Wenzong Fan f0ecaf46bb subversion: fix CVE-2015-3184 ...

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before
1.8.14, when using Apache httpd 2.4.x, does not properly restrict
anonymous access, which allows remote anonymous users to read hidden
files via the path name.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3184-advisory.txt

(From OE-Core master rev: 29eb921ed074d86fa8d5b205a313eb3177473a63)

(From OE-Core rev: 7af7a3e692a6cd0d92768024efe32bfa7d83bc8f)

(From OE-Core rev: e4a1caecc5ae6b8488ec8ed7d303296af99146c0)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-02-07 17:23:04 +00:00

..

classes

allarch: Force TARGET_*FLAGS variable values

2016-01-15 13:14:34 +00:00

conf

feature-arm-thumb.inc: Fix ARMPKGSFX_THUMB value

2016-01-15 13:14:34 +00:00

files

toolchain-shar-template.sh: Make relocation optional.

2015-02-24 17:41:43 +00:00

lib

rootfs.py: show intercept script output in log.do_rootfs

2015-09-18 19:22:26 +01:00

recipes-bsp

grub2: Fix CVE-2015-8370

2016-01-15 13:14:35 +00:00

recipes-connectivity

openssl: Security fix CVE-2016-0701

2016-02-07 17:23:04 +00:00

recipes-core

glibc: CVE-2015-8776

2016-02-07 17:23:04 +00:00

recipes-devtools

subversion: fix CVE-2015-3184

2016-02-07 17:23:04 +00:00

recipes-extended

logrotate: do not move binary logrotate to /usr/bin

2016-01-20 17:08:30 +00:00

recipes-gnome

gdk-pixbuf: Security Advisory - gdk-pixbuf - CVE-2015-4491

2015-09-01 21:19:45 +01:00

recipes-graphics

cairo: make xlib and libxcb dependencies explicit

2015-09-01 21:19:33 +01:00

recipes-kernel

linux-dtb.inc: drop unused DTB_NAME variable from do_install

2016-01-15 13:14:34 +00:00

recipes-lsb4

libpng12: upgrade to 1.2.52

2015-01-07 23:35:01 +00:00

recipes-multimedia

gstreamer1.0-plugins-base: Need more buffers in output queue for better performance

2015-09-01 21:19:39 +01:00

recipes-qt

qt4: fix CVE issues

2015-06-28 09:44:17 +01:00

recipes-rt

rt-tests: fix gzip command

2015-02-15 21:58:25 +00:00

recipes-sato

webkit-gtk: disable JIT for armv5/armv6

2015-03-25 12:39:37 +00:00

recipes-support

libiconv_1.11.1: fix LICENSE declaration, LGPL -> LGPLv2.0

2015-12-08 13:27:31 +00:00

site

siteinfo: account for 32 and 64 bit arm

2014-12-23 10:18:17 +00:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

meta/recipes.txt: add recipes-lsb4

2013-04-10 09:23:17 +01:00