linux/meta-openembedded.git/meta-oe/recipes-security, branch styhead

nmap: Fix off-by-one overflow in the IP protocol table.

2024-11-19T21:13:29+00:00

Add patch to fix core dumped error when using "nmap -sO" Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 6a5b26d467c692c3537aaebf9bd088736dc93dc4) Signed-off-by: Armin Kuster

audit: fix build when systemd is enabled.

2024-11-19T21:13:24+00:00

Signed-off-by: Armin Kuster Signed-off-by: Khem Raj (cherry picked from commit e68145b00260fc380242cd67579068427e501c10) Signed-off-by: Armin Kuster

softhsm: add destroyed global access prevention patch

2024-11-19T21:13:24+00:00

Currently softhsm will try to access deleted obejcts due to the order of atexit handler implementations. Add a patch which adds a global variable to track whether objects are deleted and prevents access if this is the case. This fixes a failure with the signing.bbclass where when signing multiple fitimage configurations the second signing operation will lead to a segfault. Signed-off-by: Rouven Czerwinski Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

audit: Fix CVE_PRODUCT

2024-11-19T21:13:21+00:00

Fix "audit" set in CVE_PRODUCT to "linux:audit" to detect only vulnerabilities where the vendor is "linux". Currently, CVE_PRODUCT also detects vulnerabilities where the vendor is "visionsoft", which are unrelated to the "audit" in this recipe. https://www.opencve.io/cve?vendor=visionsoft&product=audit In addition, all the vulnerabilities currently detected in "audit" have the vendor of "visionsoft" or "linux". Therefore, fix "audit" set in CVE_PRODUCT to "linux:audit". Signed-off-by: Shinji Matsunaga Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

usbguard: Link with libatomic on rv32

2024-09-17T14:50:22+00:00

Provides needed atomic intrinsics that compiler needs. Signed-off-by: Khem Raj

nmap: depend on libpcre2 not libpcre

2024-09-10T16:34:15+00:00

* switched to libpcre2 in: https://github.com/nmap/nmap/commit/828ab48764b82d0226e860c73c5dac5b11f77385 * in builds hwere libpcre2 isn't pulled by some other dependency it was failing with: | service_scan.h:74:10: fatal error: pcre2.h: No such file or directory | 74 | #include | | ^~~~~~~~~| Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

nmap: Upgrade to 7.95

2024-09-04T22:35:46+00:00

License-Update: Use full file for checksum ( COPYING -> LICENSE ) Use system libpcre Drop py3 support patches, its default now Signed-off-by: Khem Raj

bubblewrap: update 0.9.0 -> 0.10.0

2024-08-21T15:45:47+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj

audit: upgrade 4.0.1 -> 4.0.2

2024-08-14T15:15:18+00:00

ChangeLog: - Fix musl C builds - Many code cleanups - Use atomic variables if available for signal related flags - Dont rotate audit logs when auditd is in debug mode - Fix a couple memory leaks on error paths - Correct output when displaying rules with exe/path/dir - Fix auparse lookup test to not use the system libaupaurse - Improve auparse metrics - Update auparse normalizer for recent syscalls - Make status report uniform Drop 0001-Replace-__attribute_malloc__-with-__attribute__-__ma.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

usbguard: upgrade 1.1.2 -> 1.1.3

2024-06-11T22:40:17+00:00

Drop patch 0001-include-missing-cstdint.patch because it was merged upstream. See this commit in usbguard: * 22b1e08 Fix build for GCC 13 + make GitHub Actions cover build with GCC 13 (#586) Signed-off-by: Christophe Vu-Brugier Signed-off-by: Khem Raj