Subversion (SVN) is a concurrent version control system which enables oneor more users to collaborate in developing and maintaining a hierarchy offiles and directories while keeping a history of all changes.Matt Lewis, of Google, reported multiple heap overflow flaws in Subversion(server and client) when parsing binary deltas. A malicious user withcommit access to a server could use these flaws to cause a heap overflow onthat server. A malicious server could use these flaws to cause a heapoverflow on a client when it attempts to checkout or update. These heapoverflows can result in a crash or, possibly, arbitrary code execution.(CVE-2009-2411)All Subversion users should upgrade to these updated packages, whichcontain a backported patch to correct these issues. After installing theupdated packages, the Subversion server must be restarted for the updateto take effect: restart httpd if you are using mod_dav_svn, or restartsvnserve if it is used.