Headline

RHSA-2022:2222: Red Hat Security Advisory: subversion:1.10 security update

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-24070: subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: subversion:1.10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2074772 - CVE-2022-24070 subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

libserf-1.3.9-9.module+el8.3.0+6671+2675c974.src.rpm

SHA-256: 9ec12a591c285305fd2e6b9f34996aa8fd1fe0440551abf137a30b24a7533e89

subversion-1.10.2-5.module+el8.4.0+15158+80ea2a4d.src.rpm

SHA-256: 449da08bb056623d3d637c2112e2192bc355faff0fa086c1a09272d5e90e81d5

utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.src.rpm

SHA-256: 5df58016d5ff7a6bdf26fdf0e22d49ccadcc1fedf31d13583b6af1f5d33b3a47

x86_64

libserf-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 54c286c23d2cc6f1808eb4ab5e02b38c8eb7c6f5a59d2baa523c0e3c904912e2

libserf-debuginfo-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 28cd121ae464d6b854d12d2313ed1e430f9da90575b3c923f21932e5101ed584

libserf-debugsource-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 8087e25e316fffa7a99e94685d7e6bb50c1815659462de30638add3b5190e90c

mod_dav_svn-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 9b9436640a453870a35ffa55a52e1cf22389c2181f41ed667d64f8214a6d83af

mod_dav_svn-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: b72558a6adf6683fd4ff1fff0e888c5f43356da26e850fd18607dfb2a61cb3bd

subversion-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 8e2b78a0f03b12664157520db688e166bb5a18dd6102323b16a6c71362368ebb

subversion-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 4ab23050151148c68daef2cc11899ea385ebcb4f10f1a35f9131e6932324ff11

subversion-debugsource-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: ecee460fee5ee631f520d856039f698c96c305a97874bc596c48000827cd2814

subversion-devel-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 583c28dc3679b4b6c7e659da86565d7004f19caf89c568c1e655ed3d94561c35

subversion-devel-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 567a74e1670098bc4b6731bd6ca497481794afb08c6e468b5d67b92b4dee6290

subversion-gnome-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 21d2c9ad789ecee60043bfb6612a2900a3e1bfa290b22326dcb37a94e6ae9c63

subversion-gnome-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 1995398fb9e09cf750fbaa262ee7a0d038ad3ac0303e61957916c314362666b7

subversion-javahl-1.10.2-5.module+el8.4.0+15158+80ea2a4d.noarch.rpm

SHA-256: 3d12602462340e0c2018b23d9b3225b4fe0980889fbaab037cc719931e4caa5d

subversion-libs-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 700ecbdc37d45e16ba8323882bb1e969bace5fb73c84e2524e53662d8c57f2fe

subversion-libs-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 9135ed836cd5c245c23307e7384ce07385b28763989a4effdd73b1e6f2e83a7e

subversion-perl-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 13748da4b45636433a27ca675fae55d86878cfe94f5b2bd5362aa1672adbb5e4

subversion-perl-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 11629b71f85668556204b77cbd006fa1389a943c114238454b321451d0d1eef2

subversion-tools-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 3b8491c4720b5b6fecf5764e1e0bd400e67415ced533496ba911f874a13b4814

subversion-tools-debuginfo-1.10.2-5.module+el8.4.0+15158+80ea2a4d.x86_64.rpm

SHA-256: 85e4c4fc4c5bdb03c9a33c8ddda2888bb389862e9d4be33f58677e9b8caefa54

utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 429f392bc1abfe295663f06c8cc99f0268f8a0fbde3220ec64cd4a2a4402282f

utf8proc-debuginfo-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 9511cbd082b45a2e6186828f03d7bae5ce61b3edd2882196fe5a09ba6e465b32

utf8proc-debugsource-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 02e1c4ed626130c697239869522212d1d06890e6198e7d38d65139b6aa3e8f27

Red Hat Enterprise Linux Server - AUS 8.4