diff options
| author | Yue Tao <Yue.Tao@windriver.com> | 2014-10-22 03:37:29 -0400 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-11-21 16:48:32 +0000 |
| commit | 4ff3355e4daf841c66fb78e88bf2d6e26d8f9ced (patch) | |
| tree | 9b86c3ebc4f7df9e648f08b26edf639205c361ac /scripts/lib/image/help.py | |
| parent | 529ce75be949944a6e54151cd4233703e40c6351 (diff) | |
| download | openembedded-core-4ff3355e4daf841c66fb78e88bf2d6e26d8f9ced.tar.gz openembedded-core-4ff3355e4daf841c66fb78e88bf2d6e26d8f9ced.tar.bz2 openembedded-core-4ff3355e4daf841c66fb78e88bf2d6e26d8f9ced.zip | |
subversion: Security Advisory - subversion - CVE-2014-3528
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before
1.8.10 uses an MD5 hash of the URL and authentication realm to store
cached credentials, which makes it easier for remote servers to obtain
the credentials via a crafted authentication realm.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528
(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/image/help.py')
0 files changed, 0 insertions, 0 deletions