Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE: 2011:0692-1 Important: Subversion Server Crash Risks

suse
Calendar Grey June 24, 2011
Scroller Suse
Important patches released for SUSE subversion addressing various vulnerabilities, including concerns related to memory allocation and potential server stability failures.
An update that fixes three vulnerabilities is now available

Summary

   SUSE Security Update: subversion
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:0692-1
Rating:             important
References:         #676949 #698205 
Cross-References:   CVE-2011-0715 CVE-2011-1752 CVE-2011-1783
                   
Affected Products:
                    SUSE Linux Enterprise Desktop 10 SP4
                    SLE SDK 10 SP4
                    SLE SDK 10 SP3
______________________________________________________________________________

   An update that fixes three vulnerabilities is now available.

Description:


   Subversion was updated to fix several security issues:

   * CVE-2011-1752: The mod_dav_svn Apache HTTPD server
   module can be crashed though when asked to deliver
   baselined WebDAV resources.
   * CVE-2011-1783: The mod_dav_svn Apache HTTPD server
   module can trigger a loop which consumes all available
   memory on the system.
   * CVE-2011-0715: Remote attackers could crash an svn
   server by causing a NULL deref

   Security Issue references:

   * CVE-2011-1752
   
   * CVE-2011-1783
   
   * CVE-2011-0715
   



Package List:

   - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):

      subversion-1.3.1-1.18.1
      subversion-devel-1.3.1-1.18.1

   - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):

      cvs2svn-1.3.0-30.18.1
      subversion-1.3.1-1.18.1
      subversion-devel-1.3.1-1.18.1
      subversion-python-1.3.1-1.18.1
      subversion-server-1.3.1-1.18.1
      subversion-tools-1.3.1-1.18.1
      viewcvs-1.0.5-0.18.1

   - SLE SDK 10 SP3 (i586 ia64 ppc s390x x86_64):

      cvs2svn-1.3.0-30.18.1
      subversion-1.3.1-1.18.1
      subversion-devel-1.3.1-1.18.1
      subversion-python-1.3.1-1.18.1
      subversion-server-1.3.1-1.18.1
      subversion-tools-1.3.1-1.18.1
      viewcvs-1.0.5-0.18.1


References:

   https://www.suse.com/security/cve/CVE-2011-0715.html
   https://www.suse.com/security/cve/CVE-2011-1752.html
   https://www.suse.com/security/cve/CVE-2011-1783.html

Topics%20covered

Topics Covered

security advisory subversion important server crash SUSE Linux memory consumption

References

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory subversion important server crash SUSE Linux memory consumption

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.