Package name
subversion
Date
2013-09-17
Advisory ID
MDVSA-2013:236
Affected versions
MES5 i586 , MBS1 x86_64 , MES5 x86_64

Problem description

Updated subversion package fixes security vulnerability:

svnserve takes a --pid-file option which creates a file containing
the process id it is running as. It does not take steps to ensure that
the file it has been directed at is not a symlink. If the pid file is
in a directory writeable by unprivileged users, the destination could
be replaced by a symlink allowing for privilege escalation. svnserve
does not create a pid file by default (CVE-2013-4277).

Updated packages

MES5 i586

 f38b6d470f6b3abbbe3637f7db8f83bf  mes5/i586/apache-mod_dav_svn-1.7.13-0.1mdvmes5.2.i586.rpm
 79eaa7f7b5729e353eb2446dc5b785c4  mes5/i586/libsvn0-1.7.13-0.1mdvmes5.2.i586.rpm
 eced9a06a4b06c0043d0cc84c7134f34  mes5/i586/libsvnjavahl1-1.7.13-0.1mdvmes5.2.i586.rpm
 69de835ea0d3f19122dcebd6085150cb  mes5/i586/perl-SVN-1.7.13-0.1mdvmes5.2.i586.rpm
 da3fa6b9d3470c69f45f5ca095735e86  mes5/i586/perl-svn-devel-1.7.13-0.1mdvmes5.2.i586.rpm
 81b5d5fccd015dab9ba5a9bd1db1984a  mes5/i586/python-svn-1.7.13-0.1mdvmes5.2.i586.rpm
 5a02a46a08209eb00d171504979b40bc  mes5/i586/python-svn-devel-1.7.13-0.1mdvmes5.2.i586.rpm
 bb97e89d549dcb75c342790f3e98a21e  mes5/i586/ruby-svn-1.7.13-0.1mdvmes5.2.i586.rpm
 87de26a0718108205bf67d180ac741d2  mes5/i586/ruby-svn-devel-1.7.13-0.1mdvmes5.2.i586.rpm
 3408dd9520cd66e93545327de0ad9d64  mes5/i586/subversion-1.7.13-0.1mdvmes5.2.i586.rpm
 df5c215fe1fe39aaa4ee37f704f6e99a  mes5/i586/subversion-devel-1.7.13-0.1mdvmes5.2.i586.rpm
 865cb136fe8b7a60605d428c6a4334be  mes5/i586/subversion-doc-1.7.13-0.1mdvmes5.2.i586.rpm
 8a7f8f4c55c03782cc8bb3321dad0c47  mes5/i586/subversion-server-1.7.13-0.1mdvmes5.2.i586.rpm
 3d6705b4423dd9f6873a04937ede3161  mes5/i586/subversion-tools-1.7.13-0.1mdvmes5.2.i586.rpm
 963001ca144f80537d04527a12c2d104  mes5/i586/svn-javahl-1.7.13-0.1mdvmes5.2.i586.rpm 
 72de43be089762d25b7a138e5c846418  mes5/SRPMS/subversion-1.7.13-0.1mdvmes5.2.src.rpm

