Red Hat Security AdvisoryRHSA-2015:0165
subversion security update
Released 2015-02-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_dav_svn-1.6.11-12.el6_6, subversion-1.6.11-12.el6_6, subversion-devel-1.6.11-12.el6_6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_dav_svn-1.6.11-12.el6_6, subversion-1.6.11-12.el6_6, subversion-devel-1.6.11-12.el6_6 +6
- Red Hat Enterprise Linux Server (v. 6) mod_dav_svn-1.6.11-12.el6_6, subversion-1.6.11-12.el6_6, subversion-1.6.11-12.el6_6.ppc +1
- Red Hat Enterprise Linux Server Optional (v. 6) subversion-devel-1.6.11-12.el6_6, subversion-devel-1.6.11-12.el6_6.ppc, subversion-gnome-1.6.11-12.el6_6 +10
- Red Hat Enterprise Linux Workstation (v. 6) mod_dav_svn-1.6.11-12.el6_6, subversion-1.6.11-12.el6_6, subversion-javahl-1.6.11-12.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 6) subversion-devel-1.6.11-12.el6_6, subversion-gnome-1.6.11-12.el6_6, subversion-kde-1.6.11-12.el6_6 +3
Fixes 2 records
Priority LOW 36
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT requ…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11003 · Published 2014-12-18 · Partial fix
Priority LOW 29
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credent…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.07396 · Published 2014-08-19 · Partial fix CWE-255
