SUSE: Security Advisory for subversion (SUSE-SA:2009:044)

The remote host is missing updates announced in advisory SUSE-SA:2009:044. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

RedHat Security Advisory RHSA-2009:1203

The remote host is missing updates announced in advisory RHSA-2009:1203. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Matt Lewis, of...

openSUSE Security Update : subversion (subversion-1185)

This version upgrade of subversion to 1.5.7 fixes some buffer overflows in the client and server code that can occur while parsing binary diffs. CVE-2009-2411 Version 1.5.7 also fixes various non-security bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : subversion (subversion-1185)

This version upgrade of subversion to 1.5.7 fixes some buffer overflows in the client and server code that can occur while parsing binary diffs. CVE-2009-2411 Version 1.5.7 also fixes various non-security bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] Fedora 11 Update: viewvc-1.1.2-2.fc11

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

[SECURITY] Fedora 10 Update: viewvc-1.0.9-1.fc10

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2009:1203 Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Subversion SVN is a...

Fedora 11 : subversion-1.6.4-2.fc11 (2009-8449)

This update includes the latest stable release of Subversion, fixing many bugs and a security issue: Matt Lewis reported multiple heap overflow flaws in Subversion servers and clients when parsing binary deltas. Malicious users with commit access to a vulnerable server could uses these flaws to...

Fedora 10 : subversion-1.6.4-2.fc10 (2009-8432)

This update includes the latest stable release of Subversion, including several enhancements, many bug fixes, and a fix for a security issue: Matt Lewis reported multiple heap overflow flaws in Subversion servers and clients when parsing binary deltas. Malicious users with commit access to a...

Subversion libsvn_delta库整数溢出漏洞

BUGTRAQ ID: 35983 CVECAN ID: CVE-2009-2411 Subversion是一款开放源码的多用户版本控制系统，支持非ASCII 文本和二进制数据。 Subversion的libsvndelta库没有充分地验证svndiff流，处理带有超大窗口的流可能触发最终可导致堆溢出的整数溢出漏洞。拥有对代码库commit访问权限的攻击者可以利用这个漏洞在Subversion Server服务器上执行任意代码。 Subversion Subversion 1.5.7 Subversion Subversion 1.6.0 - 1.6.3 厂商补丁： Subversion...

RHEL 4 / 5 : subversion (RHSA-2009:1203)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1203 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of...

Mandriva Linux Security Advisory : subversion (MDVSA-2009:199-1)

A vulnerability has been found and corrected in subversion : Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows...

[SECURITY] Fedora 11 Update: subversion-1.6.4-2.fc11

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Important: Red Hat Security Advisory: subversion security update

Updated subversion packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Subversion SVN is a concurrent version control system which enables one or mo...

subversion: multiple heap overflow issues

Multiple integer overflows in the libsvndelta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : subversion vulnerability (USN-812-1)

Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...

subversion security update

1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817...

Slackware 12.0 / 12.1 / 12.2 / current : subversion (SSA:2009-219-01)

New subversion packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-219-01. The text itself is...

[SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1855-1 [email protected] http://www.debian.org/security/ Florian Weimer August 08, 2009 http://www.debian.org/security/faq -...

USN-812-1: Subversion vulnerability

Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...