{"id":"CLSA-2026-1777038917","summary":"subversion: Fix of CVE-2017-9800","details":"- CVE-2017-9800: fix arbitrary code execution via crafted svn+ssh:// URLs\n  by validating the decoded hostinfo and adding an end-of-options guard\n  to the default svn+ssh and example rsh tunnel commands","modified":"2026-05-27T11:18:21.075222612Z","published":"2026-04-25T08:50:38Z","upstream":["CVE-2017-9800"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777038917.html"}],"affected":[{"package":{"name":"mod_dav_svn","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/mod_dav_svn?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-gnome","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-gnome?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-javahl","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-javahl?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-kde","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-kde?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-perl","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-perl?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-ruby","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-ruby?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}},{"package":{"name":"subversion-svn2cl","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/subversion-svn2cl?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1777038917.json"}}],"schema_version":"1.7.5"}