DSA-1855-1

NameDSA-1855-1
SourceDebian
Descriptionsubversion - heap overflow
ReferencesCVE-2009-2411
Debian/oldstablepackage subversion is fixed in oldstable-security.
Debian/stablenot vulnerable
Debian/testingnot known to be vulnerable
Debian/unstablenot known to be vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
subversion (PTS)etch1.4.2dfsg1-2vulnerable
etch (security)1.4.2dfsg1-3fixed
lenny, lenny (security)1.5.1dfsg1-4fixed

The next table lists affected binary packages.

Binary PackageReleaseVersionStatusArchitecures
libapache2-svn, libsvn-dev, libsvn-perl, libsvn-ruby1.8, libsvn1, python-subversion, subversionetch1.4.2dfsg1-2vulnerablealpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
etch (security)1.4.2dfsg1-3fixedalpha, amd64, arm, i386, ia64, mips, mipsel, powerpc, s390
lenny, lenny (security)1.5.1dfsg1-4fixedalpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
libsvn-doc, libsvn-javahl, libsvn-ruby, subversion-toolsetch1.4.2dfsg1-2vulnerableall
etch (security)1.4.2dfsg1-3fixedall
libsvn-doc, libsvn-ruby, subversion-toolslenny, lenny (security)1.5.1dfsg1-4fixedall
libsvn-javaetch1.4.2dfsg1-2vulnerablealpha, amd64, hppa, i386, ia64, powerpc, s390, sparc
etch (security)1.4.2dfsg1-3fixedalpha, amd64, i386, ia64, powerpc, s390
lenny, lenny (security)1.5.1dfsg1-4fixedamd64, armel, i386, ia64, powerpc, s390, sparc

The information above is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
subversionsourceetch1.4.2dfsg1-3unknown
subversionsourcelenny1.5.1dfsg1-4unknown

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Imprint