]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
projects / thirdparty / openembedded / openembedded-core-contrib.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3962b76) | patch
subversion: fix for Security Advisory CVE-2013-4277
authorYue Tao <Yue.Tao@windriver.com>
Thu, 8 May 2014 10:16:24 +0000 (18:16 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 21 May 2014 08:08:10 +0000 (09:08 +0100)
commite0e483c5b2f481240e590ebb7d6189a211450a7e
treeb770fa038c3516a0433c53431e3d42b7825f6ba7tree
parent3962b76185194fa56be7f1689204a1188ea44737commit | diff
subversion: fix for Security Advisory CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through
1.8.1 allows local users to overwrite arbitrary files or kill arbitrary
processes via a symlink attack on the file specified by the --pid-file
option.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4277

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
meta/recipes-devtools/subversion/subversion-1.7.10/subversion-CVE-2013-4277.patch [new file with mode: 0644] blob
meta/recipes-devtools/subversion/subversion/subversion-CVE-2013-4277.patch [new file with mode: 0644] blob
meta/recipes-devtools/subversion/subversion_1.6.15.bb diff | blob | blame | history
meta/recipes-devtools/subversion/subversion_1.7.10.bb diff | blob | blame | history
Mirror of git://git.openembedded.org/openembedded-core-contrib