Summary
Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.
Security Fix(es):
* subversion: Subversion's mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libserf | 0:1.3.9-9.module+el8.7.0+1065+42200b2e |
| Rocky Linux · 8 | libserf | 0:1.3.9-9.module+el8.4.0+407+38733e5a |
| Rocky Linux · 8 | subversion | 0:1.14.1-2.module+el8.7.0+1066+f8abeb19 |
| Rocky Linux · 8 | subversion | 0:1.14.1-2.module+el8.6.0+981+332af5e1 |
| Rocky Linux · 8 | utf8proc | 0:2.1.1-5.module+el8.4.0+407+38733e5a |
Vulnerabilities 1
-
Unscored —
Apache Subversion mod_dav_svn is vulnerable to memory corruption
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive)…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2074772