mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-07-17 04:07:20 +00:00
Code Issues Projects Releases Wiki Activity
1,552 Commits 40 Branches 0 Tags
styhead
Commit Graph

42 Commits

Author SHA1 Message Date
Hitendra Prajapati e2c44c8b5d libhtp: fix CVE-2024-45797 
Upstream-Status: Backport from https://github.com/OISF/libhtp/commit/0d550de551b91d5e57ba23e2b1e2c6430fad6818

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 6b50c7c29e)
 2024-12-08 13:18:38 -05:00
Martin Jansa 90e9ae0f48 suricata: run whole autotools_do_configure not just oe_runconf 
Otherwise Makefile isn't regenerated and do_compile fails with:
suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found
after automake upgrade from 1.16.5 to 1.17 from:
https://git.openembedded.org/openembedded-core/commit/?id=b98328a6ff07119e7ba4f1072090d789e69edef8

Fixes:

CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/bash 'TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing' aclocal-1.16 -I m4
TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found
WARNING: 'aclocal-1.16' is missing on your system.
         You should only need it if you modified 'acinclude.m4' or
         'configure.ac' or m4 files included by 'configure.ac'.
         The 'aclocal' program is part of the GNU Automake package:
         <https://www.gnu.org/software/automake>
         It also requires GNU Autoconf, GNU m4 and Perl in order to run:
         <https://www.gnu.org/software/autoconf>
         <https://www.gnu.org/software/m4/>
         <https://www.perl.org/>
make: *** [Makefile:465: aclocal.m4] Error 127

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-09-09 19:34:06 -04:00
Armin Kuster c0e3fecc3b suricata: fix QA warnings 
ERROR: suricata-7.0.0-r0 do_package: QA Issue: File '/usr/bin/suricata' from suricata was already stripped, this will prevent future debugging! [already-stripped]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-07-29 20:07:01 -04:00
Armin Kuster ca10975033 recipes-*: convert WORKDIR->UNPACKDIR 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-07-29 20:07:01 -04:00
Siddharth Doshi f0deac3787 Suricata: Security Fix for CVE-2024-37151, CVE-2024-38534, CVE-2024-38535, CVE-2024-38536 
Upstream-Status: Backport from [https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b, https://github.com/OISF/suricata/commit/a753cdbe84caee3b66d0bf49b2712d29a50d67ae, https://github.com/OISF/suricata/commit/c82fa5ca0d1ce0bd8f936e0b860707a6571373b2, https://github.com/OISF/suricata/commit/2bd3bd0e318f19008e9fe068ab17277c530ffb92]

CVE's Fixed:
CVE-2024-37151 suricata: suricata: packet reassembly failure, which can lead to policy bypass
CVE-2024-38534 suricata: suricata: Crafted modbus traffic can lead to unlimited resource accumulation within a flow
CVE-2024-38535 suricata: Suricata: can run out of memory when parsing crafted HTTP/2 traffic
CVE-2024-38536 suricata: NULL pointer dereference when http.memcap is reached

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-07-29 20:07:01 -04:00
Wang Mingyu abfa203aa6 suricata: Start WORKDIR -> UNPACKDIR transition 
Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2024-06-17 08:29:11 -04:00
Armin Kuster 4eab875b33 meta-security: Drop ${PYTHON_PN} 
Signed-off-by: Armin Kuster <akuster808@gmail.com>

---
V2] Fix typo in python3-pyinotify changes
 2024-03-27 12:36:58 -04:00
Armin Kuster 49103c45ac libhtp: update to 0.5.45 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-09-25 09:45:37 -04:00
Armin Kuster 254b6094b5 suricata: Update to 7.0.0 
refersh patches
update libhtp

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-09-25 09:45:11 -04:00
Armin Kuster 83ac8fc1bd suricata: fix build issue. 
If you want to try to generate the lock file without accessing the network, remove the --frozen flag and use --offline instead.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-09-12 11:06:45 -04:00
Martin Jansa df8a1eb479 *.patch: fix malformed Upstream-Status and SOB lines 
* as reported by openembedded-core/scripts/contrib/patchreview.py -v .

Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/crosscompile_perl_bindings.patch)
Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/disable_perl_h_check.patch)

Missing Upstream-Status tag (./recipes-compliance/scap-security-guide/files/0001-standard.profile-expand-checks.patch)

Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-not-run-ptest-on-host.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-pid-path.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/suricata/files/fixup.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-scanners/clamav/files/fix2_libcurl_check.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/ecryptfs-utils/files/ecryptfs-utils-CVE-2016-6224.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/isic/files/configure_fix.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/krill/files/panic_workaround.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libdns_conf_fix.patch
Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libxml2_conf.patch

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-06-25 15:05:28 -04:00
Armin Kuster e92e4dadde suricata: update to 6.0.11 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-05-06 07:54:09 -04:00
Armin Kuster a6997dc78f libhtp: update to 0.5.43 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-05-06 07:54:09 -04:00
Armin Kuster a149c85ce9 suricata: Missed on crate depends 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-04-08 10:49:38 -04:00
Armin Kuster ffe3d73fad suricata: Fixup to work within the recent crate changes. 
Had to delete some wonky Cargo.toml files to get update_crates to work.
Manually updated one crate to a newer version included by update_crates as it would not compile.
Manually applied several crates missed by update_crates.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-04-08 10:49:38 -04:00
Armin Kuster b734cf77e2 suricata: update to 6.0.10 
fixup another python file to use py3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-03-20 16:30:29 -04:00
Armin Kuster b68c6f160d libhtp: update to 0.5.42 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2023-03-20 16:29:57 -04:00
Armin Kuster b59691b3d9 suricata: fix compile issue 
make[2]: *** No rule to make target '../rust/target/arm-poky-linux-gnueabi/release/libsuricata.a', needed by 'suricata'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-09-12 11:11:50 -04:00
Armin Kuster 01d58e266d suricata: update to 6.0.5 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-07-30 14:11:27 -07:00
Armin Kuster 972953e1e0 suricata: update to 5.0.5 
libhtp rolls with it
 2022-05-23 07:11:55 -07:00
Armin Kuster c21d1a04eb suricata: drop nfnetlink from pkg config 
nfnetlink has a layer dependancy to meta-networking.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-14 10:51:32 -07:00
Ashish Sharma c56ae450c9 meta-security : Use SPDX style licensing format 
WARNING: selinux-sandbox-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: selinux-gui-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: semodule-utils-3.3-r0.1 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: selinux-dbus-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: libwhisker2-perl-2.5-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \
WARNING: lib-perl-0.63-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \
WARNING: libhtp-0.5.39-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2 [obsolete-license] \
...

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-04-02 11:21:42 -07:00
Armin Kuster c62664348d suricata: update to 6.0.4 
bump lexical-core to 0.6.8

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-02-04 12:56:43 -08:00
Armin Kuster 818a8646a6 suricata: rust is in core 
drop dynamic-layer

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-08-26 21:45:14 -07:00
Armin Kuster 7a1691c037 suricata: Drop 4.1.x its EOL 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-28 18:21:25 -07:00
Armin Kuster cb6b4ae505 suricata: 4.1.x add UPSTREAM_CHECK_URI 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster a00b285f8c python3-suricata-update: update to 1.2.1 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-04-12 07:00:47 -07:00
Armin Kuster 0085b2cda9 suricata: update to 4.10.0 
This is the last 4.x. Will need rust support to move to 6.x

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-03-02 11:56:27 -08:00
Armin Kuster 8f51c5b9a2 python3-suricata-update: Inherit python3targetconfig 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-02-23 20:34:51 -08:00
Yi Zhao 97cac84f7f suricata: unify volatiles file name 
Make the volatiles file name starts with digital.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-11-03 15:16:23 -08:00
Armin Kuster 3ce8b759c9 suricata: update to 4.1.9 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-10-10 16:21:48 -07:00
Armin Kuster d3aff039c9 suricata: fix compiling on gcc10 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-10-09 07:02:01 -07:00
Armin Kuster 3283cf26ad suricata: update to 4.1.8 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-07-06 09:40:59 -07:00
Armin Kuster 3001c3ebfc suricata: update to 4.1.6 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:47 -08:00
Armin Kuster 79983488a7 libhtp: bugfix only update 0.5.32 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:13 -08:00
Armin Kuster 195157e5a0 python3-suricata-update: update to 1.1.1 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:08 -08:00
Christopher Larson 36d656fe72 suricata: add tmpfiles.d config 
This is needed to ensure our /var/log directory is created when using
systemd.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-11-27 13:38:58 -08:00
Armin Kuster 0e612d4c4d suricata: fix compile issue 
cp: cannot stat '/...../tmp-glibc/work/core2-32-oe-linux/suricata/4.1.5-r0/rules': No such file or directory
| WARNING: exit code 1 from a shell command.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-10-14 22:45:09 -07:00
Armin Kuster caaeb67863 suricata-update: add package to pull rules 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-10-08 15:54:52 -07:00
Armin Kuster 18de9e5bf9 suricata/libhtp: update to 4.1.5/0.5.31 
same sources
refresh patch

drop rules tar ball

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-10-08 15:54:52 -07:00
Armin Kuster d75dc96fa3 suricata: update to 4.1.4 
Backport patch to fix build against newer kernels.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-09-07 08:34:22 -07:00
Armin Kuster 1460d9b86d reorg ids: move ids recipes to recipes-ids 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-03-31 10:37:09 -07:00