Yue Tao a64e37ac0e subversion: Security Advisory - subversion - CVE-2014-3528 ...

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before
1.8.10 uses an MD5 hash of the URL and authentication realm to store
cached credentials, which makes it easier for remote servers to obtain
the credentials via a crafted authentication realm.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528

(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-11-04 10:27:08 +00:00

..

disable-revision-install.patch

recipes: Fix the Upstream-Status format

2011-05-11 17:14:26 +01:00

fix-install-depends.patch

subversion: do_install failed (parallel issue)

2012-07-10 20:35:11 +01:00

libtool2.patch

recipes: Fix the Upstream-Status format

2011-05-11 17:14:26 +01:00

subversion-CVE-2013-1845.patch

subversion: fix for Security Advisory CVE-2013-1845

2014-05-21 09:09:00 +01:00

subversion-CVE-2013-1847-CVE-2013-1846.patch

subversion: fix for Security Advisory CVE-2013-1847 and CVE-2013-1846

2014-05-21 09:09:00 +01:00

subversion-CVE-2013-1849.patch

subversion: fix for Security Advisory CVE-2013-1849

2014-05-21 09:08:59 +01:00

subversion-CVE-2013-4277.patch

subversion: fix for Security Advisory CVE-2013-4277

2014-05-21 09:09:00 +01:00

subversion-CVE-2013-4505.patch

subversion: fix for Security Advisory CVE-2013-4505

2014-05-21 09:09:00 +01:00

subversion-CVE-2014-3522.patch

subversion: Security Advisory - subversion - CVE-2014-3522

2014-11-04 10:27:07 +00:00

subversion-CVE-2014-3528.patch

subversion: Security Advisory - subversion - CVE-2014-3528

2014-11-04 10:27:08 +00:00