Jiaying Song 8f8989071a subversion: fix CVE-2024-46901 ...

Insufficient validation of filenames against control characters in
Apache Subversion repositories served via mod_dav_svn allows
authenticated users with commit access to commit a corrupted revision,
leading to disruption for users of the repository. All versions of
Subversion up to and including Subversion 1.14.4 are affected if serving
repositories via mod_dav_svn. Users are recommended to upgrade to
version 1.14.5, which fixes this issue. Repositories served via other
access methods are not affected.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-46901

Upstream patches:
https://subversion.apache.org/security/CVE-2024-46901-advisory.txt

(From OE-Core rev: 16c212bd9a9e9c35256ff308da72a518c76ce11d)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-12-23 05:46:32 -08:00

..

CVE-2024-46901.patch

subversion: fix CVE-2024-46901

2024-12-23 05:46:32 -08:00

serfmacro.patch

subversion: upgrade 1.11.1 -> 1.12.0

2019-05-12 17:55:11 +01:00