aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2016-05-25clamav: update package to 0.99.2Armin Kuster
remove unused patches. remove merged patches move files to /file for easier maintenance Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-25clamav: Fix new QA warningArmin Kuster
NOTE:meta-security/recipes-security/clamav/clamav_0.99.1.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-25sssd: Fix new QA warningArmin Kuster
NOTE:meta-security/recipes-security/sssd/sssd_1.13.3.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23sssd: add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23libdhash: add packageArmin Kuster
required by sssd Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23clamav: fix lib version mismatchArmin Kuster
drop lib version in package name drop insane and remove broken symlink Use LEAD_SONAME Don't hard code lib version in tasks Use native chrpath not the host provided version Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23clamav: update to 0.99.1Armin Kuster
removed debian patches brut force remove rpaths Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23suricata: update package to 3.0.1Armin Kuster
- fixes for multiple stability issues - many memory leak fixes - Hyperscan MPM support (experimental) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23nmap: update to 7.12Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11paxctl: fix compile issue.Armin Kuster
use CC from build not host via EXTRA_OEMAKE thanks khem this fixes the below error. WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: /sbin/paxctl contained in package paxctl requires libc.so.6(GLIBC_2.3.4)(64bit), but no providers found in RDEPENDS_paxctl? [file-rdeps] minor recipe cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11nmap: update to 7.11Armin Kuster
https://nmap.org/changelog.html Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14samhain-client: Erorr FixLi Xin
The Error is as following: # /usr/sbin/samhain -t init -p info ...... Segmentation fault # echo $? 139 Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14tripwire: Fix build issue for armebArmin Kuster
add config parama for armeb Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14suricata: update to 3.0Armin Kuster
removed patch no longer needded. LIC_FILES_CHKSUM changed do to copyright date updates. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14nmap: update to version 7.0.1Armin Kuster
fixed WARNING: QA Issue: /usr/bin/ndiff_nmap contained in package nmap requires /usr/bin/python2.7, but no providers found in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17suricata: package update to 2.0.11Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17samhain-client: update to 4.1.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17Samhain: package update to 4.1.2Armin Kuster
4.1.1 Changes: - Fix for broken libwrap support. - Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems. - Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant. - Fix for timezone offset calculation on month rollover for timezones west of GMT. 4.1.2 Changes: - Fix for broken rpm / rpm-light makefile targets. - Fix for the failure to detect open UDP ports sometimes. - Fix for reporting file changes with the wrong policy if both inotify is used and the file change occurs during a configuration reload. - New configure options --enable-posix-acl and --enable-selinux to turn the soft failure (no support for checking compiled in) into a hard failure if required headers/libraries are missing for this feature. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17nmap: package update to 7.0Armin Kuster
removed integrated patch Changed LIC_FILES_CHKSUM from generic OE to a file within the package sources. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30suricata: update to version 2.0.9Armin Kuster
Changes Bug #1558: stream: retransmission not detected (2.0.x) Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438 Bug #1564: defrag: evasion issue Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x) Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names Bug #1490: http_host payload validation erroring on uppercase PCRE metacharacters Bug #1501: 2.0.x backport: Add HUP coverage to output json-log Bug #1510: 2.0.x: address var parsing issue Bug #1513: stream_size <= and >= modifiers function as < and > (equality is not functional) (2.0.x) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30libhtp: update to version 0.5.18Armin Kuster
Changes This is a minor bug-fix release: - Fixed [#120] Trigger request line parsing on incomplete request [Victor Julien] - Fixed [#119] Fix uninitialized htp_tx_t::is_last value in in htp_tx_res_process_body_data_ex() [Fedor Sakharov] - Fixed [#118] Coverity-identified missing break in switch [Sam Baskinger] - Fixed [#117] Coverity-identified issue of not checking malloc() return value [Sam Baskinger] - Fixed [#116] Fix coverity-identified leaked file descriptors in unit test [Sam Baskinger] - Fixed [#113] fix pkgconfig include dir [Eric Leblond] - Fixed [#111] Connect plain http [Victor Julien] - Fixed [#105] Do not invoke callbacks in htp_req_run_hook_body_data() when there is no tx running. [Sam Baskinger] - Fixed [#104] Modifiying HTTP methods to be rfc3253 compliant [Andreas Moe] - Fixed [#103] Fixes [Victor Julien] - Fixed [#101] Make including the autoconf config header safer [Brian Rectanus] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30ccs-tools: update to 1.8.4Armin Kuster
