Yue Tao e8d6c874a7 subversion: fix for Security Advisory CVE-2013-4505 ...

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0
through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass
intended access restrictions and possibly cause a denial of service
(resource consumption) via a relative URL in a REPORT request.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4505

(From OE-Core rev: 02314673619f44e5838ddb65bbe22f9342ee6167)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-05-21 09:09:00 +01:00

..

disable-revision-install.patch

recipes: Fix the Upstream-Status format

2011-05-11 17:14:26 +01:00

fix-install-depends.patch

subversion: do_install failed (parallel issue)

2012-07-10 20:35:11 +01:00

libtool2.patch

recipes: Fix the Upstream-Status format

2011-05-11 17:14:26 +01:00

subversion-CVE-2013-1849.patch

subversion: fix for Security Advisory CVE-2013-1849

2014-05-21 09:08:59 +01:00

subversion-CVE-2013-4505.patch

subversion: fix for Security Advisory CVE-2013-4505

2014-05-21 09:09:00 +01:00