linux/meta-security.git, branch rocko

CVE-2018-11652 nikto: arbitray OS command injection via http server field.

2018-07-03T22:33:38+00:00

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu Reviewed-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster

trousers: allow overriding localstatedir mandir sysconfdir

2017-11-06T20:18:28+00:00

It is currently impossible to override localstatedir, mandir and sysconfdir during ./configure, because they are being overriden unconditionally. With this patch it is now possible to set above locations as needed. Signed-off-by: André Draszik Signed-off-by: Armin Kuster

trousers: make initscript more reliable

2017-11-06T20:18:24+00:00

The combination of using start-stop-daemon and pidof is not working reliably in all cases. Sometimes, the tcsd daemon isn't running yet at the time pidof is being invoked. This results in an empty /var/run/tcsd.pid, making it impossible to stop tcsd using the init script. To solve this, one could either add a delay before calling pidof, or alternatively use start-stop-daemon's built-in functionality to achieve the same. Let's do the latter. Signed-off-by: André Draszik Signed-off-by: Armin Kuster

fscryptctl: add v0.1.0

2017-10-24T21:07:49+00:00

fscryptctl is a low-level tool written in C that handles raw keys and manages policies for Linux filesystem encryption [1]. For a tool that presents a higher level interface and manages metadata, key generation, key wrapping, PAM integration, and passphrase hashing, see fscrypt [2]. [1] https://lwn.net/Articles/639427 [2] https://github.com/google/fscrypt Signed-off-by: André Draszik Signed-off-by: Armin Kuster

openscape: fix ptest compile errors and update

2017-10-16T14:56:24+00:00

update to 1.2.15 plus ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/probes/process58/all.sh contained in package openscap-ptest requires /bin/bash, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/xmldiff.pl contained in package openscap-ptest requires /usr/bin/perl, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/nist/test_worker.py contained in package openscap-ptest requires /usr/bin/python2, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] Signed-off-by: Armin Kuster

keynote: update the SRC_URI

2017-10-10T14:26:11+00:00

The old URL can't be available, give the new URL to keynote. The project already moved to: https://sourceforge.net/projects/keynote-2-3/ The different between old and new tarball was: the old tarball contains doc directory, source codes were same. Signed-off-by: Dengke Du Signed-off-by: Armin Kuster

openssl-tpm-engine: add package

2017-10-10T14:26:11+00:00

Signed-off-by: Armin Kuster

tpm2-abrmd: add package

2017-10-10T14:26:11+00:00

Signed-off-by: Armin Kuster

tpm-quote-tools: Add package

2017-10-10T14:26:11+00:00

Signed-off-by: Armin Kuster

pcr-extend: add new package

2017-10-10T14:26:11+00:00

Signed-off-by: Armin Kuster