security advisorysubversiondebian
One security issue has been discovered in subversion: CVE-2020-17525: . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2646-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Anton Gladky May 03, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : subversion Version : 1.9.5-1+deb9u6 CVE ID : CVE-2020-17525 One security issue has been discovered in subversion: CVE-2020-17525: Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. For Debian 9 stretch, this problem has been fixed in version 1.9.5-1+deb9u6. We recommend that you upgrade your subversion packages. For the detailed security status of subversion please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/subversion Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Security notice DLA-2646-1 deals with subversion instability problem. Update advised for Debian 9 users.. Debian Security, Subversion Update, Service Disruption. . Severity: Important. LinuxSecurity.com Team
May 04, 2021
•Important
Debian LTS