LinuxSecurity.com: This update includes the latest stable release of Subversion, fixing many bugsand a security issue: Matt Lewis reported multiple heap overflow flaws inSubversion (servers and clients) when parsing binary deltas. Malicious userswith commit access to a vulnerable server could uses these flaws to cause a heapoverflow on the server running Subversion. A malicious Subversion server coulduse these flaws to cause a heap overflow on vulnerable clients when they attemptto checkout or update, resulting in a crash or, possibly, arbitrary codeexecution on the vulnerable client. (CVE-2009-2411) This update also addssupport for storing passwords in the GNOME Keyring or KDE Wallet, via the newsubversion-gnome and subversion-kde subpackages. For more details of the bugfixes included in this update, see:http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES

More...