subversion: fix for Security Advisory CVE-2013-4505
authorYue Tao <Yue.Tao@windriver.com>
Tue, 15 Apr 2014 02:49:03 +0000 (10:49 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 21 May 2014 08:09:00 +0000 (09:09 +0100)
commitc7289fb651bcd54fa9755d5f68eb34b69d7c6696
treef67e8f08580f5a26bb4948bcd5e7301038a397ef
parent7fca3c150b18d3cbcaa2ebc8add3a03a8da3c364
subversion: fix for Security Advisory CVE-2013-4505

The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0
through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass
intended access restrictions and possibly cause a denial of service
(resource consumption) via a relative URL in a REPORT request.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4505

(From OE-Core rev: 02314673619f44e5838ddb65bbe22f9342ee6167)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/subversion/subversion-1.7.10/subversion-CVE-2013-4505.patch [new file with mode: 0644]
meta/recipes-devtools/subversion/subversion/subversion-CVE-2013-4505.patch [new file with mode: 0644]
meta/recipes-devtools/subversion/subversion_1.6.15.bb
meta/recipes-devtools/subversion/subversion_1.7.10.bb