Summary
[1.7.14-11]
- add security fix for CVE-2017-9800
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | mod_dav_svn | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-devel | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-gnome | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-javahl | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-kde | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-libs | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-perl | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-python | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-ruby | 0:1.7.14-11.el7_4 |
| Oracle Linux · 7 | subversion-tools | 0:1.7.14-11.el7_4 |
Vulnerabilities 1
-
Unscored —CVE-2017-9800 EPSS 19%
A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x…