MGASA-2013-0175

Dashboard / Vulnerabilities / MGASA-2013-0175

MGASA-2013-0175

Summary: Updated subversion packages fix security vulnerabilities

Details: Subversion repositories with the FSFS repository data store format can be corrupted by newline characters in filenames. A remote attacker with a malicious client could use this flaw to disrupt the service for other users using that repository (CVE-2013-1968). Subversion's svnserve server process may exit when an incoming TCP connection is closed early in the connection process. A remote attacker can cause svnserve to exit and thus deny service to users of the server (CVE-2013-2112)

References: https://advisories.mageia.org/MGASA-2013-0175.html, https://bugs.mageia.org/show_bug.cgi?id=10479, http://subversion.apache.org/security/CVE-2013-1968-advisory.txt, http://subversion.apache.org/security/CVE-2013-2112-advisory.txt, http://www.debian.org/security/2013/dsa-2703