subversion: fix for Security Advisory CVE-2013-4277
authorYue Tao <Yue.Tao@windriver.com>
Thu, 8 May 2014 10:16:24 +0000 (18:16 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 21 May 2014 08:09:00 +0000 (09:09 +0100)
commit5033e0c20c23ffde5dae178c7ce4ec6688eb7bf4
tree4550b8e3c4908be3c0fd424e83f6c836ac123596
parentdc4947afcb135e2069f00cc5a347152be0c918d7
subversion: fix for Security Advisory CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through
1.8.1 allows local users to overwrite arbitrary files or kill arbitrary
processes via a symlink attack on the file specified by the --pid-file
option.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4277

(From OE-Core rev: e0e483c5b2f481240e590ebb7d6189a211450a7e)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/subversion/subversion-1.7.10/subversion-CVE-2013-4277.patch [new file with mode: 0644]
meta/recipes-devtools/subversion/subversion/subversion-CVE-2013-4277.patch [new file with mode: 0644]
meta/recipes-devtools/subversion/subversion_1.6.15.bb
meta/recipes-devtools/subversion/subversion_1.7.10.bb