Oval Definition:oval:com.redhat.rhsa:def:20110861
Revision Date:2011-06-08Version:640
Title:RHSA-2011:0861: subversion security update (Moderate)
Description:Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The mod_dav_svn module is used with the Apache HTTP Server to allow access to Subversion repositories via HTTP.

  • A NULL pointer dereference flaw was found in the way the mod_dav_svn module processed requests submitted against the URL of a baselined resource. A malicious, remote user could use this flaw to cause the httpd process serving the request to crash. (CVE-2011-1752)

    Red Hat would like to thank the Apache Subversion project for reporting this issue. Upstream acknowledges Joe Schaefer of the Apache Software Foundation as the original reporter.

    All Subversion users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, you must restart the httpd daemon, if you are using mod_dav_svn, for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2011-1752
    RHSA-2011:0861
    RHSA-2011:0861-01
    RHSA-2011:0861-01
    Platform(s):Red Hat Enterprise Linux 4
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • mod_dav_svn is earlier than 0:1.1.4-4.el4
  • AND mod_dav_svn is signed with Red Hat redhatrelease2 key
  • subversion is earlier than 0:1.1.4-4.el4
  • AND subversion is signed with Red Hat redhatrelease2 key
  • subversion-devel is earlier than 0:1.1.4-4.el4
  • AND subversion-devel is signed with Red Hat redhatrelease2 key
  • subversion-perl is earlier than 0:1.1.4-4.el4
  • AND subversion-perl is signed with Red Hat redhatrelease2 key
  • BACK