From owner-freebsd-security@freebsd.org  Thu Aug 13 20:37:40 2015
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id E15A59B82CC
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Thu, 13 Aug 2015 20:37:40 +0000 (UTC)
 (envelope-from mason@blisses.org)
Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits)) (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id C8559151
 for <freebsd-security@freebsd.org>; Thu, 13 Aug 2015 20:37:40 +0000 (UTC)
 (envelope-from mason@blisses.org)
Received: from blisses.org (cocytus.blisses.org [23.25.209.73])
 by phlegethon.blisses.org (Postfix) with ESMTPSA id 05C151491CA;
 Thu, 13 Aug 2015 16:37:38 -0400 (EDT)
Date: Thu, 13 Aug 2015 16:37:37 -0400
From: Mason Loring Bliss <mason@blisses.org>
To: freebsd-security@freebsd.org
Cc: info@freebsdfoundation.org
Subject: Re: Quarterly packages and security updates...
Message-ID: <20150813203737.GD4093@blisses.org>
References: <20150813202007.GC4093@blisses.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20150813202007.GC4093@blisses.org>
User-Agent: Mutt/1.5.23 (2014-03-12)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Aug 2015 20:37:41 -0000

On Thu, Aug 13, 2015 at 04:20:08PM -0400, Mason Loring Bliss wrote:

> subversion-1.8.10_3 is vulnerable:

To clarify, I had this one artificially held back. The up to date quarterly
package vulnerability list for Subversion looks like this:

subversion-1.8.13_2 is vulnerable:
subversion -- multiple vulnerabilities
CVE: CVE-2015-3187
CVE: CVE-2015-3184
WWW:
https://vuxml.FreeBSD.org/freebsd/57bb5e3d-3c4f-11e5-a4d4-001e8c75030d.html

-- 
Mason Loring Bliss          mason@blisses.org          Ewige Blumenkraft!
awake ? sleep : random() & 2 ? dream : sleep; -- Hamlet, Act III, Scene I