Summary
Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.
Security Fix(es):
* subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libserf | 1.3.9-9.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | libserf | 1.3.9-9.module_el8.6.0+2912+eb1cdf5a |
| AlmaLinux · 8 | libserf | 1.3.9-9.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | mod_dav_svn | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | mod_dav_svn | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | mod_dav_svn | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-devel | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion-devel | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion-devel | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-gnome | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-gnome | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion-gnome | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion-javahl | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-libs | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion-libs | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion-libs | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-perl | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | subversion-perl | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion-perl | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion-tools | 1.10.2-4.module_el8.5.0+73+aa7e29ed |
| AlmaLinux · 8 | subversion-tools | 1.10.2-4.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | subversion-tools | 1.10.2-4.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | utf8proc | 2.1.1-5.module_el8.4.0+2266+ac338b6d |
| AlmaLinux · 8 | utf8proc | 2.1.1-5.module_el8.3.0+2053+ac338b6d |
| AlmaLinux · 8 | utf8proc | 2.1.1-5.module_el8.6.0+2912+eb1cdf5a |
Vulnerabilities 1
-
Unscored —CVE-2020-17525 EPSS 40%
Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service.…
References
-
report
https://vulners.com/cve/CVE-2020-17525