Issued:

2012-06-20

Updated:

2012-06-20

RHEA-2012:0896 - subversion and neon bug fix and enhancement update

Synopsis

subversion and neon bug fix and enhancement update

Type/Severity

Product Enhancement Advisory (none)

Topic

Updated subversion and neon packages that fix several bugs and add an enhancement are now available.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Neon is an HTTP library and WebDAV client library used by Subversion.

These updated subversion and neon packages provide fixes for the following bugs:

• The "svn" command unnecessarily required access to the parent directory during certain types of merge operations, which could be denied by the authorization policy on the server. The SVN client has been fixed to not require such access. (BZ#749494)

• When the "AuthzForceUsernameCase lower" directive was configured in the /etc/httpd/conf.d/subversion.conf file, the "mod_authz_svn" module could crash with a segmentation fault. With this update, segmentation faults no longer occur when using the "AuthzForceUsernameCase" directive. (BZ#751321)

• Due to a bug in the neon HTTP library, the Server Name Indication (SNI) support was disabled on an SVN client. This update upgrades the neon library, and SNI now works as expected. (BZ#798636)

In addition, the updated subversion packages provide the following enhancement:

• This update adds an init script for the "svnserve" daemon. (BZ#711904, BZ#720790)

Users are advised to upgrade to these updated subversion and neon packages, which resolve these issues and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• subversion-perl-1.6.11-7.el6.s390.rpm
• subversion-gnome-1.6.11-7.el6.i686.rpm
• neon-0.29.3-2.el6.s390x.rpm
• subversion-perl-1.6.11-7.el6.i686.rpm
• neon-devel-0.29.3-2.el6.ppc64.rpm
• subversion-ruby-1.6.11-7.el6.x86_64.rpm
• subversion-javahl-1.6.11-7.el6.s390.rpm
• subversion-ruby-1.6.11-7.el6.i686.rpm
• neon-0.29.3-2.el6.ppc.rpm
• subversion-gnome-1.6.11-7.el6.s390x.rpm
• neon-0.29.3-2.el6.x86_64.rpm
• subversion-kde-1.6.11-7.el6.s390.rpm
• neon-0.29.3-2.el6.s390.rpm
• mod_dav_svn-1.6.11-7.el6.ppc64.rpm
• subversion-javahl-1.6.11-7.el6.i686.rpm
• neon-debuginfo-0.29.3-2.el6.ppc.rpm
• subversion-perl-1.6.11-7.el6.s390x.rpm
• subversion-debuginfo-1.6.11-7.el6.i686.rpm
• subversion-ruby-1.6.11-7.el6.ppc.rpm
• neon-0.29.3-2.el6.ppc64.rpm
• mod_dav_svn-1.6.11-7.el6.i686.rpm
• subversion-devel-1.6.11-7.el6.x86_64.rpm
• subversion-svn2cl-1.6.11-7.el6.noarch.rpm
• subversion-gnome-1.6.11-7.el6.x86_64.rpm
• neon-debuginfo-0.29.3-2.el6.ppc64.rpm
• subversion-gnome-1.6.11-7.el6.ppc.rpm
• neon-devel-0.29.3-2.el6.i686.rpm
• subversion-debuginfo-1.6.11-7.el6.s390.rpm
• subversion-gnome-1.6.11-7.el6.s390.rpm
• subversion-kde-1.6.11-7.el6.ppc64.rpm
• subversion-javahl-1.6.11-7.el6.ppc.rpm
• subversion-1.6.11-7.el6.i686.rpm
• subversion-devel-1.6.11-7.el6.ppc.rpm
• subversion-debuginfo-1.6.11-7.el6.ppc64.rpm
• subversion-ruby-1.6.11-7.el6.s390.rpm
• subversion-1.6.11-7.el6.ppc.rpm
• neon-devel-0.29.3-2.el6.x86_64.rpm
• subversion-kde-1.6.11-7.el6.x86_64.rpm
• subversion-devel-1.6.11-7.el6.ppc64.rpm
• neon-devel-0.29.3-2.el6.s390x.rpm
• subversion-devel-1.6.11-7.el6.i686.rpm
• subversion-kde-1.6.11-7.el6.ppc.rpm
• neon-0.29.3-2.el6.i686.rpm
• subversion-perl-1.6.11-7.el6.x86_64.rpm
• subversion-devel-1.6.11-7.el6.s390x.rpm
• subversion-1.6.11-7.el6.s390.rpm
• mod_dav_svn-1.6.11-7.el6.x86_64.rpm
• subversion-kde-1.6.11-7.el6.s390x.rpm
• subversion-javahl-1.6.11-7.el6.x86_64.rpm
• subversion-javahl-1.6.11-7.el6.ppc64.rpm
• subversion-1.6.11-7.el6.src.rpm
• neon-devel-0.29.3-2.el6.ppc.rpm
• neon-debuginfo-0.29.3-2.el6.s390x.rpm
• subversion-javahl-1.6.11-7.el6.s390x.rpm
• subversion-1.6.11-7.el6.x86_64.rpm
• neon-debuginfo-0.29.3-2.el6.i686.rpm
• subversion-devel-1.6.11-7.el6.s390.rpm
• subversion-debuginfo-1.6.11-7.el6.ppc.rpm
• subversion-perl-1.6.11-7.el6.ppc64.rpm
• subversion-perl-1.6.11-7.el6.ppc.rpm
• subversion-1.6.11-7.el6.ppc64.rpm
• neon-devel-0.29.3-2.el6.s390.rpm
• subversion-1.6.11-7.el6.s390x.rpm
• subversion-ruby-1.6.11-7.el6.s390x.rpm
• mod_dav_svn-1.6.11-7.el6.s390x.rpm
• neon-0.29.3-2.el6.src.rpm
• subversion-ruby-1.6.11-7.el6.ppc64.rpm
• subversion-debuginfo-1.6.11-7.el6.s390x.rpm
• subversion-debuginfo-1.6.11-7.el6.x86_64.rpm
• subversion-kde-1.6.11-7.el6.i686.rpm
• neon-debuginfo-0.29.3-2.el6.x86_64.rpm
• subversion-gnome-1.6.11-7.el6.ppc64.rpm
• neon-debuginfo-0.29.3-2.el6.s390.rpm

Fixes

• This content is not included.BZ - 720790

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.