漏洞描述
Subversion是一款开源多用户版本控制系统，支持非ASCII文本和二进制数据。
Subversion客户端 < 1.8.19, 1.9.x < 1.9.7, 1.10.0.x-1.10.0-alpha3版本，恶意构造的svn+ssh:// URL会造成运行任意shell命令。
解决方法
以下是各Linux/Unix发行版系统针对此漏洞发布的安全公告，可以参考对应系统的安全公告修复该漏洞:
Ubuntu
----------------
USN-3388-2: [USN-3388-2] Subversion vulnerabilities
链接: https://www.ubuntu.com/usn/usn-3388-2
USN-3388-1: [USN-3388-1] Subversion vulnerabilities
链接: https://www.ubuntu.com/usn/usn-3388-1
Red Hat Enterprise Linux
----------------
链接: https://access.redhat.com/security/cve/CVE-2017-9800
CentOS
----------------
CESA-2017:2480: CESA-2017:2480 Important CentOS 7 subversion Security Update
链接: https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004684.html
Gentoo
----------------
GLSA-201709-09: Subversion: Arbitrary code execution
链接: https://security.gentoo.org/glsa/201709-09
GLSA-201709-09: Subversion: Arbitrary code execution
链接: https://security.gentoo.org/glsa/201709-09
Slackware
----------------
SSA:2017-223-04: [slackware-security] subversion (SSA:2017-223-04)
链接: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackware-security.432714
openSUSE
----------------
openSUSE-SU-2017:2183-1: openSUSE Security Update: Security update for subversion
链接: https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00052.html
SUSE
----------------
链接: https://www.suse.com/security/cve/CVE-2017-9800/
Fedora
----------------
FEDORA-2017-1d1a38bdd1: Fedora 25 Update: subversion-1.9.7-1.fc25
链接: https://lists.fedoraproject.org/archives/list/[email protected]/thread/ZYVLYEC7RDMZ4UK6TUVUH24AFFCTC7EG/
FEDORA-2017-951b6a78d4: Fedora 26 Update: subversion-1.9.7-1.fc26
链接: https://lists.fedoraproject.org/archives/list/[email protected]/thread/6345B7TF2SKLBYTRAWDZBSHW5GZFT6V2/
Arch Linux
----------------
ASA-201708-14: [arch-security] [ASA-201708-14] subversion: arbitrary command execution
链接: https://security.archlinux.org/ASA-201708-14
Oracle Linux
----------------
链接: https://linux.oracle.com/cve/CVE-2017-9800.html
Debian
----------------
DSA-3932: DSA-3932-1 subversion -- security update
链接: https://www.debian.org/security/2017/dsa-3932
EulerOS
----------------
链接: http://developer.huawei.com/ict/cn/site-euleros/euleros/cve/CVE-2017-9800