Medium ELSA-2015-0166 3 CVEs

Moderate: subversion security update (Oracle Linux 7)

Published Feb 10, 2015 · Updated Feb 10, 2015

Ecosystem: Oracle Linux

Summary

[1.7.14-7]
- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 7	mod_dav_svn	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-devel	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-gnome	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-javahl	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-kde	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-libs	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-perl	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-python	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-ruby	0:1.7.14-7.el7_0
Oracle Linux · 7	subversion-tools	0:1.7.14-7.el7_0

Vulnerabilities 3

Unscored —

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authenticat…

subversion subversion Debian Ubuntu

Aug 19, 2014
Unscored —

CVE-2014-3580 EPSS 11%

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote…

subversion subversion Debian Ubuntu

Dec 18, 2014
Unscored —

CVE-2014-8108

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remo…

subversion subversion Debian Ubuntu

Dec 18, 2014