Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-24070: A use-after-free vulnerability was found in Subversion in the mod_dav_svn Apache HTTP server (HTTPd) module. While looking up path-based authorization (authz) rules, multiple calls to the post_config hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue crashes the single HTTPd worker thread or the entire HTTPd server process, depending on the configuration of the Apache HTTPd server. CVE-2021-28544: A flaw was found in Subversion. When using path-based authorization (authz), the helper function detect_changed() does not omit potentially sensitive information from log messages. In particular, if a node is copied from a protected location, its copyfrom path (the path to the protected location) is reported even when omission should occur.
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | python3-subversion | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | python3-subversion-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-debugsource | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-devel | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-devel-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-javahl | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-libs | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-libs-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-perl | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-perl-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-tools | 0:1.14.2-5.amzn2023.0.2 |
| Amazon Linux · 2023 | subversion-tools-debuginfo | 0:1.14.2-5.amzn2023.0.2 |
Vulnerabilities 2
-
Unscored —
Apache Subversion SVN authz protected copyfrom paths regression
Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with …
-
Unscored —
Apache Subversion mod_dav_svn is vulnerable to memory corruption
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive)…