]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 94e8b50) | patch
subversion: fix for Security Advisory CVE-2013-4505
authorYue Tao <Yue.Tao@windriver.com>
Tue, 15 Apr 2014 02:49:03 +0000 (10:49 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 21 May 2014 08:08:09 +0000 (09:08 +0100)
commit02314673619f44e5838ddb65bbe22f9342ee6167
treeaa1ee61d7685a96ac26ccac976d55e8f88af78bdtree | snapshot
parent94e8b503e8a5ae476037d4aa86f8e27d4a8c23eacommit | diff
subversion: fix for Security Advisory CVE-2013-4505

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0
through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass
intended access restrictions and possibly cause a denial of service
(resource consumption) via a relative URL in a REPORT request.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4505

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
meta/recipes-devtools/subversion/subversion-1.7.10/subversion-CVE-2013-4505.patch [new file with mode: 0644] blob
meta/recipes-devtools/subversion/subversion/subversion-CVE-2013-4505.patch [new file with mode: 0644] blob
meta/recipes-devtools/subversion/subversion_1.6.15.bb diff | blob | history
meta/recipes-devtools/subversion/subversion_1.7.10.bb diff | blob | history
Mirror of the official openembedded-core repository