[ GLSA 201309-11 ] Subversion: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Subversion: Multiple vulnerabilities (GLSA 201309-11)
Severity: low
Exploitable: local, remote
Date: September 23, 2013
Bug(s): #350166, #356741, #369065, #463728, #463860, #472202, #482166
ID: 201309-11

Synopsis

Multiple vulnerabilities have been found in Subversion, allowing
attackers to cause a Denial of Service, escalate privileges, or obtain
sensitive information.


Background

Subversion is a versioning system designed to be a replacement for CVS.

Affected Packages

Package: dev-vcs/subversion
Vulnerable: < 1.7.13
Unaffected: >= 1.7.13
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Subversion. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker could cause a Denial of Service condition or obtain
sensitive information. A local attacker could escalate his privileges to
the user running svnserve.


Workaround

There is no known workaround at this time.

Resolution

All Subversion users should upgrade to the latest version: