Just to point out that EL5 does not get this patch: https://rhn.redhat.com/errata/RHSA-2015-0165.html "A NULL pointer dereference flaw was found in the way the mod_dav_svn module handled REPORT requests. A remote, unauthenticated attacker could use a specially crafted REPORT request to crash mod_dav_svn. (CVE-2014-3580)" https://bugzilla.redhat.com/show_bug.cgi?id=1174054#c17 -- LF
Reasonably Related Threads
- CESA-2015:0165 Moderate CentOS 6 subversion Security Update
- Subversion CentOS documentation problem - can someone fix this?
- CentOS-announce Digest, Vol 120, Issue 4
- CEBA-2012:0574 CentOS 5 subversion Update
- CESA-2014:0255 Moderate CentOS 5 subversion Update
Wisdom of the Ancients
