Path to this page:
Subject: CVS commit: pkgsrc/devel/subversion
From: Adam Ciarcinski
Date: 2015-03-31 22:32:11
Message id: 20150331203211.73D3A98@cvs.netbsd.org
Log Message:
Changes 1.8.13:
This release addresses 3 security issues.
CVE-2015-0202: Subversion HTTP servers with FSFS repositories are
vulnerable to a remotely triggerable excessive memory
use with certain REPORT requests.
CVE-2015-0248: Subversion mod_dav_svn and svnserve are vulnerable to a
remotely triggerable assertion DoS vulnerability for certain
requests with dynamically evaluated revision numbers
CVE-2015-0251: Subversion HTTP servers allow spoofing svn:author property
values for new revisions
Files: