Test document

Vlus

...

Nexus URL: TBD

There are 17 CVEs with a CVSS score >= 9.0. These are exceptions requested here:

Release 5: Akraino CVE Vulnerability Exception Request

CVE-ID	CVSS	ATTACK	POC	ALERT	FIXED	PACKAGES
CVE-2005-2541	10.0	AV:N			unfixed	tar
CVE-2014-2830	10.0	AV:N			unfixed	cifs-utils
CVE-2016-1585	9.8	AV:N			unfixed	libapparmor1
CVE-2017-17479	9.8	AV:N			unfixed	libopenjp2-7
CVE-2017-9117	9.8	AV:N	POC		unfixed	libtiff5
CVE-2018-13410	9.8	AV:N			unfixed	zip
CVE-2019-1010022	9.8	AV:N	POC		unfixed	libc-bin, libc-dev-bin, libc-devtools, libc-l10n, libc6, libc6-dbg, libc6-dev, locales
CVE-2019-8341	9.8	AV:N	POC		unfixed	python3-jinja2
CVE-2020-27619	9.8	AV:N			unfixed	python3.9
CVE-2021-29462	9.8	AV:N			unfixed	libixml10, libupnp13
CVE-2021-29921	9.8	AV:N	POC		unfixed	python3.9
CVE-2021-30473	9.8	AV:N			unfixed	libaom0
CVE-2021-30474	9.8	AV:N			unfixed	libaom0
CVE-2021-30475	9.8	AV:N			unfixed	libaom0
CVE-2021-30498	9.8	AV:N	POC		unfixed	libcaca0
CVE-2021-30499	9.8	AV:N	POC		unfixed	libcaca0
CVE-2021-3756	9.8	AV:N	POC		unfixed	libmysofa1
CVE-2021-42377	9.8	AV:N			unfixed	busybox
CVE-2021-45951	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2021-45952	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2021-45953	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2021-45954	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2021-45955	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2021-45956	9.8	AV:N	POC		unfixed	dnsmasq
CVE-2022-0318	9.8	AV:N	POC		unfixed	vim
CVE-2022-23303	9.8	AV:N			unfixed	hostapd, wpasupplicant
CVE-2022-23304	9.8	AV:N			unfixed	hostapd, wpasupplicant
CVE-2021-22945	9.1	AV:N	POC		unfixed	curl
CVE-2021-4048	9.1	AV:N			unfixed	libblas3, liblapack3
CVE-2021-43400	9.1	AV:N			unfixed	bluez

Lynis

Nexus URL TBD

The initial results compare with the Lynis Incubation: PASS/FAIL Criteria, v1.0 as follows.

IoT Gateway

The Lynis Program Update test MUST pass with no errors.

2022-03-29 22:55:42 Test: Checking for program update...
2022-03-29 22:55:43 Current installed version  : 308
2022-03-29 22:55:43 Latest stable version      : 307
2022-03-29 22:55:43 No Lynis update available.

...

PC/Server for robot control

The Lynis Program Update test MUST pass with no errors.

2022-03-23 05:13:56 Test: Checking for program update...
2022-03-23 05:14:03 Current installed version : 308
2022-03-23 05:14:03 Latest stable version : 307
2022-03-23 05:14:03 No Lynis update available

...