Red Hat Security AdvisoryRHSA-2015:0166
subversion security update
Released 2015-02-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) mod_dav_svn-1.7.14-7.el7_0, subversion-1.7.14-7.el7_0, subversion-devel-1.7.14-7.el7_0 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) mod_dav_svn-1.7.14-7.el7_0, subversion-1.7.14-7.el7_0, subversion-devel-1.7.14-7.el7_0 +8
- Red Hat Enterprise Linux Server (v. 7) mod_dav_svn-1.7.14-7.el7_0, subversion-1.7.14-7.el7_0, subversion-libs-1.7.14-7.el7_0 +1
- Red Hat Enterprise Linux Server Optional (v. 7) subversion-1.7.14-7.el7_0, subversion-1.7.14-7.el7_0.ppc, subversion-devel-1.7.14-7.el7_0 +13
- Red Hat Enterprise Linux Workstation (v. 7) mod_dav_svn-1.7.14-7.el7_0, subversion-1.7.14-7.el7_0, subversion-libs-1.7.14-7.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 7) subversion-1.7.14-7.el7_0, subversion-devel-1.7.14-7.el7_0, subversion-gnome-1.7.14-7.el7_0 +6
Fixes 3 records
Priority LOW 36
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT requ…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11003 · Published 2014-12-18 · Partial fix
Priority LOW 35
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a UR…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.09996 · Published 2014-12-18 · Fixed
Priority LOW 29
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credent…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.07396 · Published 2014-08-19 · Partial fix CWE-255