Bug 2264

Summary:	More vulnerabilities has been found in subversion.
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	denis.silakov
Version:	Marathon
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Platform:	---	ROSA Vulnerability identifier:
RPM Package:	subversion	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2013-06-29 08:16:22 MSK

Multiple vulnerabilities has been found and corrected in subversion:

If a filename which contains a newline character (ASCII 0x0a)
is committed to a repository using the FSFS format, the resulting
revision is corrupt. This can lead to disruption for users of the
repository (CVE-2013-1968).

Comment 1 Denis Silakov 2013-07-04 10:01:55 MSK

Already handled in bug #1970.