Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-11782: In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server. 1733088: CVE-2018-11782 subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev'
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | mod_dav_svn | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-debuginfo | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-devel | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-gnome | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-javahl | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-libs | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-perl | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-python | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-ruby | 0:1.7.14-16.amzn2.0.1 |
| Amazon Linux · 2 | subversion-tools | 0:1.7.14-16.amzn2.0.1 |
Vulnerabilities 1
-
Unscored —
In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-11782.html