Stay Secure with the Latest Linux Advisories

security advisorysecurity issuesubversion

Fedora 30: FEDORA-2019-f6bc68e455 Critical: Subversion DoS Issues

This update includes the latest stable release of _Apache Subversion_, version **1.12.2**. This update addresses two security vulnerabilities in **svnserve**, `CVE-2018-11782` and `CVE-2019-0203`. For more information, see: https://subversion.apache.org/security/CVE-2018-11782-advisory.txt https://subversion.apache.org/security/CVE-2019-0203-advisory.txt ## User-. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-f6bc68e455 2019-08-06 01:18:14.744706 --------------------------------------------------------------------------------Name : subversion Product : Fedora 30 Version : 1.12.2 Release : 1.fc30 URL : https://subversion.apache.org/ Summary : A Modern Concurrent Version Control System Description : Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file. Subversion is intended to be a compelling replacement for CVS. --------------------------------------------------------------------------------Update Information: This update includes the latest stable release of _Apache Subversion_, version **1.12.2**. This update addresses two security vulnerabilities in **svnserve**, `CVE-2018-11782` and `CVE-2019-0203`. For more information, see: https://subversion.apache.org/security/CVE-2018-11782-advisory.txt https://subversion.apache.org/security/CVE-2019-0203-advisory.txt ## User-visible changes: * Fix conflict resolver bug: local and incoming edits swapped. * Fix memory lifetime problem in a libsvn_wc error code path. --------------------------------------------------------------------------------ChangeLog: * Thu Jul 25 2019 Joe Orton - 1.12.2-1 - update to 1.12.2 * Sat Jun 1 2019 Jitka Plesnikova - 1.12.0-2 - Perl 5.30 rebuild * Wed May 12019 Joe Orton - 1.12.0-1 - update to 1.12.0 (#1702471) * Wed Apr 17 2019 Joe Orton - 1.11.1-5 - fix build with APR 1.7.0 (upstream r1857391) --------------------------------------------------------------------------------References: [ 1 ] Bug #1735579 - CVE-2019-0203 subversion: remote unauthenticated denial-of-service in subversion svnserve [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1735579 [ 2 ] Bug #1735578 - CVE-2018-11782 subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev' [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1735578 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-f6bc68e455' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest release of Apache Subversion 1.12.2 addresses two critical vulnerabilities in Fedora 30. It is recommended to perform the update promptly to enhance security.. Apache Subversion, Fedora Package, Security Advisory, DoS Impact, Version Control System. . Severity: Critical. LinuxSecurity.com Team

Aug 05, 2019 •Critical Fedora