Synopsis:	Moderate: subversion security and bug fix update
Issue date:	2011-03-08
CVE Names:	CVE-2011-0715

A NULL pointer dereference flaw was found in the way the mod_dav_svn 
module processed certain requests to lock working copy paths in a 
repository. A remote attacker could issue a lock request that could 
cause the httpd process serving the request to crash. (CVE-2011-0715)

This update also fixes the following bug:

* A regression was found in the handling of repositories which do not 
have a "db/fsfs.conf" file. The "svnadmin hotcopy" command would fail 
when trying to produce a copy of such a repository. This command has 
been fixed to ignore the absence of the "fsfs.conf" file. The "svnadmin 
hotcopy" command will now succeed for this type of repository. (BZ#681522)

After installing the updated packages, you must restart the httpd 
daemon, if you are using mod_dav_svn, for the update to take effect.

SL 5.x

     SRPMS:
subversion-1.6.11-7.el5_6.3.src.rpm
     i386:
mod_dav_svn-1.6.11-7.el5_6.3.i386.rpm
subversion-1.6.11-7.el5_6.3.i386.rpm
subversion-devel-1.6.11-7.el5_6.3.i386.rpm
subversion-javahl-1.6.11-7.el5_6.3.i386.rpm
subversion-perl-1.6.11-7.el5_6.3.i386.rpm
subversion-ruby-1.6.11-7.el5_6.3.i386.rpm
     x86_64:
mod_dav_svn-1.6.11-7.el5_6.3.x86_64.rpm
subversion-1.6.11-7.el5_6.3.i386.rpm
subversion-1.6.11-7.el5_6.3.x86_64.rpm
subversion-devel-1.6.11-7.el5_6.3.i386.rpm
subversion-devel-1.6.11-7.el5_6.3.x86_64.rpm
subversion-javahl-1.6.11-7.el5_6.3.x86_64.rpm
subversion-perl-1.6.11-7.el5_6.3.x86_64.rpm
subversion-ruby-1.6.11-7.el5_6.3.x86_64.rpm

-Connie Sieh
-Troy Dawson