Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.rc > #297303 > unrolled thread
| Started by | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| First post | 2021-02-10 15:40 +0100 |
| Last post | 2021-02-13 18:10 +0100 |
| Articles | 6 — 3 participants |
Back to article view | Back to linux.debian.bugs.rc
Bug#982464: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn Salvatore Bonaccorso <carnil@debian.org> - 2021-02-10 15:40 +0100
Processed: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-02-10 15:40 +0100
Bug#982464: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn Salvatore Bonaccorso <carnil@debian.org> - 2021-02-10 21:30 +0100
Bug#982464: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn James McCoy <jamessan@debian.org> - 2021-02-10 21:30 +0100
Bug#982464: marked as done (subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-02-11 04:30 +0100
Bug#982464: marked as done (subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-02-13 18:10 +0100
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2021-02-10 15:40 +0100 |
| Subject | Bug#982464: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn |
| Message-ID | <BGYOR-7OY-3@gated-at.bofh.it> |
Source: subversion
Version: 1.14.0-3
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Control: found -1 1.10.4-1+deb10u1
Control: found -1 1.10.4-1
Hi,
The following vulnerability was published for subversion.
CVE-2020-17525[0]:
| Remote unauthenticated denial-of-service in Subversion mod_authz_svn
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2020-17525
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17525
[1] https://subversion.apache.org/security/CVE-2020-17525-advisory.txt
Regards,
Salvatore
[toc] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2021-02-10 15:40 +0100 |
| Subject | Processed: subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn |
| Message-ID | <BGYOR-7OY-1@gated-at.bofh.it> |
| In reply to | #297303 |
Processing control commands: > found -1 1.10.4-1+deb10u1 Bug #982464 [src:subversion] subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn Marked as found in versions subversion/1.10.4-1+deb10u1. > found -1 1.10.4-1 Bug #982464 [src:subversion] subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn Marked as found in versions subversion/1.10.4-1. -- 982464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982464 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2021-02-10 21:30 +0100 |
| Message-ID | <BH4hz-2Je-13@gated-at.bofh.it> |
| In reply to | #297303 |
Hi James, On Wed, Feb 10, 2021 at 03:20:22PM -0500, James McCoy wrote: > On Wed, Feb 10, 2021 at 03:36:11PM +0100, Salvatore Bonaccorso wrote: > > The following vulnerability was published for subversion. > > > > CVE-2020-17525[0]: > > | Remote unauthenticated denial-of-service in Subversion mod_authz_svn > > I'll have uploads ready for this tonight to both sid and buster. I'll > send the debdiff for review before uploading to buster-security. Ack, thank you! Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | James McCoy <jamessan@debian.org> |
|---|---|
| Date | 2021-02-10 21:30 +0100 |
| Message-ID | <BH4hz-2Je-15@gated-at.bofh.it> |
| In reply to | #297303 |
On Wed, Feb 10, 2021 at 03:36:11PM +0100, Salvatore Bonaccorso wrote: > The following vulnerability was published for subversion. > > CVE-2020-17525[0]: > | Remote unauthenticated denial-of-service in Subversion mod_authz_svn I'll have uploads ready for this tonight to both sid and buster. I'll send the debdiff for review before uploading to buster-security. Cheers, -- James GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2021-02-11 04:30 +0100 |
| Subject | Bug#982464: marked as done (subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn) |
| Message-ID | <BHaQ1-6Io-1@gated-at.bofh.it> |
| In reply to | #297303 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Thu, 11 Feb 2021 03:18:25 +0000 with message-id <E1lA2Ur-0001t5-Pm@fasolo.debian.org> and subject line Bug#982464: fixed in subversion 1.14.1-1 has caused the Debian Bug report #982464, regarding subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 982464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982464 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2021-02-13 18:10 +0100 |
| Subject | Bug#982464: marked as done (subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn) |
| Message-ID | <BI6AF-7LL-7@gated-at.bofh.it> |
| In reply to | #297303 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Sat, 13 Feb 2021 17:02:07 +0000 with message-id <E1lAyJ5-0002ST-Kv@fasolo.debian.org> and subject line Bug#982464: fixed in subversion 1.10.4-1+deb10u2 has caused the Debian Bug report #982464, regarding subversion: CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion mod_authz_svn to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 982464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982464 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.bugs.rc
csiph-web