Peter Korsgaard
bb393213cc
Fixes the following security vulnerabilities:
CVE-2024-46901: mod_dav_svn denial-of-service via control characters in
paths
It has been discovered that the patch for CVE-2013-1968 was incomplete
and unintentionally left mod_dav_svn vulnerable to control characters
in filenames.
https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
Subversion 1.14.4 also fixed a Windows-only vulnerability:
https://subversion.apache.org/security/CVE-2024-45720-advisory.txt
For change log, see:
https://svn.apache.org/repos/asf/subversion/tags/1.14.5/CHANGES
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to change log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9975d28aa3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
6 lines
347 B
Plaintext
6 lines
347 B
Plaintext
# From https://www.apache.org/dist/subversion/subversion-1.14.5.tar.bz2.sha512
|
|
sha512 e4800564d0cc68be98f19aa58d89181de83f237f0ccff10824d9237f8c65eb0071f7176ac54e9e8f8ecbf685849bd3e94be48f678f4c23ed6a5fd7fb6edd0321 subversion-1.14.5.tar.bz2
|
|
|
|
# Locally calculated
|
|
sha256 484aff0cfbb81155a10f903ed756e27e9fc65578c245a295bae295c4bb51eaad LICENSE
|