Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Fedora Core 2 FEDORA-2004-231 Moderate: Subversion Information Leak

fedora
Calendar Grey July 23, 2004
Scroller Fedora
Fedora Core 2 vulnerabilities found for Subversion require immediate updates to prevent unauthorized data access.
Vulnerability allows reading of part of a repository when a user can write to another.

Summary

Subversion is a concurrent version control system which enables one

or more users to collaborate in developing and maintaining a

hierarchy of files and directories while keeping a history of all

changes. Subversion only stores the differences between versions,

instead of every complete file. Subversion is intended to be a

compelling replacement for CVS.

Update Information:

This update includes the latest release of Subversion, including a security fix for an issue in the mod_authz_svn Apache authentication module which could allow a read restriction for a portion of the repository to be bypassed by a user who has write access to a different portion of the repository. This issue does not affect the svnserve daemon.


* Tue Jul 20 2004 Joe Orton <jorton@redhat.com> 1.0.6-1

- update to 1.0.6 - allow build against neon 0.24.*

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Thu Jun 10 2004 Joe Orton <jorton@redhat.com> 1.0.5-1

- update to 1.0.5

This update can be downloaded from:


85ae0a5c09180f9e1b71cb06c737afa8 SRPMS/subversion-1.0.6-1.src.rpm 40bf5bfeb9e980d24486a835432e145c x86_64/subversion-1.0.6-1.x86_64.rpm 0883ea7ee7310103b1fdc2a56789d10d x86_64/subversion-devel-1.0.6-1.x86_64.rpm d7f05d987a77e1c82f99bfbbee533279 x86_64/mod_dav_svn-1.0.6-1.x86_64.rpm 7440cbfcc197892acda8676fbaa88c77 x86_64/subversion-perl-1.0.6-1....

Read the Full Advisory

Change Log

References

Fedora Update Notification FEDORA-2004-231 2004-07-23
Product : Fedora Core 2 Name : subversion Version : 1.0.6 Release : 1 Summary : Modern Version Control System designed to replace CVS Description : Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file. Subversion is intended to be a compelling replacement for CVS.

Update Instructions

Product: Fedora Core 2
Name: subversion
Version: 1.0.6
Release: 1
Summary: Modern Version Control System designed to replace CVS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.