Joined: 12 May 2004
|Posted: Tue Apr 02, 2019 12:26 pm Post subject: [ GLSA 201904-08 ] Subversion
|Gentoo Linux Security Advisory
Title: Subversion: Denial of Service (GLSA 201904-08)
A vulnerability in Subversion could lead to a Denial of Service
Subversion is a version control system intended to eventually replace
CVS. Like CVS, it has an optional client-server architecture (where the
server can be an Apache server running mod_svn, or an ssh program as in
CVS’s :ext: method). In addition to supporting the features found in
CVS, Subversion also provides support for moving and copying files and
Vulnerable: < 1.10.4
Unaffected: >= 1.10.4
Architectures: All supported architectures
A vulnerability was discovered in Subversion’s mod_dav_svn, that could
lead to a Denial of Service Condition.
An attacker could cause a possible enial of Service condition.
There is no known workaround at this time.
All Subversion users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-vcs/subversion-1.10.4"