← Back to branch summary

~ubuntu-branches/ubuntu/raring/subversion/raring

« back to all changes in this revision

Viewing changes to debian/patches/CVE-2011-1921.patch

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2011-08-05 10:53:00 UTC
  • Revision ID: package-import@ubuntu.com-20110805105300-1whdgtlkj7exjd9m
Tags: 1.6.12dfsg-4ubuntu5
* SECURITY UPDATE: denial of service via baselined WebDAV resource
  request
  - debian/patches/CVE-2011-1752.patch: disallow GETs of baselined
    versions of resources in subversion/mod_dav_svn/repos.c.
  - CVE-2011-1752
* SECURITY UPDATE: mod_dav_svn resource exhaustion via infinite loop
  - debian/patches/CVE-2011-1783.patch: validate path in
    subversion/libsvn_repos/authz.c.
  - CVE-2011-1783
* SECURITY UPDATE: mod_dav_svn permissions bypass via incorrect
  resource URL
  - debian/patches/CVE-2011-1921.patch: validate path in
    subversion/mod_dav_svn/authz.c.
  - CVE-2011-1921

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/patches/CVE-2011-1921.patch
 
1
Description: fix mod_dav_svn permissions bypass via incorrect resource URL
 
2
Origin: upstream, http://svn.apache.org/viewvc?view=revision&revision=1130303
 
3
 
 
4
diff -Nur subversion-1.6.12dfsg/subversion/mod_dav_svn/authz.c subversion-1.6.12dfsg.new/subversion/mod_dav_svn/authz.c
 
5
--- subversion-1.6.12dfsg/subversion/mod_dav_svn/authz.c        2011-06-02 13:14:38.884514137 -0400
 
6
+++ subversion-1.6.12dfsg.new/subversion/mod_dav_svn/authz.c    2011-06-02 13:14:43.584514136 -0400
 
7
@@ -51,6 +51,11 @@
 
8
       return TRUE;
 
9
     }
 
10
 
 
11
+  /* Sometimes we get paths that do not start with '/' and 
 
12
+     hence below uri concatenation would lead to wrong uris .*/
 
13
+  if (path && path[0] != '/')
 
14
+    path = apr_pstrcat(pool, "/", path, NULL);
 
15
+
 
16
   /* If bypass is specified and authz has exported the provider.
 
17
      Otherwise, we fall through to the full version.  This should be
 
18
      safer than allowing or disallowing all accesses if there is a