MBS1 x86_64

 15a554623be239cef5c1f8b32d9fec0f  mbs1/x86_64/apache-mod_dav_svn-1.7.13-0.1.mbs1.x86_64.rpm
 a0c7531ddfa472cae631ef7d843b45f4  mbs1/x86_64/lib64svn0-1.7.13-0.1.mbs1.x86_64.rpm
 2d7df851596596eb6307120c4f938d1f  mbs1/x86_64/lib64svn-gnome-keyring0-1.7.13-0.1.mbs1.x86_64.rpm
 caa80719005033a251fa612458881e0d  mbs1/x86_64/lib64svnjavahl1-1.7.13-0.1.mbs1.x86_64.rpm
 5722904c8dc97b9f9599f18b06788a3a  mbs1/x86_64/perl-SVN-1.7.13-0.1.mbs1.x86_64.rpm
 2cd8fe8824eb66f0cd923755e5cde1d8  mbs1/x86_64/perl-svn-devel-1.7.13-0.1.mbs1.x86_64.rpm
 fc2cd3e7aa5a1c6ff6839024ce21cc04  mbs1/x86_64/python-svn-1.7.13-0.1.mbs1.x86_64.rpm
 a6e4c1d28d11f68ef28b00cce7c30923  mbs1/x86_64/python-svn-devel-1.7.13-0.1.mbs1.x86_64.rpm
 29cf7fdd3e87513bd9d7de09819d6af1  mbs1/x86_64/ruby-svn-1.7.13-0.1.mbs1.x86_64.rpm
 f271e5772649d7ae2d38e7a56b085547  mbs1/x86_64/ruby-svn-devel-1.7.13-0.1.mbs1.x86_64.rpm
 dc62ebf26014691939c4ee2f2ecf2682  mbs1/x86_64/subversion-1.7.13-0.1.mbs1.x86_64.rpm
 ece2561d082b91449c6115b7c803e053  mbs1/x86_64/subversion-devel-1.7.13-0.1.mbs1.x86_64.rpm
 23836d4e6fd10ae59fbfa741883da2ff  mbs1/x86_64/subversion-doc-1.7.13-0.1.mbs1.x86_64.rpm
 bc2d6f0be3d16aff9d0a49f8b279ebe8  mbs1/x86_64/subversion-gnome-keyring-devel-1.7.13-0.1.mbs1.x86_64.rpm
 e3b8c167b97bced9ecea20280917cc2e  mbs1/x86_64/subversion-server-1.7.13-0.1.mbs1.x86_64.rpm
 54d71a7936c1304f7227689a55cf7504  mbs1/x86_64/subversion-tools-1.7.13-0.1.mbs1.x86_64.rpm
 0d5d041b96c18384951885829c9f8484  mbs1/x86_64/svn-javahl-1.7.13-0.1.mbs1.x86_64.rpm 
 8f29b3d96f1be7f22be000d1f6629a4a  mbs1/SRPMS/subversion-1.7.13-0.1.mbs1.src.rpm

MES5 x86_64

 cdd4e6d6349dd17625790619f60c8f07  mes5/x86_64/apache-mod_dav_svn-1.7.13-0.1mdvmes5.2.x86_64.rpm
 32fcd137383abb3e68295b810318d30b  mes5/x86_64/lib64svn0-1.7.13-0.1mdvmes5.2.x86_64.rpm
 3d8e646dce5faf522efa72b5a29b55f2  mes5/x86_64/lib64svnjavahl1-1.7.13-0.1mdvmes5.2.x86_64.rpm
 93e83a6648bd5b2c27ac199a0d2a08ed  mes5/x86_64/perl-SVN-1.7.13-0.1mdvmes5.2.x86_64.rpm
 844f66677639a071c1e1165fec0d81ef  mes5/x86_64/perl-svn-devel-1.7.13-0.1mdvmes5.2.x86_64.rpm
 d30cbade30979a3757b724a6c9ae133a  mes5/x86_64/python-svn-1.7.13-0.1mdvmes5.2.x86_64.rpm
 52a63621e29da829f54b8d3210b9e18c  mes5/x86_64/python-svn-devel-1.7.13-0.1mdvmes5.2.x86_64.rpm
 e7c15654ccd49e57eb1f8d4358d028d5  mes5/x86_64/ruby-svn-1.7.13-0.1mdvmes5.2.x86_64.rpm
 539a73b3f80f78ddbebaed77a3ae2497  mes5/x86_64/ruby-svn-devel-1.7.13-0.1mdvmes5.2.x86_64.rpm
 2e8e764515e3dbf65a411db72fab1660  mes5/x86_64/subversion-1.7.13-0.1mdvmes5.2.x86_64.rpm
 1e713f5ff21e66afe04f712b11caca84  mes5/x86_64/subversion-devel-1.7.13-0.1mdvmes5.2.x86_64.rpm
 7f32b4e7d8db8c3b73cbb4663613cb6f  mes5/x86_64/subversion-doc-1.7.13-0.1mdvmes5.2.x86_64.rpm
 f5bbfe6823d11b2d69e76b2f4b8d6962  mes5/x86_64/subversion-server-1.7.13-0.1mdvmes5.2.x86_64.rpm
 e6f00db7ff88ee9332124e62674da98f  mes5/x86_64/subversion-tools-1.7.13-0.1mdvmes5.2.x86_64.rpm
 968551d0705e89cc00a03ba94d341234  mes5/x86_64/svn-javahl-1.7.13-0.1mdvmes5.2.x86_64.rpm 
 72de43be089762d25b7a138e5c846418  mes5/SRPMS/subversion-1.7.13-0.1mdvmes5.2.src.rpm

References