Synopsis

Moderate: subversion security update

Type/Severity

Security Advisory: Moderate

Topic

Updated subversion packages that fix one security issue are now available
for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one
or more users to collaborate in developing and maintaining a hierarchy of
files and directories while keeping a history of all changes. The
mod_dav_svn module is used with the Apache HTTP Server to allow access to
Subversion repositories via HTTP.

A NULL pointer dereference flaw was found in the way the mod_dav_svn module
processed requests submitted against the URL of a baselined resource. A
malicious, remote user could use this flaw to cause the httpd process
serving the request to crash. (CVE-2011-1752)

Red Hat would like to thank the Apache Subversion project for reporting
this issue. Upstream acknowledges Joe Schaefer of the Apache Software
Foundation as the original reporter.

All Subversion users should upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
updated packages, you must restart the httpd daemon, if you are using
mod_dav_svn, for the update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server - Extended Update Support 4.8 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.8 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.8 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8 ppc

Fixes

• BZ - 709111 - CVE-2011-1752 subversion (mod_dav_svn): DoS (crash) via request to deliver baselined WebDAV resources

CVEs

• CVE-2011-1752

References

• https://access.redhat.com/security/updates/classification/#moderate
• http://subversion.apache.org/security/CVE-2011-1752-advisory.txt

Red Hat Enterprise Linux Server 4

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
x86_64
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
ia64
mod_dav_svn-1.1.4-4.el4.ia64.rpm	SHA-256: 4e0b46a57418a670d0fc4425fb70775dc535cd19b859a7d9a0b86222ef07c4a6
mod_dav_svn-1.1.4-4.el4.ia64.rpm	SHA-256: 4e0b46a57418a670d0fc4425fb70775dc535cd19b859a7d9a0b86222ef07c4a6
subversion-1.1.4-4.el4.ia64.rpm	SHA-256: 6fa71ef2e9d0e4a092e0073ded3e43aaaf1d62fed6271989ce2d8d1bb9c85390
subversion-1.1.4-4.el4.ia64.rpm	SHA-256: 6fa71ef2e9d0e4a092e0073ded3e43aaaf1d62fed6271989ce2d8d1bb9c85390
subversion-devel-1.1.4-4.el4.ia64.rpm	SHA-256: 23ea172fd46d4b423f223609685b4b304b77cb6fb5e55b8db12045730eea9652
subversion-devel-1.1.4-4.el4.ia64.rpm	SHA-256: 23ea172fd46d4b423f223609685b4b304b77cb6fb5e55b8db12045730eea9652
subversion-perl-1.1.4-4.el4.ia64.rpm	SHA-256: 40fb9f75994b25f0abe033b5be67353453e6d4e02374c7bf93d6472344d330b0
subversion-perl-1.1.4-4.el4.ia64.rpm	SHA-256: 40fb9f75994b25f0abe033b5be67353453e6d4e02374c7bf93d6472344d330b0
i386
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142

Red Hat Enterprise Linux Server - Extended Update Support 4.8

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
x86_64
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
ia64
mod_dav_svn-1.1.4-4.el4.ia64.rpm	SHA-256: 4e0b46a57418a670d0fc4425fb70775dc535cd19b859a7d9a0b86222ef07c4a6
mod_dav_svn-1.1.4-4.el4.ia64.rpm	SHA-256: 4e0b46a57418a670d0fc4425fb70775dc535cd19b859a7d9a0b86222ef07c4a6
subversion-1.1.4-4.el4.ia64.rpm	SHA-256: 6fa71ef2e9d0e4a092e0073ded3e43aaaf1d62fed6271989ce2d8d1bb9c85390
subversion-1.1.4-4.el4.ia64.rpm	SHA-256: 6fa71ef2e9d0e4a092e0073ded3e43aaaf1d62fed6271989ce2d8d1bb9c85390
subversion-devel-1.1.4-4.el4.ia64.rpm	SHA-256: 23ea172fd46d4b423f223609685b4b304b77cb6fb5e55b8db12045730eea9652
subversion-devel-1.1.4-4.el4.ia64.rpm	SHA-256: 23ea172fd46d4b423f223609685b4b304b77cb6fb5e55b8db12045730eea9652
subversion-perl-1.1.4-4.el4.ia64.rpm	SHA-256: 40fb9f75994b25f0abe033b5be67353453e6d4e02374c7bf93d6472344d330b0
subversion-perl-1.1.4-4.el4.ia64.rpm	SHA-256: 40fb9f75994b25f0abe033b5be67353453e6d4e02374c7bf93d6472344d330b0
i386
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142

