Summary
subversion
[1.10.2-4]
- add security fix for CVE-2020-17525
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libserf | 0:1.3.9-9.module+el8.3.0+7671+a87d5147 |
| Oracle Linux · 8 | mod_dav_svn | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-devel | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-gnome | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-javahl | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-libs | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-perl | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | subversion-tools | 0:1.10.2-4.module+el8.3.0+9645+c2a98c55 |
| Oracle Linux · 8 | utf8proc | 0:2.1.1-5.module+el8.3.0+7671+a87d5147 |
Vulnerabilities 1
-
Unscored —CVE-2020-17525 EPSS 40%
Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service.…