: once a day (24*60*60). +# CVE database update interval, in seconds. By default: once a day (23*60*60). # Use 0 to force the update # Use a negative value to skip the update -CVE_DB_UPDATE_INTERVAL ?= "86400" +CVE_DB_UPDATE_INTERVAL ?= "82800" # CVE database incremental update age threshold, in seconds. If the database is # older than this threshold, do a full re-download, else, do an incremental