Release Info

Advisory: CLSA-2025:1754940262

OS: Ubuntu 16.04 ELS

Public date: 2025-08-11 19:24:26.957056

Project: subversion

Version: 1.9.3-2ubuntu1.3+tuxcare.els2

Errata link: https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1754940262.html

Changelog

* SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via mod_dav_svn - debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service via control characters in paths

Update

Update command: apt-get update apt-get --only-upgrade install subversion*

Packages list

libapache2-mod-svn_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb libapache2-svn_1.9.3-2ubuntu1.3+tuxcare.els2_all.deb libsvn-dev_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb libsvn-doc_1.9.3-2ubuntu1.3+tuxcare.els2_all.deb libsvn-java_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb libsvn-perl_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb libsvn-ruby1.8_1.9.3-2ubuntu1.3+tuxcare.els2_all.deb libsvn1_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb python-subversion_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb ruby-svn_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb subversion_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb subversion-tools_1.9.3-2ubuntu1.3+tuxcare.els2_amd64.deb

CVEs

CVE-2024-46901
CVE-2025-27613