id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
6354	subversion-1.8.13	Fernando de Oliveira	Fernando de Oliveira	"[https://www.apache.org/dist/subversion/subversion-1.8.13.tar.bz2]

SHA1:
aa0bd14ac6a8f0fb178cc9ff325387de01cd7452 subversion-1.8.13.tar.bz2

[https://mail-archives.apache.org/mod_mbox/subversion-announce/201503.mbox/%3C20150331120220.GO17807%40jim.stsp.name%3E]

{{{
This release addresses 3 security issues.

  CVE-2015-0202: Subversion HTTP servers with FSFS repositories are
                 vulnerable to a remotely triggerable excessive memory
                 use with certain REPORT requests.
  CVE-2015-0248: Subversion mod_dav_svn and svnserve are vulnerable to a
                 remotely triggerable assertion DoS vulnerability for certain
                 requests with dynamically evaluated revision numbers
  CVE-2015-0251: Subversion HTTP servers allow spoofing svn:author property
                 values for new revisions
For details see the advisories at:

    http://subversion.apache.org/security/CVE-2015-0202-advisory.txt
    http://subversion.apache.org/security/CVE-2015-0248-advisory.txt
    http://subversion.apache.org/security/CVE-2015-0251-advisory.txt
}}}


"	enhancement	closed	high	7.8	BOOK	SVN	medium	fixed