Ubuntu alert USN-7818-1 (subversion)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7818-1] Apache Subversion vulnerability
Date:
             
 
Mon, 13 Oct 2025 16:43:34 +0000
Message-ID:
             
 
<E1v8Le2-000708-Vn@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7818-1
October 13, 2025

subversion vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Apache Subversion could be made to crash if it opened a specially crafted
file.

Software Description:
- subversion: Advanced version control system

Details:

It was discovered that Apache Subversion incorrectly parsed control
characters in filenames. An attacker could possibly use this issue to
commit a corrupted revision to a repository, leading to a denial of
service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  subversion                      1.9.3-2ubuntu1.3+esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7818-1
  CVE-2024-46901


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=1ohe
-----END PGP SIGNATURE-----