openSUSE Security Update : subversion (openSUSE-SU-2013:1006-1)

High Nessus Plugin ID 75035


The remote openSUSE host is missing a security update.


This update of subversion includes several bug and security fixes.

- update to 1.7.10 [bnc#821505] CVE-2013-1968 CVE-2013-2088 CVE-2013-2112

- Client-side bugfixes :

- fix 'svn revert' 'no such table: revert_list' spurious error

- fix 'svn diff' doesn't show some locally added files

- fix changelist filtering when --changelist values aren't UTF8

- fix 'svn diff --git' shows wrong copyfrom

- fix 'svn diff -x-w' shows wrong changes

- fix 'svn blame' sometimes shows every line as modified

- fix regression in 'svn status -u' output for externals

- fix file permissions change on commit of file with keywords

- improve some fatal error messages

- fix externals not removed when working copy is made shallow

- Server-side bugfixes :

- fix repository corruption due to newline in filename

- fix svnserve exiting when a client connection is aborted

- fix svnserve memory use after clear

- fix repository corruption on power/disk failure on Windows

- Developer visible changes :

- make compatible with Solaris /bin/sh

- fix infinite recursion bug in

- fix uninitialised output parameter of svn_fs_commit_txn()

- Bindings :

- fix JavaHL thread-safety bug


Update the affected subversion packages.

See Also

Plugin Details

Severity: High

ID: 75035

File Name: openSUSE-2013-494.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2014/06/13

Modified: 2014/06/13

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libsvn_auth_gnome_keyring-1-0, p-cpe:/a:novell:opensuse:libsvn_auth_gnome_keyring-1-0-debuginfo, p-cpe:/a:novell:opensuse:libsvn_auth_kwallet-1-0, p-cpe:/a:novell:opensuse:libsvn_auth_kwallet-1-0-debuginfo, p-cpe:/a:novell:opensuse:subversion, p-cpe:/a:novell:opensuse:subversion-bash-completion, p-cpe:/a:novell:opensuse:subversion-debuginfo, p-cpe:/a:novell:opensuse:subversion-debugsource, p-cpe:/a:novell:opensuse:subversion-devel, p-cpe:/a:novell:opensuse:subversion-perl, p-cpe:/a:novell:opensuse:subversion-perl-debuginfo, p-cpe:/a:novell:opensuse:subversion-python, p-cpe:/a:novell:opensuse:subversion-python-debuginfo, p-cpe:/a:novell:opensuse:subversion-server, p-cpe:/a:novell:opensuse:subversion-server-debuginfo, p-cpe:/a:novell:opensuse:subversion-tools, p-cpe:/a:novell:opensuse:subversion-tools-debuginfo, cpe:/o:novell:opensuse:12.2, cpe:/o:novell:opensuse:12.3

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2013/06/04

Reference Information

CVE: CVE-2013-1968, CVE-2013-2088, CVE-2013-2112

BID: 60264, 60265, 60267

OSVDB: 93793, 93794, 93795, 93796