change LIC_CHKSUM to COPYING.css where the license statement resides. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30Fix an error when samhain -t checkLi Xin
Fixes an error when "samhain -t check" is executed. The error is like this: 'ERROR: msg=<Record with bad version number in file signature database>, subroutine=<sh_dbIO_getdataent>, path=<(null)>' Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30samhain: update to 4.1.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08clamav: Update source mirrorIoan-Adrian Ratiu
The source archive was deleted from the debian mirror; get it from launchpad for now Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08nmap: fix build issue.Armin Kuster
ncat/ncat_lua.c:174: undefined reference to `lua_remove' ncat/ncat_lua.c:167: undefined reference to `lua_insert' use internal lua support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08libseccomp: update to latestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08paxctl: add new recipeJagadeesh Krishnanjanappa
paxctl is a tool that allows PaX flags to be modified on a per-binary basis. PaX is part of common security-enhancing kernel patches and secure distributions, such as GrSecurity or Adamantix and Hardened Gen- too, respectively. Your system needs to be running a properly patched and configured kernel for this program to have any effect. Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08samhain-client: update to 4.0.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-31tripwire: Fix path to nano in default twcfg.txtHaris Okanovic
Nano is installed under /usr/bin/, not /bin/. Installed Tripwire on a Fido image and successfully ran `tripwire --update` to invoke text editor. Signed-off-by: Haris Okanovic <haris.okanovic@ni.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-11Corrects a typing error.Thomas Perrot
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20samhain-server: fix build warnBian Naimeng
WARNING: QA Issue: /etc/init.d/samhain-server_samhain-server contained in package samhain-server requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps] Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25scapy: add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25aircrack-ng: add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25suricata: package update to 2.0.8Armin Kuster
includes security fix CVE-2015-0971 include nss and nspr to build Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25libhtp: update to use suricata 2.0.8Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-10suricata: Fix QA warningsArmin Kuster
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps] WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15libseccomp: add testsArmin Kuster
update busybox for extend head option for test suite remove seq -f option as it is not supported buy busybox Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15libseccomp: add ppc supportArmin Kuster
backport ppc patches Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15samhain: update client and server to 3.1.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> fix missing bash depends in server recipe
2015-04-09clamav: fix ncurses configure optionHugo Vasconcelos Saldanha
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09libmspack: update to version 0.5Hugo Vasconcelos Saldanha
SRC_URI to version 0.4 was broken. Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20suricata: update to 2.0.7Armin Kuster
this includes CVE-2015-0928 moved patches and files to more generic dir name Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20libseccomp: update to version 2.2.0Armin Kuster
License is now LGPL sources come from github now dropped patches since alt solutions included now. Changes in the 2.2.0 release include: * Migrated the build system to autotools * Added support for the aarch64 architecture * Added support for the mips, mips64, and mips64n32 architectures * Added support for the new seccomp() syscall and thread sync * Added Python bindings * Updated the internal syscall tables to Linux v3.19 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14tripwire: Add aarch64 support to config.subArmin Kuster
this fixes a build issue on arm64. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14nmap: add aarch64 config supportArmin Kuster
allow nmap to build for arm64 qemu machine. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13libcap-ng: remove from layerArmin Kuster
this package is not in meta-oe Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13suricata: update to 2.0.6Armin Kuster
fix new build issues with pcap-config cleanup configure selection Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13suricata: add new ids and pds engine for meta-securityArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13libhtp: add support lib for suricataArmin Kuster
include common inc file Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-25 04:19:00 +0000