ChangeLog for: 2013-04-05 06:21:45
ap/linuxdoc-tools-0.9.68-x86_64-1.txz: Upgraded.
Thanks to Stuart Winter.
d/gcc-4.8.0-x86_64-2.txz: Rebuilt.
Restored missing target.h, target.def, and target-hooks-macros.h headers.
d/gcc-g++-4.8.0-x86_64-2.txz: Rebuilt.
d/gcc-gfortran-4.8.0-x86_64-2.txz: Rebuilt.
d/gcc-gnat-4.8.0-x86_64-2.txz: Rebuilt.
d/gcc-go-4.8.0-x86_64-2.txz: Rebuilt.
d/gcc-java-4.8.0-x86_64-2.txz: Rebuilt.
d/gcc-objc-4.8.0-x86_64-2.txz: Rebuilt.
d/subversion-1.7.9-x86_64-1.txz: Upgraded.
This update fixes some denial of service bugs:
mod_dav_svn excessive memory usage from property changes
mod_dav_svn crashes on LOCK requests against activity URLs
mod_dav_svn crashes on LOCK requests against non-existant URLs
mod_dav_svn crashes on PROPFIND requests against activity URLs
mod_dav_svn crashes on out of range limit in log REPORT request
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1845
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1846
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1847
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1884
(* Security fix *)
l/qt-4.8.4-x86_64-4.txz: Rebuilt.
Removed dangling symlink in the docs directory.
n/openssh-6.2p1-x86_64-2.txz: Rebuilt.
Patched to remove warnings about missing identity files unless they were
specified on the command line or in the config file.