Red Hat Enterprise Linux Workstation 4

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
x86_64
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
ia64
mod_dav_svn-1.1.4-4.el4.ia64.rpm	SHA-256: 4e0b46a57418a670d0fc4425fb70775dc535cd19b859a7d9a0b86222ef07c4a6
subversion-1.1.4-4.el4.ia64.rpm	SHA-256: 6fa71ef2e9d0e4a092e0073ded3e43aaaf1d62fed6271989ce2d8d1bb9c85390
subversion-devel-1.1.4-4.el4.ia64.rpm	SHA-256: 23ea172fd46d4b423f223609685b4b304b77cb6fb5e55b8db12045730eea9652
subversion-perl-1.1.4-4.el4.ia64.rpm	SHA-256: 40fb9f75994b25f0abe033b5be67353453e6d4e02374c7bf93d6472344d330b0
i386
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142

Red Hat Enterprise Linux Desktop 4

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
x86_64
mod_dav_svn-1.1.4-4.el4.x86_64.rpm	SHA-256: 2c582a131a0f2f8f133b23efe6a281c094de70c2b297308fe24d887c80a192c0
subversion-1.1.4-4.el4.x86_64.rpm	SHA-256: c5f9e6811238daf66726adb2980edb92e533d0d08dd613bd2fe7c3077a5ce476
subversion-devel-1.1.4-4.el4.x86_64.rpm	SHA-256: ff7d38aa3b9010a78b753e4a8f0c60ea1a48ee20dcbaf3e682238b90d1b4c293
subversion-perl-1.1.4-4.el4.x86_64.rpm	SHA-256: 93eddba6a263310f0cb81c45b1f1cd79d8e7639942682f1eca03af744a79226f
i386
mod_dav_svn-1.1.4-4.el4.i386.rpm	SHA-256: 39eb1ad1acd4bf3120cef63050895b6def96404a09c29391d4d543b17781a8d0
subversion-1.1.4-4.el4.i386.rpm	SHA-256: 14b68cbf7e6ec3740e0f517c449a0bdfb3dc872d843450760546c9cef43c2523
subversion-devel-1.1.4-4.el4.i386.rpm	SHA-256: 284c54c7c9188e74ce93d0057d3b353e646760f55b04cd0f3d88197fb62e4d59
subversion-perl-1.1.4-4.el4.i386.rpm	SHA-256: 1d7dd3477332f536a1e57315238738a1d34789c0fb5d0ad7150fbf40ca98d142

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
s390x
mod_dav_svn-1.1.4-4.el4.s390x.rpm	SHA-256: 29f3d65843cfbad5e5289c8299b5662ef45494cd2f680d8dd3961f0cdf25ba16
subversion-1.1.4-4.el4.s390x.rpm	SHA-256: 8123e91309ee336b8fc8602e82405977eb08a49314f2ce076915052a3e197ae5
subversion-devel-1.1.4-4.el4.s390x.rpm	SHA-256: 0acb69e2794dd72edf9667d385e9d2f4973680cb5226bdf98897e7ef10508bab
subversion-perl-1.1.4-4.el4.s390x.rpm	SHA-256: 209047f752e1f8fab167c2b0969ba577c238b5bb2d8170545361a89d7eb06cf0
s390
mod_dav_svn-1.1.4-4.el4.s390.rpm	SHA-256: 6c5e3e8b2923020a1facf6a46604b9a1f5ba4e80a347bbb39de9d8a4dffa3691
subversion-1.1.4-4.el4.s390.rpm	SHA-256: 22c948cbc63586b82a20b26e4844a66570d165bffa695dee9bd37fc45dce3e6d
subversion-devel-1.1.4-4.el4.s390.rpm	SHA-256: 0d63f4f063420f6058175a8f50a20568acbc72e7725e372b511e51d0abbf919e
subversion-perl-1.1.4-4.el4.s390.rpm	SHA-256: 3c4aea3ef061b9c16dd7a94fdf49df9afe1dfe54ea703bc9fb1eec4d9bf4e979

