blob: 42e09fb1a0752b89f24cfe0c7c955483d6ffa356 (
plain)
1
2
3
4
5
6
7
8
9
|
bugfixes:
- >
**security issue** - The ``subversion`` module provided the password
via the svn command line option ``--password`` and can be retrieved
from the host's /proc/<pid>/cmdline file. Update the module to use
the secure ``--password-from-stdin`` option instead, and add a warning
in the module and in the documentation if svn version is too old to
support it.
(CVE-2020-1739)
|
