[Buildroot] [PATCH] subversion: security bump to version 1.7.18

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Fri Aug 15 20:29:31 UTC 2014


Dear Gustavo Zacarias,

On Fri, 15 Aug 2014 15:25:21 -0300, Gustavo Zacarias wrote:
> Fixes:
> 
> CVE-2014-0032 - mod_dav_svn is vunerable to a remotely triggerable
> segfault DoS vulnerability when SVNListParentPath is on.
> 
> CVE-2014-3522 - Serf RA layer does not correctly validate certificates
> with wildcards in them for HTTPS.
> 
> CVE-2014-3528 - Credentials cached with Subversion may be sent to the
> wrong server.
> 
> Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>
> ---
>  package/subversion/subversion.mk | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Applied, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com



More information about the buildroot mailing list