linux/meta-security.git/recipes-security/nikto, branch wip_kernel Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=wip_kernel 2019-01-06T16:02:28+00:00 nikto: upgrade to 2.1.6 (v2) 2019-01-06T16:02:28+00:00 Scott Ellis scottellis.developer@gmail.com 2018-12-28T21:35:35+00:00 urn:sha1:b4441953a586910c6a30ef1218396d133d6bf14e Source now on github. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> CVE-2018-11652 nikto: arbitray OS command injection via http server field. 2018-07-03T22:30:51+00:00 Nagalakshmi Veeramallu nveeramallu@mvista.com 2018-06-29T10:08:25+00:00 urn:sha1:a1406fe1c88308da81af907d11d21e2c03ee0c01 CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com> Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> nikto: fix SRC_URI for multilib 2015-01-13T20:10:48+00:00 Paul Eggleton paul.eggleton@linux.intel.com 2015-01-13T09:25:30+00:00 urn:sha1:ea8f4661f40613cbe8cebdb2d2586f99cffbd9d6 ${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> nikto: fix launching errors 2015-01-04T05:21:53+00:00 Armin Kuster akuster808@gmail.com 2015-01-01T21:49:21+00:00 urn:sha1:75d2b6620d21ea798ee51c47e1c0cc2507e52b80 add several missing perl package depends so app can launch Signed-off-by: Armin Kuster <akuster808@gmail.com> nikto: fix depends 2015-01-04T05:21:32+00:00 Armin Kuster akuster808@gmail.com 2014-12-27T02:46:44+00:00 urn:sha1:397b35c028ce69e315fef0ebcdf790c9056ebe42 Signed-off-by: Armin Kuster <akuster808@gmail.com> meta-security-1.0-final 2013-07-11T14:37:43+00:00 Andrei Dinu andrei.adrianx.dinu@intel.com 2013-07-11T14:37:43+00:00 urn:sha1:2d0c61a39f5608fbe2180ccfd067d0858aa12092 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Security layer version 1.0 2013-07-10T13:41:44+00:00 Andrei Dinu andrei.adrianx.dinu@intel.com 2013-07-10T13:41:44+00:00 urn:sha1:d54c9d7dadfddcd60ca11be23c5a2946f8a1b385 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>