Red Hat Security AdvisoryRHSA-2011:0258
subversion security update
Released 2011-02-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_dav_svn-1.6.11-2.el6_0.2, subversion-1.6.11-2.el6_0.2, subversion-devel-1.6.11-2.el6_0.2 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_dav_svn-1.6.11-2.el6_0.2, subversion-1.6.11-2.el6_0.2, subversion-devel-1.6.11-2.el6_0.2 +6
- Red Hat Enterprise Linux Server (v. 6) mod_dav_svn-1.6.11-2.el6_0.2, subversion-1.6.11-2.el6_0.2, subversion-1.6.11-2.el6_0.2.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 6) subversion-1.6.11-2.el6_0.2, subversion-devel-1.6.11-2.el6_0.2, subversion-devel-1.6.11-2.el6_0.2.ppc +11
- Red Hat Enterprise Linux Workstation (v. 6) mod_dav_svn-1.6.11-2.el6_0.2, subversion-1.6.11-2.el6_0.2, subversion-javahl-1.6.11-2.el6_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) subversion-1.6.11-2.el6_0.2, subversion-devel-1.6.11-2.el6_0.2, subversion-gnome-1.6.11-2.el6_0.2 +4
Fixes 3 records
Priority LOW 38
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereferen…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.05136 · Published 2011-01-07 · Fixed CWE-399
Priority LOW 34
authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named r…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.04216 · Published 2010-10-04 · Fixed CWE-16
Priority LOW 24
Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.0446 · Published 2011-01-07 · Fixed CWE-399
THREATIST.IORead the docs