GLSA 201904-08: Subversion: Denial of Service
Severity: | normal |
Title: | Subversion: Denial of Service |
Date: | 04/02/2019 |
Bugs: |
|
ID: | 201904-08 |
Synopsis
A vulnerability in Subversion could lead to a Denial of Service condition.Background
Subversion is a version control system intended to eventually replace CVS. Like CVS, it has an optional client-server architecture (where the server can be an Apache server running mod_svn, or an ssh program as in CVS’s :ext: method). In addition to supporting the features found in CVS, Subversion also provides support for moving and copying files and directories.
Affected packages
Package | Vulnerable | Unaffected | Architecture(s) |
---|---|---|---|
dev-vcs/subversion | < 1.10.4 | >= 1.10.4 | All supported architectures |
Description
A vulnerability was discovered in Subversion’s mod_dav_svn, that could lead to a Denial of Service Condition.
Impact
An attacker could cause a possible enial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Subversion users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-vcs/subversion-1.10.4"
References
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2010 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.