← Back to branch summary

~ubuntu-branches/debian/stretch/subversion/stretch

« back to all changes in this revision

Viewing changes to debian/patches/CVE-2013-2112.patch

  • Committer: Package Import Robot
  • Author(s): James McCoy
  • Date: 2013-10-18 23:23:06 UTC
  • mfrom: (17.1.9 sid)
  • Revision ID: package-import@ubuntu.com-20131018232306-etbd7h4i0stghrd5
Tags: 1.7.13-2
http://bugs.debian.org/726717
Remove unnecessary libapache2-svn.prem.  (Closes: #726717)

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/patches/CVE-2013-2112.patch
1
 
Description: Fix CVE-2013-2112
2
 
 Subversion's svnserve server process may exit when an incoming TCP connection
3
 
 is closed early in the connection process.
4
 
 .
5
 
 This can lead to disruption for users of the server.
6
 
Origin: upstream, http://subversion.apache.org/security/CVE-2013-2112-advisory.txt
7
 
Bug-Debian: http://bugs.debian.org/711033
8
 
Forwarded: not-needed
9
 
Author: Salvatore Bonaccorso <carnil@debian.org>
10
 
Last-Update: 2013-06-06
11
 
 
12
 
--- a/subversion/svnserve/main.c
13
 
+++ b/subversion/svnserve/main.c
14
 
@@ -928,7 +928,9 @@
15
 
                                          connection_pool) == APR_CHILD_DONE)
16
 
             ;
17
 
         }
18
 
-      if (APR_STATUS_IS_EINTR(status))
19
 
+      if (APR_STATUS_IS_EINTR(status)
20
 
+          || APR_STATUS_IS_ECONNABORTED(status)
21
 
+          || APR_STATUS_IS_ECONNRESET(status))
22
 
         {
23
 
           svn_pool_destroy(connection_pool);
24
 
           continue;