Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 598
Alerts This Week
Warning Icon 1 598

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 142 articles for you...
203

Mageia 9 Subversion Key Issue Resolution Notice MGAA-2026-0009

MGAA-2026-0009 - Updated subversion packages fix bug. MGAA-2026-0009 - Updated subversion packages fix bug Publication date: 04 Feb 2026 URL: https://advisories.mageia.org/MGAA-2026-0009.html Type: bugfix Affected Mageia releases: 9 Description: The python3-svn package can't be used due missing symbols. This update fixes the reported issue. References: - https://bugs.mageia.org/show_bug.cgi?id=35085 SRPMS: - 9/core/subversion-1.14.3-1.1.mga9 . Updated subversion packages addressed a critical bug in Mageia 9 that affected functionality and usability.. subversion update, Mageia security advisory, important bug fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 04, 2026 Important Mageia
172

Ubuntu 24.04: Critical Apache Subversion DoS Vulnerability CVE-2024-46901

Apache Subversion could be made to crash if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7818-2 October 16, 2025 subversion vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Apache Subversion could be made to crash if it opened a specially crafted file. Software Description: - subversion: Advanced version control system Details: USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS subversion 1.14.3-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS subversion 1.14.1-3ubuntu0.22.04.1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS subversion 1.13.0-3ubuntu0.2+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS subversion 1.9.7-4ubuntu1.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7818-2 https://ubuntu.com/security/notices/USN-7818-1 CVE-2024-46901 . Apache Subversion could crash when handling specific files, impacting Ubuntu users across various releases.. Ubuntu ApacheSubversion denial of service security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 16, 2025 Important Ubuntu
172

Ubuntu 16.04: Apache Subversion Critical DoS Vulnerability USN-7818-1

Apache Subversion could be made to crash if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7818-1 October 13, 2025 subversion vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Apache Subversion could be made to crash if it opened a specially crafted file. Software Description: - subversion: Advanced version control system Details: It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS subversion 1.9.3-2ubuntu1.3+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7818-1 CVE-2024-46901 . Apache Subversion in Ubuntu could crash when handling malformed files, causing denial of service. Update recommended.. Apache Subversion, Ubuntu Security, Denial of Service Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 13, 2025 Critical Ubuntu
100

SUSE: 2025:0871-1 critical: subversion denial of service vulnerability fix

* bsc#1234317 Cross-References: * CVE-2024-46901 . # Security update for subversion Announcement ID: SUSE-SU-2025:0871-1 Release Date: 2025-03-14T12:50:27Z Rating: important References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed mod_dav_svn denial-of-service via control characters in paths (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-871=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * subversion-devel-1.10.6-3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . An update from SUSE for the subversion package addresses a denial-of-service vulnerability linked to mod_dav_svn, classified as important in terms of security.. SUSE Linux, subversion security, denial of service issue, patch update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 14, 2025 Important SuSE
203

Mageia 9: MGASA-2025-0058 Critical Issue in Subversion Filename Validation

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901) . MGASA-2025-0058 - Updated subversion packages fix security vulnerability Publication date: 12 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0058.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-46901 Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901) References: - https://bugs.mageia.org/show_bug.cgi?id=33838 - https://www.openwall.com/lists/oss-security/2024/12/09/1 - https://www.cve.org/CVERecord?id=CVE-2024-46901 SRPMS: - 9/core/subversion-1.14.2-2.1.mga9 . Mageia has released a security advisory addressing Subversion vulnerabilities related to filename validation to help mitigate risks from malformed inputs affecting repositories. subversion, Mageia, security update, filename validation, commit access. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 12, 2025 Critical Mageia
202

openSUSE Leap 15.x moderate: SUSE-SU-2024:4366-1 subversion DoS

An update that solves one vulnerability can now be installed.. # Security update for subversion Announcement ID: SUSE-SU-2024:4366-1 Release Date: 2024-12-17T16:38:47Z Rating: moderate References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4366=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4366=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4366=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4366=1 * Basesystem Module 15-SP6 zypper in -t patchSUSE-SLE-Module-Basesystem-15-SP6-2024-4366=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4366=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4366=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4366=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4366=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.4 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 *subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 *subversion-debugsource-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . OpenSUSE has released a security patch for Subversion that resolves moderate denial-of-service vulnerabilities linked to CVE-2024-46901.. openSUSE Security, Subversion Update, SUSE Patch, Denial of Service. . LinuxSecurity.com Team

