[ubuntu/trusty-security] subversion 1.8.8-1ubuntu3.1 (Accepted)

[Marc Deslauriers]

subversion (1.8.8-1ubuntu3.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect ssl cert validation
    - debian/patches/CVE-2014-3522.patch: properly validate hostnames in
      subversion/include/private/svn_cert.h,
      subversion/libsvn_ra_serf/util.c,
      subversion/libsvn_subr/dirent_uri.c,
      added tests to subversion/tests/libsvn_subr/dirent_uri-test.c.
    - CVE-2014-3522
  * SECURITY UPDATE: md5 collision authentication leak
    - debian/patches/CVE-2014-3528.patch: check if realm matches in
      subversion/libsvn_subr/config_auth.c.
    - CVE-2014-3528

Date: 2014-08-13 17:03:13.843541+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/trusty/+source/subversion/1.8.8-1ubuntu3.1
-------------- next part --------------
Sorry, changesfile not available.