opencve/opencve-docker

CVEs in NVD and openCVE out of sync - manual re-import?

dagobertdebug opened this issue · 2 comments

dagobertdebug commented

Hello, because my instance was not working for some time and I started again from a recent snapshot, my instance missed some CVEs.

image
image

docker exec -it webserver opencve import-data leads to [*] Import already done.

Is there a way to re-import the data manually? What would be the commands to have NVD and openCVE in sync again?

Thanks!

ncrocfer commented

Hello,

Unfortunately no, the import-data command is used for an initial import, then the Celery periodic tasks update the list of CVE. These tasks fetch the modified file of the NVD Data Feed.

But this file only keep ~1200 last modified CVEs, so if you don't monitor your OpenCVE instance for a long time you will lose data.

Currently I have no other ideas than reinstalling your OpenCVE instance. You can also create a pull-request to support this feature, I think it's not really complicated to do.

dagobertdebug commented

Ok, thanks! I think in my case one could live with the diff of 165 CVEs. But, of course, we are all perfectionists :)

Is there a way to re-install without losing the data in the postgres database (e.g. users, subscribed vendors/products, reports)? Or a way to restore the postgres data in a fresh install?

Thanks!