Red Hat Security AdvisoryRHSA-2014:0255
subversion security update
Released 2014-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) mod_dav_svn-1.6.11-12.el5_10, mod_dav_svn-1.6.11-12.el5_10.i386, mod_dav_svn-1.6.11-12.el5_10.ia64 +21
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_dav_svn-1.6.11-10.el6_5, subversion-1.6.11-10.el6_5, subversion-devel-1.6.11-10.el6_5 +6
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mod_dav_svn-1.6.11-12.el5_10, mod_dav_svn-1.6.11-12.el5_10.i386, subversion-1.6.11-12.el5_10 +9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_dav_svn-1.6.11-10.el6_5, subversion-1.6.11-10.el6_5, subversion-devel-1.6.11-10.el6_5 +6
- Red Hat Enterprise Linux Server (v. 6) mod_dav_svn-1.6.11-10.el6_5, subversion-1.6.11-10.el6_5, subversion-1.6.11-10.el6_5.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 6) subversion-1.6.11-10.el6_5, subversion-devel-1.6.11-10.el6_5, subversion-devel-1.6.11-10.el6_5.ppc +11
- Red Hat Enterprise Linux Workstation (v. 6) mod_dav_svn-1.6.11-10.el6_5, subversion-1.6.11-10.el6_5, subversion-javahl-1.6.11-10.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) subversion-1.6.11-10.el6_5, subversion-devel-1.6.11-10.el6_5, subversion-gnome-1.6.11-10.el6_5 +4
Fixes 3 records
Priority MEDIUM 41
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03894 · Published 2013-07-31 · Fixed
Priority LOW 33
The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) vi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.11052 · Published 2014-02-14 · Fixed CWE-20
Priority LOW 30
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02814 · Published 2013-07-31 · Fixed
THREATIST.IORead the docs