Calendar%202 Dec 17, 2024 OpenSUSE
100

SUSE: 2024:4366-1 moderate: Fix for subversion DoS Issue

* bsc#1234317 Cross-References: * CVE-2024-46901 . # Security update for subversion Announcement ID: SUSE-SU-2024:4366-1 Release Date: 2024-12-17T16:38:47Z Rating: moderate References: * bsc#1234317 Cross-References: * CVE-2024-46901 CVSS scores: * CVE-2024-46901 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-46901 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * Server Applications Module 15-SP5 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for subversion fixes the following issues: * CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-4366=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-4366=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-4366=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4366=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4366=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-4366=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-4366=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-4366=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4366=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.4 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 *subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * libsvn_auth_gnome_keyring-1-0-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-ruby-debuginfo-1.14.1-150400.5.3.1 * subversion-server-1.14.1-150400.5.3.1 * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-debuginfo-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_kwallet-1-0-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-ruby-1.14.1-150400.5.3.1 * subversion-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * libsvn_auth_gnome_keyring-1-0-debuginfo-1.14.1-150400.5.3.1 * openSUSE Leap 15.6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-1.14.1-150400.5.3.1 * subversion-devel-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * Development Tools Module15-SP5 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (noarch) * subversion-bash-completion-1.14.1-150400.5.3.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-perl-1.14.1-150400.5.3.1 * subversion-python-1.14.1-150400.5.3.1 * subversion-tools-debuginfo-1.14.1-150400.5.3.1 * subversion-python-debuginfo-1.14.1-150400.5.3.1 * subversion-perl-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-tools-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * subversion-server-1.14.1-150400.5.3.1 * subversion-debuginfo-1.14.1-150400.5.3.1 * subversion-debugsource-1.14.1-150400.5.3.1 * subversion-server-debuginfo-1.14.1-150400.5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46901.html * https://bugzilla.suse.com/show_bug.cgi?id=1234317 . This patch resolves a significant security issue in version control tools, specifically CVE-2024-46901, and outlines the procedure for implementation.. SUSE Security Advisory, Subversion Update, Moderate Security Fix, OpenSUSE. . LinuxSecurity.com Team

Calendar%202 Dec 17, 2024 SuSE
89

Fedora 41: FEDORA-2024-93e88b1c0d critical: subversion security issue

This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more information. Changes in this release are: Fix printf-format build warnings in swig-rb (r1921264). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-93e88b1c0d 2024-12-15 02:26:27.750034+00:00 -------------------------------------------------------------------------------- Name : subversion Product : Fedora 41 Version : 1.14.5 Release : 1.fc41 URL : https://subversion.apache.org/ Summary : A Modern Concurrent Version Control System Description : Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file. Subversion is intended to be a compelling replacement for CVS. -------------------------------------------------------------------------------- Update Information: This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more information. Changes in this release are: Fix printf-format build warnings in swig-rb (r1921264) Add a regression test for CVE-2024-45720 (r1921266) Make swig-py compatible with SWIG 4.3.0 (r1921505) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 11 2024 Joe Orton - 1.14.5-1 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again -------------------------------------------------------------------------------- References: [ 1 ] Bug #2331047 - subversion-1.14.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2331047 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-93e88b1c0d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . The latest Fedora 41 update addresses a vital security vulnerability concerning Subversion. Please check the advisory for comprehensive information.. subversion security, Fedora 41 updates, software vulnerabilities, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 15, 2024 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200