Summary
subversion
[1.14.1-2]
- add fix for CVE-2022-24070
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libserf | 0:1.3.9-9.module+el8.4.0+20030+2150d1b0 |
| Oracle Linux · 8 | mod_dav_svn | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | python3-subversion | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-devel | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-gnome | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-javahl | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-libs | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-perl | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | subversion-tools | 0:1.14.1-2.module+el8.6.0+20681+68ff3996 |
| Oracle Linux · 8 | utf8proc | 0:2.1.1-5.module+el8.4.0+20030+2150d1b0 |
Vulnerabilities 1
-
Unscored —
Apache Subversion mod_dav_svn is vulnerable to memory corruption
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive)…