Subversion SVN Protocol Parser Remote Integer Overflow Vulnerability

Solution:
The vendor has released version 1.0.5 addressing this issue, all users are urged to upgrade.

Gentoo Linux has released advisory GLSA 200406-07 addressing this issue. Please see the referenced advisory for further information. Affected users are urged to execute the following commands as superuser:
emerge sync
emerge -pv ">=dev-util/subversion-1.0.4-r1"
emerge ">=dev-util/subversion-1.0.4-r1"

OpenPKG has released advisory OpenPKG-SA-2004.028 addressing this issue. Please see the referenced advisory for further information.

Fedora advisories FEDORA-2004-165 and FEDORA-2004-166 are available for Fedora Core 1 and 2 respectively. Please see these advisories to obtain fixes for Fedora.

SuSE has released an advisory (SuSE-SA:2004:018) to address this issue. Please see the referenced advisory for more information.

Fedora Legacy has made advisory FLSA:1748 available dealing with this issue in RedHat Linux 9.0. Please see the referenced advisory for more information.


Subversion Subversion 0.27

Subversion Subversion 1.0

Subversion Subversion 1.0.1

Subversion Subversion 1.0.2

Subversion Subversion 1.0.3

Subversion Subversion 1.0.4


 

Privacy Statement
Copyright 2010, SecurityFocus