Updated subversion packages fix security vulnerabilities

Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames. A remote attacker with a malicious client could use this flaw to disrupt the service for other users using that repository CVE-2013-1968. Subversion's svnserve server process ma...

[SECURITY] [DSA 2703-1] subversion security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2703-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 09, 2013 http://www.debian.org/security/faq -...

Subversion security vulnerabilities

Few DoS conditions...

[SECURITY] Fedora 19 Update: subversion-1.7.10-1.fc19

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Mandriva Linux Security Advisory : subversion (MDVSA-2013:173)

Multiple vulnerabilities has been found and corrected in subversion : If a filename which contains a newline character ASCII 0x0a is committed to a repository using the FSFS format, the resulting revision is corrupt. This can lead to disruption for users of the repository CVE-2013-1968...

Apache Subversion 'mod_dav_svn' Module Multiple DoS Vulnerabilities

Apache Subversion is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2703-1 : subversion - several vulnerabilities

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-1968 Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in...

[SECURITY] [DSA 2703-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2703-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 09, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2703-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2703-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 09, 2013 http://www.debian.org/security/faq -...

CVE-2013-1968

Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service FSFS repository corruption via a newline character in a file name...

DSA-2703-1 subversion - several

Bulletin has no description...

CVE-2013-2112

The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service exit by aborting a connection...

Debian Security Advisory DSA 2703-1 (subversion - several vulnerabilities)

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1968 Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames...

Debian: Security Advisory (DSA-2703-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Subversion 'mod_dav_svn' log REPORT Request DoS Vulnerability

Apache Subversion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Subversion 命令注入漏洞(CVE-2013-2088)

BUGTRAQ ID: 60265 CVECAN ID: CVE-2013-2088 Subversion是一款开源多用户版本控制系统，支持非ASCII 文本和二进制数据。 Apache Subversion 1.6.22及之前版本、1.7.10及之前版本存在命令注入漏洞，可导致受影响系统损坏。此漏洞源于处理文件名时，svn-keyword-check.pl hook脚本内存在输入验证错误。通过特制的请求可注入任意shell命令并执行这些命令。要成功利用此漏洞需要在服务器端使用contrib脚本。 0 Apache Group Subversion = 1.7.10 Apache Gro...

Apache Subversion < 1.6.23 / 1.7.x < 1.7.10 Multiple Vulnerabilities

Binary data 6854.prm...

Apache Subversion < 1.8.0 / 1.7.10 / 1.6.23 Multiple Vulnerabilities

Binary data 800980.prm...

FreeBSD : devel/subversion -- svnserve remotely triggerable DoS (ce502902-ca39-11e2-9673-001e8c75030d)

Subversion team reports : Subversion's svnserve server process may exit when an incoming TCP connection is closed early in the connection process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

FreeBSD : devel/subversion -- contrib hook-scripts can allow arbitrary code execution (6d0bf320-ca39-11e2-9673-001e8c75030d)

Subversion team reports : The script contrib/hook-scripts/check-mime-type.pl does not escape argv arguments to 'svnlook' that start with a hyphen. This could be used to cause 'svnlook', and hence check-mime-type.pl, to error out. The script contrib/hook-scripts/svn-keyword-check.pl parses filenam...