subversion-1.7.14-11.el7

エラータID: AXSA:2017-2055:01

Release date: 
Wednesday, September 6, 2017 - 03:40
Subject: 
subversion-1.7.14-11.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Subversion is a concurrent version control system which enables one
or more users to collaborate in developing and maintaining a
hierarchy of files and directories while keeping a history of all
changes. Subversion only stores the differences between versions,
instead of every complete file. Subversion is intended to be a
compelling replacement for CVS.

CVE-2017-9800
A maliciously constructed svn ssh:// URL would cause Subversion
clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through
1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be
generated by a malicious server, by a malicious user committing to a
honest server (to attack another user of that server's repositories),
or by a proxy server. The vulnerability affects all clients, including
those that use file://, http://, and plain (untunneled) svn://.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. subversion-1.7.14-11.el7.src.rpm
    MD5: 6c83c01b12fcaae5d743cd478095feac
    SHA-256: 540d4ee5e91eaa66fbae4e1567420d9834e6779031e9b13421d1e0dcba8bac58
    Size: 5.90 MB

Asianux Server 7 for x86_64
  1. mod_dav_svn-1.7.14-11.el7.x86_64.rpm
    MD5: b9701743ec948adaaa437bf82476f984
    SHA-256: e21cb0f98996f7c77a8be92b22942b406a18a2f56d6924757a1a3f02f5a76024
    Size: 100.97 kB
  2. subversion-1.7.14-11.el7.x86_64.rpm
    MD5: b89d685e77d2809023ccb84ce30b2de7
    SHA-256: 950eb2ce0082a33c74049ebefe74a8d62e79d75d915ea4d02a578a50b3e6ba1f
    Size: 1.00 MB
  3. subversion-gnome-1.7.14-11.el7.x86_64.rpm
    MD5: e68c6b93b3b23a1649bd7bb03d770b0c
    SHA-256: 13f25a6149ac493415f78ac1e4d058ab4c56b9a134c281fea2f50f167d91dd93
    Size: 30.14 kB
  4. subversion-libs-1.7.14-11.el7.x86_64.rpm
    MD5: d0b633518fc479021cf7910b838233e7
    SHA-256: 6be9cf8275134d797259860ae84d17ad378d29df83abfbb5c710923ff4272f06
    Size: 920.44 kB
  5. subversion-1.7.14-11.el7.i686.rpm
    MD5: c7fc7e9098f6a94493c30887679b1797
    SHA-256: 0cdbe87952535234c5c524270ec68d76fdc26f8bef0097ea67b28e5fd85eeb46
    Size: 0.99 MB
  6. subversion-gnome-1.7.14-11.el7.i686.rpm
    MD5: d2e0e76c007763cf242ecb382b4eb86b
    SHA-256: 28276145d6e16831b32df89e9a0ef4bc127c1d084ff61774069f78584c604384
    Size: 30.19 kB
  7. subversion-libs-1.7.14-11.el7.i686.rpm
    MD5: 3100b6829ccd24f81501059c4d5b81f9
    SHA-256: 012e28ba60781497d9b5b1f63ae34d435b866faa4d02a7416425b85f4be064fe
    Size: 933.16 kB