1690 Commits

Author SHA1 Message Date
Armin Kuster
d3ec54611d suricata: update package to 3.0.1
- fixes for multiple stability issues
- many memory leak fixes
- Hyperscan MPM support (experimental)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:02:48 -07:00
Armin Kuster
6b96adf479 nmap: update to 7.12
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:02:42 -07:00
Armin Kuster
f6aaf45604 paxctl: fix compile issue.
use CC from build not host via EXTRA_OEMAKE

thanks khem

this fixes the below error.
WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: /sbin/paxctl contained in package paxctl requires libc.so.6(GLIBC_2.3.4)(64bit), but no providers found in RDEPENDS_paxctl? [file-rdeps]

minor recipe cleanup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11 07:31:28 -07:00
Armin Kuster
edb340e81d nmap: update to 7.11
https://nmap.org/changelog.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11 07:31:28 -07:00
Li Xin
e55b217bfa samhain-client: Erorr Fix
The Error is as following:
 # /usr/sbin/samhain -t init -p info
 ......
 Segmentation fault
 # echo $?
 139

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
ab117a8642 tripwire: Fix build issue for armeb
add config parama for armeb

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
162653fd27 suricata: update to 3.0
removed patch no longer needded.
LIC_FILES_CHKSUM changed do to copyright date updates.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
86ae983fb2 nmap: update to version 7.0.1
fixed WARNING: QA Issue: /usr/bin/ndiff_nmap contained in package nmap requires /usr/bin/python2.7, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:32 -07:00
Thomas Perrot
631693cc76 linux-yocto_3.14: remove bbappend from master
Remove recipe for the kernel 3.14 from master branch, to fix a build error.
ERROR: No recipes available for: meta-security/recipes-kernel/linux/linux-yocto_3.14.bbappend

Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:42 -08:00
Armin Kuster
40741acf5c suricata: package update to 2.0.11
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
f776c61311 samhain-client: update to 4.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
623f5ed922 Samhain: package update to 4.1.2
4.1.1 Changes:
 - Fix for broken libwrap support.
 - Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems.
 - Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant.
 - Fix for timezone offset calculation on month rollover for timezones west of GMT.

4.1.2 Changes:
 - Fix for broken rpm / rpm-light makefile targets.
 - Fix for the failure to detect open UDP ports sometimes.
 - Fix for reporting file changes with the wrong policy if both inotify is
   used and the file change occurs during a configuration reload.
 - New configure options --enable-posix-acl and --enable-selinux to turn the
   soft failure (no support for checking compiled in) into a hard failure
   if required headers/libraries are missing for this feature.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
9eba881355 nmap: package update to 7.0
removed integrated patch
Changed LIC_FILES_CHKSUM from generic OE to a file within the package
sources.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:37:58 -08:00
Armin Kuster
41bac8038a suricata: update to version 2.0.9
Changes

Bug #1558: stream: retransmission not detected (2.0.x)
Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438
Bug #1564: defrag: evasion issue
Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x)
Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names
Bug #1490: http_host payload validation erroring on uppercase PCRE
metacharacters
Bug #1501: 2.0.x backport: Add HUP coverage to output json-log
Bug #1510: 2.0.x: address var parsing issue
Bug #1513: stream_size <= and >= modifiers function as < and > (equality
is not functional) (2.0.x)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:59:06 -07:00
Armin Kuster
81d33f70de libhtp: update to version 0.5.18
Changes

This is a minor bug-fix release:

- Fixed [#120] Trigger request line parsing on
incomplete request [Victor Julien]

- Fixed [#119] Fix uninitialized htp_tx_t::is_last value
in in htp_tx_res_process_body_data_ex() [Fedor Sakharov]

- Fixed [#118] Coverity-identified missing break in switch [Sam Baskinger]

- Fixed [#117] Coverity-identified issue of not checking
malloc() return value [Sam Baskinger]

- Fixed [#116] Fix coverity-identified leaked file descriptors
in unit test [Sam Baskinger]

- Fixed [#113] fix pkgconfig include dir [Eric Leblond]

- Fixed [#111] Connect plain http [Victor Julien]

- Fixed [#105] Do not invoke callbacks in htp_req_run_hook_body_data()
when there is no tx running. [Sam Baskinger]

- Fixed [#104] Modifiying HTTP methods to be rfc3253 compliant [Andreas Moe]

- Fixed [#103] Fixes [Victor Julien]

- Fixed [#101] Make including the autoconf config header safer [Brian Rectanus]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:58:58 -07:00
Armin Kuster
e3e0178af6 ccs-tools: update to 1.8.4
change LIC_CHKSUM to COPYING.css where the license statement resides.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:43 -07:00
Armin Kuster
b0c1edfe23 ccs-patch: Add ccs kernel patches
add 4.1 kernel support for css

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:30 -07:00
Li Xin
36feac0d9d Fix an error when samhain -t check
Fixes an error when "samhain -t check" is executed.
The error is like this:
'ERROR: msg=<Record with bad version number in file signature database>,
subroutine=<sh_dbIO_getdataent>, path=<(null)>'

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:15 -07:00
Armin Kuster
d539506f78 samhain: update to 4.1.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:55:52 -07:00
Ioan-Adrian Ratiu
b7ceefc96d clamav: Update source mirror
The source archive was deleted from the debian mirror; get it from
launchpad for now

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:25:08 -07:00
Armin Kuster
bd30c8d843 nmap: fix build issue.
ncat/ncat_lua.c:174: undefined reference to `lua_remove'

ncat/ncat_lua.c:167: undefined reference to `lua_insert'

use internal lua support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:47 -07:00
Armin Kuster
e16a42bf6b libseccomp: update to latest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:36 -07:00
Jagadeesh Krishnanjanappa
5690552103 paxctl: add new recipe
paxctl  is  a tool that allows PaX flags to be modified on a per-binary
basis.  PaX is part of common  security-enhancing  kernel  patches  and
secure distributions, such as GrSecurity or Adamantix and Hardened Gen-
too, respectively.  Your system needs to be running a properly  patched
and configured kernel for this program to have any effect.

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:27 -07:00
Armin Kuster
e3f2b3ba8c samhain-client: update to 4.0.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:19 -07:00
Haris Okanovic
6cdf3402be tripwire: Fix path to nano in default twcfg.txt
Nano is installed under /usr/bin/, not /bin/.

Installed Tripwire on a Fido image and successfully ran
`tripwire --update` to invoke text editor.

Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-31 15:41:17 -07:00
Thomas Perrot
5ec82eccd8 Corrects a typing error.
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-11 15:06:59 +05:30
Bian Naimeng
7ce4069b32 samhain-server: fix build warn
WARNING: QA Issue: /etc/init.d/samhain-server_samhain-server contained in package samhain-server requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:42 -07:00
Armin Kuster
8f9b5f3f52 afflib: fix new build issue
cleanup PACKAGECONFIG

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:18 -07:00
Armin Kuster
fad79e6fe8 libewf: update hashs
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:17 -07:00
Armin Kuster
c4b6269ec7 scapy: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
da6d34655d python-pycrypto: add new package
adding crypto package for use by scampy.

I will remove once it is moved to meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
e257382625 aircrack-ng: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
c01a103d27 libewf: update to version 20140608
drop ubuntu patches, never used them.

Fix GCC 5.0 build.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
3f95047ae1 suricata: package update to 2.0.8
includes security fix CVE-2015-0971

include nss and nspr to build

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
58869bea59 libhtp: update to use suricata 2.0.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
421fe3c081 suricata: Fix QA warnings
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-10 20:52:39 -07:00
Armin Kuster
58096a9c97 libseccomp: add tests
update busybox for extend head option for test suite
remove seq -f option as it is not supported buy busybox

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:40 -07:00
Armin Kuster
43fd825acf libseccomp: add ppc support
backport ppc patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:37 -07:00
Armin Kuster
af8473501a samhain: update client and server to 3.1.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
2015-04-15 17:54:34 -07:00
Hugo Vasconcelos Saldanha
070ccbb476 clamav: fix ncurses configure option
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Hugo Vasconcelos Saldanha
8090e1bf2f libmspack: update to version 0.5
SRC_URI to version 0.4 was broken.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Armin Kuster
b0873e2939 suricata: update to 2.0.7
this includes CVE-2015-0928

moved patches and files to more generic dir name

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:54:14 -07:00
Armin Kuster
14d6027b9e libseccomp: update to version 2.2.0
License is now LGPL
sources come from github now
dropped patches since alt solutions included now.

Changes in the 2.2.0 release include:

* Migrated the build system to autotools
* Added support for the aarch64 architecture
* Added support for the mips, mips64, and mips64n32 architectures
* Added support for the new seccomp() syscall and thread sync
* Added Python bindings
* Updated the internal syscall tables to Linux v3.19

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:53:41 -07:00
Armin Kuster
7b1d78f1b9 tomoyo: fix typos in scc file
thanks to rday for pointing it out.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:53:06 -07:00
Armin Kuster
666f9bd17a tripwire: Add aarch64 support to config.sub
this fixes a build issue on arm64.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:44 -08:00
Armin Kuster
009728f409 nmap: add aarch64 config support
allow nmap to build for arm64 qemu machine.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:33 -08:00
Armin Kuster
a72b7c2925 libcap-ng: remove from layer
this package is not in meta-oe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:29:01 -08:00
Armin Kuster
7c475c26af sleuth: add sleuthkit
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:37 -08:00
Armin Kuster
3e12ea17ff libewf: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:22 -08:00
Armin Kuster
1d03df0ddc afflib: new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:04 -08:00