[SECURITY] [DLA 119-1] subversion security update

[news 28]

Package : subversion

Version : 1.6.12dfsg-7+deb6u1

CVE ID : CVE-2014-3580

Debian Bug : 773263

 

Evgeny Kotkov discovered a NULL pointer dereference while processing

REPORT requests in mod_dav_svn, the Subversion component which is used

to serve repositories with the Apache web server. A remote attacker

could abuse this vulnerability for a denial of service.

 

We recommend that you upgrade your subversion packages.

 

 

--

More information about Debian LTS: https://wiki.debian.org/LTS