The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade subversion | Jul 30, 2024 | Jun 14, 2007 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 6, 2007 |
| Suse | — | Upgrade subversion-perlUpgrade subversion-serverUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-pythonUpgrade subversion | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsvn0Upgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Jun 14, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub