linux/meta-security.git, branch pyro

CVE-2018-11652 nikto: arbitray OS command injection via http server field.

2018-07-03T22:35:17+00:00

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu Reviewed-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster

apparmor: fix a few build issues

2017-11-06T21:48:40+00:00

configure.ac:8: http://www.gnu.org/software/automake/manual/automake.html#Modernize-AM_005fINIT_005fAUTOMAKE-invocation | configure.ac:8: error: version mismatch. This is Automake 1.15.1, | configure.ac:8: but the definition used by this AM_INIT_AUTOMAKE add aclocal and make: Entering directory '/home/akuster/oss/clean/poky/build/tmp/work/mips64-poky-linux/apparmor/2.11.0-r0/apparmor-2.11.0/binutils' | error: ../libraries/libapparmor//src/.libs/libapparmor.a is missing. Pick one of these possible solutions: remove --disable-static and ERROR: apparmor-2.11.0-r0 do_package_qa: QA Issue: /usr/lib/apparmor/ptest/testsuite/parser/tst/gen-dbus.pl contained in package apparmor-ptest requires /usr/bin/perl, but no providers found in RDEPENDS_apparmor-ptest? [file-rdeps] add perl to ptest RDEPENDS Signed-off-by: Armin Kuster

Apparmor: add apache2 to PACKAGECONF and check for webserver layer

2017-11-06T21:11:44+00:00

Don't want to add layer depends for one package unless needed. Signed-off-by: Armin Kuster

apparmor: Rework such that the utilities are functional by default

2017-11-06T20:33:12+00:00

This introduces a number of changes: - Fix the python PACKAGECONFIG knob - The included python support is python3-based, so use those classes. - When set, make sure to RDEPEND on the python modules the tools use. - Fix the perl PACKAGECONFIG knob - Add two patches so that configure will find perl and then compile will cross-compile the library correctly. - So that we place perl modules in the correct location we need cpan to be inherited. - When disabled, remove the RDEPENDS on perl as the RDEPENDS comes in via inherit. - Default to enabling the python and perl PACKAGECONFIG knobs as the majority of the userspace tools are python3 based, and the few that aren't that nor C based are perl based. - Because of the above we must drop the -python package because it's required for the utilities in the main package. Signed-off-by: Tom Rini Signed-off-by: Armin Kuster

apparmor: fix python packaging issue

2017-11-06T20:32:08+00:00

WARNING: apparmor-2.11.0-r0 do_package: QA Issue: apparmor: Files/directories were installed but not shipped in any package: /usr/lib/python2.7 /usr/lib/python2.7/site-packages /usr/lib/python2.7/site-packages/apparmor-2.11.0-py2.7.egg-info /usr/lib/python2.7/site-packages/apparmor /usr/lib/python2.7/site-packages/apparmor/regex.py use python2 instead of python3 Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster

layer-conf: Use *_FEATURES in LAYERDEPENDS

2017-05-14T14:56:52+00:00

Signed-off-by: Armin Kuster

security-core package group: add few more apps

2017-05-14T14:56:52+00:00

Signed-off-by: Armin Kuster

clamav: fix new build error

2017-05-14T14:56:52+00:00

configure: error: The installed zlib version may contain a security bug. Please upgrade to 1.2.2 or later: http://www.zlib.net. You can omit this check with --disable-zlib-vcheck but DO NOT REPORT any stability issues then! bypass check as our zlib is 1.2.11 Signed-off-by: Armin Kuster

sssd: update SRC_URI as git.fedorahosted.org shut down

2017-05-14T14:56:52+00:00

build fixes too Signed-off-by: Armin Kuster

tpm2: package groups fixes

2017-05-14T14:56:52+00:00

Signed-off-by: Armin Kuster