Explore top 10 tips to secure your open-source projects now. Read More
×MGAA-2026-0009 - Updated subversion packages fix bug. MGAA-2026-0009 - Updated subversion packages fix bug Publication date: 04 Feb 2026 URL: https://advisories.mageia.org/MGAA-2026-0009.html Type: bugfix Affected Mageia releases: 9 Description: The python3-svn package can't be used due missing symbols. This update fixes the reported issue. References: - https://bugs.mageia.org/show_bug.cgi?id=35085 SRPMS: - 9/core/subversion-1.14.3-1.1.mga9 . Updated subversion packages addressed a critical bug in Mageia 9 that affected functionality and usability.. subversion update, Mageia security advisory, important bug fix. . Severity: Important. LinuxSecurity.com Team
Apache Subversion could be made to crash if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7818-2 October 16, 2025 subversion vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Apache Subversion could be made to crash if it opened a specially crafted file. Software Description: - subversion: Advanced version control system Details: USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS subversion 1.14.3-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS subversion 1.14.1-3ubuntu0.22.04.1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS subversion 1.13.0-3ubuntu0.2+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS subversion 1.9.7-4ubuntu1.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7818-2 https://ubuntu.com/security/notices/USN-7818-1 CVE-2024-46901 . Apache Subversion could crash when handling specific files, impacting Ubuntu users across various releases.. Ubuntu ApacheSubversion denial of service security. . Severity: Important. LinuxSecurity.com Team
Apache Subversion could be made to crash if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7818-1 October 13, 2025 subversion vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Apache Subversion could be made to crash if it opened a specially crafted file. Software Description: - subversion: Advanced version control system Details: It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS subversion 1.9.3-2ubuntu1.3+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7818-1 CVE-2024-46901 . Apache Subversion in Ubuntu could crash when handling malformed files, causing denial of service. Update recommended.. Apache Subversion, Ubuntu Security, Denial of Service Vulnerability. . Severity: Critical. LinuxSecurity.com Team
* bsc#1234317 Cross-References: * CVE-2024-46901 . # Security update for subversion Announcement ID: SUSE-SU-2025:0871-1 Release Date: 2025-03-14T12:50:27Z Rating: important References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed mod_dav_svn denial-of-service via control characters in paths (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-871=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * subversion-devel-1.10.6-3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . An update from SUSE for the subversion package addresses a denial-of-service vulnerability linked to mod_dav_svn, classified as important in terms of security.. SUSE Linux, subversion security, denial of service issue, patch update. . Severity: Important. LinuxSecurity.com Team
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901) . MGASA-2025-0058 - Updated subversion packages fix security vulnerability Publication date: 12 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0058.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-46901 Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901) References: - https://bugs.mageia.org/show_bug.cgi?id=33838 - https://www.openwall.com/lists/oss-security/2024/12/09/1 - https://www.cve.org/CVERecord?id=CVE-2024-46901 SRPMS: - 9/core/subversion-1.14.2-2.1.mga9 . Mageia has released a security advisory addressing Subversion vulnerabilities related to filename validation to help mitigate risks from malformed inputs affecting repositories. subversion, Mageia, security update, filename validation, commit access. . Severity: Critical. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for subversion Announcement ID: SUSE-SU-2024:4366-1 Release Date: 2024-12-17T16:38:47Z Rating: moderate References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4366=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4366=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4366=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4366=1 * Basesystem Module 15-SP6 zypper in -t patchSUSE-SLE-Module-Basesystem-15-SP6-2024-4366=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4366=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4366=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4366=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4366=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.4 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 *subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 *subversion-debugsource-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . OpenSUSE has released a security patch for Subversion that resolves moderate denial-of-service vulnerabilities linked to CVE-2024-46901.. openSUSE Security, Subversion Update, SUSE Patch, Denial of Service. . LinuxSecurity.com Team
* bsc#1234317 Cross-References: * CVE-2024-46901 . # Security update for subversion Announcement ID: SUSE-SU-2024:4366-1 Release Date: 2024-12-17T16:38:47Z Rating: moderate References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4366=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4366=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4366=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4366=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4366=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4366=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4366=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4366=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4366=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.4 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 *subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Development Tools Module15-SP5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . This patch resolves a significant security issue in version control tools, specifically CVE-2024-46901, and outlines the procedure for implementation.. SUSE Security Advisory, Subversion Update, Moderate Security Fix, OpenSUSE. . LinuxSecurity.com Team
This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more information. Changes in this release are: Fix printf-format build warnings in swig-rb (r1921264). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-93e88b1c0d 2024-12-15 02:26:27.750034+00:00 -------------------------------------------------------------------------------- Name : subversion Product : Fedora 41 Version : 1.14.5 Release : 1.fc41 URL : https://subversion.apache.org/ Summary : A Modern Concurrent Version Control System Description : Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file. Subversion is intended to be a compelling replacement for CVS. -------------------------------------------------------------------------------- Update Information: This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more information. Changes in this release are: Fix printf-format build warnings in swig-rb (r1921264) Add a regression test for CVE-2024-45720 (r1921266) Make swig-py compatible with SWIG 4.3.0 (r1921505) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2024 Joe Orton - 1.14.5-1 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again -------------------------------------------------------------------------------- References: [ 1 ] Bug #2331047 - subversion-1.14.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2331047 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-93e88b1c0d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.