Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=rocko 2018-07-03T22:33:38+00:00 2018-07-03T22:33:38+00:00 Nagalakshmi Veeramallu nveeramallu@mvista.com 2018-06-29T10:08:25+00:00 urn:sha1:74860b2b61afd033fba130044ae66567ead57aaf CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com> Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> 2017-10-24T21:07:49+00:00 André Draszik adraszik@tycoint.com 2017-10-23T15:51:19+00:00 urn:sha1:ebed429d201db47cdb9c18694c9d40ebe34be05b fscryptctl is a low-level tool written in C that handles raw keys and manages policies for Linux filesystem encryption [1]. For a tool that presents a higher level interface and manages metadata, key generation, key wrapping, PAM integration, and passphrase hashing, see fscrypt [2]. [1] https://lwn.net/Articles/639427 [2] https://github.com/google/fscrypt Signed-off-by: André Draszik <adraszik@tycoint.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-10-10T14:26:11+00:00 Dengke Du dengke.du@windriver.com 2017-10-09T02:24:26+00:00 urn:sha1:01ad70e824a504711ce83b777e31a15797983831 The old URL can't be available, give the new URL to keynote. The project already moved to: https://sourceforge.net/projects/keynote-2-3/ The different between old and new tarball was: the old tarball contains doc directory, source codes were same. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-10-02T14:49:23+00:00 Armin Kuster akuster808@gmail.com 2017-10-01T16:02:52+00:00 urn:sha1:24f3e574ab8994034a579b506a6a4fa120a4ec3a WARNING: bastille-3.2.1-r0 do_package_qa: QA Issue: Symlink /usr/sbin/UndoBastille in bastille points to TMPDIR [symlink-to-sysroot] Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-10-02T14:49:23+00:00 Armin Kuster akuster808@gmail.com 2017-10-01T15:22:01+00:00 urn:sha1:6f5b7b303fcd3f26d3571d8c6045c0b036fc8568 libhtp updated in // as suricata contains the sources Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-10-02T14:49:23+00:00 Armin Kuster akuster808@gmail.com 2017-10-01T15:00:54+00:00 urn:sha1:1e0d5ee5bf1a2830f9fd19f0eda985cd8a62dd85 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-10-02T14:49:23+00:00 Armin Kuster akuster808@gmail.com 2017-10-01T14:59:40+00:00 urn:sha1:cb8f175108061c4275e5d7480cd61fbcdb071ead Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-30T18:44:55+00:00 Armin Kuster akuster808@gmail.com 2017-09-29T02:48:22+00:00 urn:sha1:d34afdfbf5e0567af9cad86805c48d02b7e8d573 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-15T15:01:07+00:00 Jackie Huang jackie.huang@windriver.com 2017-09-15T09:17:20+00:00 urn:sha1:e180062c708483a55390a6adc1efd9e60d2681c5 Use '${COMMON_LICENSE_DIR}/MIT' for MIT License to fix the warning: | WARNING: packagegroup-core-security do_populate_lic: ${COREBASE}/LICENSE is not a valid license file, please use '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM. This will become an error in the future Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2017-09-15T15:01:07+00:00 Jackie Huang jackie.huang@windriver.com 2017-09-14T05:35:35+00:00 urn:sha1:738dad9d91b523bf56ba708f8ac214a7e85fa05a Add LDFLAGS variable to fix QA issue for GNU_HASH: | ERROR: samhain-client-4.2.2-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '/builddir/usr/sbin/samhain_setpwd' [ldflags] Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>