linux/meta-security.git - Mirror of git.yoctoproject.org/meta-security.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	CVE-2018-11652 nikto: arbitray OS command injection via http server field.	Nagalakshmi Veeramallu	2018-07-03	2	-1/+108
\| \| \| \| \| \| \| \| \| \|	CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com> Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
*	nikto: fix SRC_URI for multilib	Paul Eggleton	2015-01-13	1	-1/+1
\| \| \| \| \| \| \| \|	${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
*	nikto: fix launching errors	Armin Kuster	2015-01-03	1	-1/+7
\| \| \| \| \| \|	add several missing perl package depends so app can launch Signed-off-by: Armin Kuster <akuster808@gmail.com>
*	nikto: fix depends	Armin Kuster	2015-01-03	1	-1/+1
\| \| \| \|	Signed-off-by: Armin Kuster <akuster808@gmail.com>
*	meta-security-1.0-final	Andrei Dinu	2013-07-11	1	-79/+79
\| \| \| \|	Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
*	Security layer version 1.0	Andrei Dinu	2013-07-10	2	-0/+137
	Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>