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
s390x
mod_dav_svn-1.1.4-4.el4.s390x.rpm	SHA-256: 29f3d65843cfbad5e5289c8299b5662ef45494cd2f680d8dd3961f0cdf25ba16
subversion-1.1.4-4.el4.s390x.rpm	SHA-256: 8123e91309ee336b8fc8602e82405977eb08a49314f2ce076915052a3e197ae5
subversion-devel-1.1.4-4.el4.s390x.rpm	SHA-256: 0acb69e2794dd72edf9667d385e9d2f4973680cb5226bdf98897e7ef10508bab
subversion-perl-1.1.4-4.el4.s390x.rpm	SHA-256: 209047f752e1f8fab167c2b0969ba577c238b5bb2d8170545361a89d7eb06cf0
s390
mod_dav_svn-1.1.4-4.el4.s390.rpm	SHA-256: 6c5e3e8b2923020a1facf6a46604b9a1f5ba4e80a347bbb39de9d8a4dffa3691
subversion-1.1.4-4.el4.s390.rpm	SHA-256: 22c948cbc63586b82a20b26e4844a66570d165bffa695dee9bd37fc45dce3e6d
subversion-devel-1.1.4-4.el4.s390.rpm	SHA-256: 0d63f4f063420f6058175a8f50a20568acbc72e7725e372b511e51d0abbf919e
subversion-perl-1.1.4-4.el4.s390.rpm	SHA-256: 3c4aea3ef061b9c16dd7a94fdf49df9afe1dfe54ea703bc9fb1eec4d9bf4e979

Red Hat Enterprise Linux for Power, big endian 4

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
ppc
mod_dav_svn-1.1.4-4.el4.ppc.rpm	SHA-256: 3ad0fa9f7a9dabc4a57f51a7cd109bd14ff988b7a85a9b48ba66b0a2f8687509
subversion-1.1.4-4.el4.ppc.rpm	SHA-256: 4becb648fd8388cced4cb2ad4b54b6e9829543e7e4a36cce38b498eda45dc0fe
subversion-devel-1.1.4-4.el4.ppc.rpm	SHA-256: 8f7808b67057e15502c246412dc1f4c2f3df1f0b306b4442d38f5cdb425e44d9
subversion-perl-1.1.4-4.el4.ppc.rpm	SHA-256: 4218827301ee305b757655f500cba25a3d784a483b41e9301d9864def6179c96

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8

SRPM
subversion-1.1.4-4.el4.src.rpm	SHA-256: 0df6f379e3189f8b74fb8d111e7cadc631714e5d10458462e97705aac7f59459
ppc
mod_dav_svn-1.1.4-4.el4.ppc.rpm	SHA-256: 3ad0fa9f7a9dabc4a57f51a7cd109bd14ff988b7a85a9b48ba66b0a2f8687509
subversion-1.1.4-4.el4.ppc.rpm	SHA-256: 4becb648fd8388cced4cb2ad4b54b6e9829543e7e4a36cce38b498eda45dc0fe
subversion-devel-1.1.4-4.el4.ppc.rpm	SHA-256: 8f7808b67057e15502c246412dc1f4c2f3df1f0b306b4442d38f5cdb425e44d9
subversion-perl-1.1.4-4.el4.ppc.rpm	SHA-256: 4218827301ee305b757655f500cba25a3d784a483b41e9301d9864def6179c96