This is a security notification for Apache Subversion HTTP Servers:
CVE-2018-11803
Severity: Medium
Affected Versions: Apache Subversion 1.11.0, 1.10.0 to 1.10.3
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0
to 1.10.3 will crash after dereferencing an uninitialized poi
Proposed edit to fs.py: Change 'w+' to 'wb' when copying svn stream object
>> to temporary file. Update isn't needed, and the code just needs to dump
>> the
>> raw data into a file for the external diff to access, so no
>> encoding/decoding should occur. Hence we should open the file in binary
>> m
On Thu, Feb 1, 2018, 12:34 PM Kenneth Porter wrote:
> [moving discussion to dev list as I think this is now the correct fix.]
>
> --On Wednesday, January 31, 2018 7:40 PM -0800 Kenneth Porter
> wrote:
>
> > --On Wednesday, January 31, 2018 7:23 PM -0800 Kenneth Porter
> > wrote:
> >
> >> fp