Commit Graph

9 Commits

Author SHA1 Message Date
Armin Kuster d1d0b2a6d7 recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-03 14:15:07 -08:00
Armin Kuster b6d0148899 nikito: Update common-licenses references to match new names
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-23 20:34:51 -08:00
Scott Ellis b4441953a5 nikto: upgrade to 2.1.6 (v2)
Source now on github.

Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-06 08:02:28 -08:00
Nagalakshmi Veeramallu a1406fe1c8 CVE-2018-11652 nikto: arbitray OS command injection via http server field.
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers
to inject arbitrary OS commands via the Server field in an HTTP response header,
 which is directly injected into a CSV report.

Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com>
Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2018-07-03 15:30:51 -07:00
Paul Eggleton ea8f4661f4 nikto: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:48 -08:00
Armin Kuster 75d2b6620d nikto: fix launching errors
add several missing perl package depends so app can launch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:53 -08:00
Armin Kuster 397b35c028 nikto: fix depends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:32 -08:00
Andrei Dinu 2d0c61a39f meta-security-1.0-final
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-11 17:37:43 +03:00
Andrei Dinu d54c9d7dad Security layer version 1.0
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-10 16:41:44 +03:00