Date: Fri, 11 Aug 2017 13:59:57 +0000 (UTC) From: "Lev A. Serebryakov" <lev@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r447761 - head/security/vuxml Message-ID: <201708111359.v7BDxw3W010465@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: lev Date: Fri Aug 11 13:59:57 2017 New Revision: 447761 URL: https://svnweb.freebsd.org/changeset/ports/447761 Log: Add CVE-2017-9800 for subversion ports. Security: http://subversion.apache.org/security/CVE-2017-9800-advisory.txt Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Fri Aug 11 13:59:57 2017 (r447760) +++ head/security/vuxml/vuln.xml Fri Aug 11 13:59:57 2017 (r447761) @@ -58,6 +58,50 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="6e80bd9b-7e9b-11e7-abfe-90e2baa3bafc"> + <topic>subversion -- Arbitrary code execution vulnerability</topic> + <affects> + <package> + <name>subversion</name> + <range><ge>1.9.0</ge><le>1.9.6</le></range> + </package> + <package> + <name>subversion18</name> + <range><ge>1.0.0</ge><le>1.8.18</le></range> + </package> + <package> + <name>subversion-static</name> + <range><ge>1.0.0</ge><le>1.8.18</le></range> + <range><ge>1.9.0</ge><le>1.9.6</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>subversion team reports:</p> + <blockquote cite="http://subversion.apache.org/security/CVE-2017-9800-advisory.txt">; + <p>A Subversion client sometimes connects to URLs provided by the repository. + This happens in two primary cases: during 'checkout', 'export', 'update', and + 'switch', when the tree being downloaded contains svn:externals properties; + and when using 'svnsync sync' with one URL argument.</p> + <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients to + run an arbitrary shell command. Such a URL could be generated by a malicious + server, by a malicious user committing to a honest server (to attack another + user of that server's repositories), or by a proxy server.</p> + <p>The vulnerability affects all clients, including those that use file://, + http://, and plain (untunneled) svn://.</p> + <p>An exploit has been tested.</p> + </blockquote> + </body> + </description> + <references> + <url>http://subversion.apache.org/security/CVE-2017-9800-advisory.txt</url>; + </references> + <dates> + <discovery>2017-08-10</discovery> + <entry>2017-08-11</entry> + </dates> + </vuln> + <vuln vid="abcc5ad3-7e6a-11e7-93f7-d43d7e971a1b"> <topic>GitLab -- two vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201708111359.v7BDxw3W010465>