Headline

RHSA-2022:2236: Red Hat Security Advisory: subversion:1.10 security update

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-24070: subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: subversion:1.10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.2 x86_64

Fixes

BZ - 2074772 - CVE-2022-24070 subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM

libserf-1.3.9-9.module+el8.2.0+9887+08558108.src.rpm

SHA-256: d005eed1bc32f4eaa5c317f509a13fb5e77067e3f43ae53c924aaaede6f49d46

subversion-1.10.2-3.module+el8.2.0+15168+f36597c9.src.rpm

SHA-256: 6621df88761b3e773ae716fb689f05204b317eb81cce27d4276098de03222b23

utf8proc-2.1.1-5.module+el8.2.0+9887+08558108.src.rpm

SHA-256: 3737ee787ede1c48864e39ca278fb46ccff9f6887ea1a36b393d0d550443e6d9

x86_64

libserf-1.3.9-9.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: dae4b7f79ab477673f66f774700e73b405336ca254e0e5fee54b03b98fddb30a

libserf-debuginfo-1.3.9-9.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: 93deb241b751896a6df515af791031975454f0af72b44cabb7167ba65dbc84d6

libserf-debugsource-1.3.9-9.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: 90758577eed7699d3e5c4a70273b62c5299af6a4d1cce6782248def4ddb30f85

mod_dav_svn-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 50e6dfbaf3d30e2c216ce88bd77afd48273fe05b4b59f0dbf7ba844e1e2981cc

mod_dav_svn-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 35b13ec61c12dfb21cb59cee67f4aa2eae4d9ccf23ed97087a388460fe532fff

subversion-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 68a40bbff41e5687e71b2a0540d775e46b5a7e26bff9e5b7de1f47de74fa5073

subversion-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 46588a220963ab2edd395c1e7b824255979994599d043193363d8f98233480eb

subversion-debugsource-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: f40000ceedb56ca971147df2e7c062045390e3f18561822c949c023e1b517475

subversion-devel-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 6f15c38261eba05122245ee268662d3f965601125d6a39b18194f39f6c64de8b

subversion-devel-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 7ffc856c1a84906efbde50a890edffa76bcd03019ad4938d7b093b28ee79dfd1

subversion-gnome-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 914de5cab2f49a3936f7ca4df2ba6f67ca29d5901d60345f438b002a26ef3e72

subversion-gnome-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 9cc9590af46894e8b919c1bb251e40007f6dfc4d09cd3eb53056e130b501732c

subversion-javahl-1.10.2-3.module+el8.2.0+15168+f36597c9.noarch.rpm

SHA-256: c60e1a64e8debf92feb210d440e680175597939190ab2e66198ada31ea9b676d

subversion-libs-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: ee978a09fc742aa7f0467284a9015c469a4a230dae568dcda529349c69add3a6

subversion-libs-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: ae17514279dc06fe13966b727cf0bc52bdd264cd1777bc9aec079aa4c9345d92

subversion-perl-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 72a503f8ef1901c9ba6b235088ca9297a08f9ec2c33cf4aadf04799215b4c2e9

subversion-perl-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 6cc8924248ce0fa8bb927981e7cce77873ac6a1759afe138c294f0409d22c707

subversion-tools-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 207a6abc8289db34f8c84afc372444022c5299c45f1b9f6e54c686ec632287ea

subversion-tools-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm

SHA-256: 53d390ac9bcba9cb71155ccfb6943fec32f4c6cf2dd923882fcf7ef9e5ae317c

utf8proc-2.1.1-5.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: 86da7dc799059a46c3a5f0f5705a315b0827c03fdca186f8125142444e0a0581

utf8proc-debuginfo-2.1.1-5.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: c01e8d8bffe440ca81e6af87b0c5fa4c29cf6f3008d6e4de8b8073bffbf13aa9

utf8proc-debugsource-2.1.1-5.module+el8.2.0+9887+08558108.x86_64.rpm

SHA-256: 4b5bec0bfe4db3b36defd596a5404894b16c34bdf3110c3a1504f5827bc8b1f2

Red Hat Enterprise Linux Server - AUS 8.2