Summary
USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides
the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu
22.04 LTS, and Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that Apache Subversion incorrectly parsed control
characters in filenames. An attacker could possibly use this issue to
commit a corrupted revision to a repository, leading to a denial of
service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | subversion | 1.9.7-4ubuntu1.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | subversion | 1.13.0-3ubuntu0.2+esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | subversion | 1.14.1-3ubuntu0.22.04.1+esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | subversion | 1.14.3-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Low 3.1
Apache Subversion: mod_dav_svn denial-of-service via control characters in paths
Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versi…
References
-
report
https://ubuntu.com/security/CVE-2024-46901