From 9b02818638581dfcc2b074a3aa241bef2c5b5ebb5e77dabd18a5eef9e10816e9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Wed, 23 Jan 2019 09:21:05 +0000 Subject: [PATCH] Accepting request 667943 from home:kbabioch:branches:devel:tools:scm:svn - Fixed a vulnerability that allowed malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root path from a recursive directory listing request (CVE-2018-11803 bsc#1122842) OBS-URL: https://build.opensuse.org/request/show/667943 OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=297 --- subversion.changes | 3 +++ subversion.spec | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/subversion.changes b/subversion.changes index bfebb7f..7292ed9 100644 --- a/subversion.changes +++ b/subversion.changes @@ -10,6 +10,9 @@ Fri Jan 18 14:03:54 UTC 2019 - astieger@suse.com * Server: fix a crash in mod_http2 * JavaHL bindings: Fix crash in client code when using external diff +- Fixed a vulnerability that allowed malicious SVN clients to trigger a crash + in mod_dav_svn by omitting the root path from a recursive directory listing + request (CVE-2018-11803 bsc#1122842) ------------------------------------------------------------------- Fri Jan 11 09:21:41 UTC 2019 - Tomáš Chvátal diff --git a/subversion.spec b/subversion.spec index 9b1ec05..05dda55 100644 --- a/subversion.spec +++ b/subversion.spec @@ -13,7 +13,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ #