<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/subversion/subversion-1.8.9, branch krogoth-next</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=krogoth-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=krogoth-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2014-11-06T16:45:18+00:00</updated>
<entry>
<title>subversion: 1.8.9 -&gt; 1.8.10</title>
<updated>2014-11-06T16:45:18+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2014-11-04T07:17:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e20a85dab9d548cf809101133908ba945fb8c554'/>
<id>urn:sha1:e20a85dab9d548cf809101133908ba945fb8c554</id>
<content type='text'>
(From OE-Core rev: aa3aa6fff5b5e5b36b76665846e8b7f0408f7e81)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: Security Advisory - subversion - CVE-2014-3522</title>
<updated>2014-11-04T10:27:07+00:00</updated>
<author>
<name>Yue Tao</name>
<email>Yue.Tao@windriver.com</email>
</author>
<published>2014-10-22T07:37:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=514a91df49b0d358c26818c40e9e281a98fba8db'/>
<id>urn:sha1:514a91df49b0d358c26818c40e9e281a98fba8db</id>
<content type='text'>
The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18
and 1.8.x before 1.8.10 does not properly handle wildcards in the Common
Name (CN) or subjectAltName field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof servers via a crafted
certificate.&lt;a href=http://cwe.mitre.org/data/definitions/297.html
target=_blank&gt;CWE-297: Improper Validation of Certificate with Host
Mismatch&lt;/a&gt;

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3522

(From OE-Core rev: 06a33cd00ea11abec1ebe9d5883e44778075ccc6)

Signed-off-by: Yue Tao &lt;Yue.Tao@windriver.com&gt;
Signed-off-by: Jackie Huang &lt;jackie.huang@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: Upgrade 1.7.7 -&gt; 1.8.9</title>
<updated>2014-07-17T11:28:50+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2014-07-16T12:31:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=76f75e91ce1ad51a2c669d2b4d2fbddf1a113428'/>
<id>urn:sha1:76f75e91ce1ad51a2c669d2b4d2fbddf1a113428</id>
<content type='text'>
Dropped neon patches as neon support was dropped.
Dropped CVE patches as applied in later version
Added patch to avoid OS-X check which doesn't cross compile
Add PACKAGECONFIG for gnome-keyring

Addition to license:

For the file subversion/libsvn_subr/utf_width.c
* Markus Kuhn -- 2007-05-26 (Unicode 5.0)
*
* Permission to use, copy, modify, and distribute this software
* for any purpose and without fee is hereby granted. The author
* disclaims all warranties with regard to this software.

(From OE-Core rev: 99c3225cfe39f8de89555df5bd3f1e93cd731269)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
