Headline

RHSA-2022:2234: Red Hat Security Advisory: subversion:1.10 security update

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-24070: subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: subversion:1.10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the subversion:1.10 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2074772 - CVE-2022-24070 subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

Red Hat Enterprise Linux for x86_64 8

SRPM

libserf-1.3.9-9.module+el8.3.0+6671+2675c974.src.rpm

SHA-256: 9ec12a591c285305fd2e6b9f34996aa8fd1fe0440551abf137a30b24a7533e89

subversion-1.10.2-5.module+el8.6.0+15157+188c9801.src.rpm

SHA-256: ac3468a31e24282d61bed3180fd22bfa53d82fdca696b9a4a2bc23b8e5a4e594

utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.src.rpm

SHA-256: 5df58016d5ff7a6bdf26fdf0e22d49ccadcc1fedf31d13583b6af1f5d33b3a47

x86_64

libserf-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 54c286c23d2cc6f1808eb4ab5e02b38c8eb7c6f5a59d2baa523c0e3c904912e2

libserf-debuginfo-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 28cd121ae464d6b854d12d2313ed1e430f9da90575b3c923f21932e5101ed584

libserf-debugsource-1.3.9-9.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 8087e25e316fffa7a99e94685d7e6bb50c1815659462de30638add3b5190e90c

mod_dav_svn-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: a84eeff650f7ba19c353fc02c8e41604bab576f28901aa5c7967832ac0176897

mod_dav_svn-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: ea950d1c3edf5c7ec9bae61c96d0d78a0ec8fbc8ea0586ae572fab44243e8f24

subversion-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 1a273a5a53d7d114f63d387151cffec06fc17e9788a7a9c0cc4382c971cadcab

subversion-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: c545c312088f6221ab8aa56b0fd9f65dd26994352a0ea28fb921bd90ccddcee3

subversion-debugsource-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 1938d0f2e84eedfcaac6063d23faa92f5d84710aed7b2ffa80c3eb24d8b905c7

subversion-devel-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 854029b1a042b37bc86f27327ab0c8f56ed464b75240f23c88fd7bb1903c9d1f

subversion-devel-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: a9d30b49c8a3bff6ddb67ed0e2552f81dc3e254d2fde3f44deb7b70c3a9604cb

subversion-gnome-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: c380ed95bd7d2590a1bd112477da946484686b3122f1296c6e2b753da86bf49e

subversion-gnome-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: f341b0dbef6b2802bbd432a435bc336d243953095de0ef3567f2f6d950fc55e3

subversion-javahl-1.10.2-5.module+el8.6.0+15157+188c9801.noarch.rpm

SHA-256: 9da237e707784473a36b7daa241743c8f8f0538b928cf0610f54efca2ebb29e7

subversion-libs-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 03baa7d4781e9b6110bbfd333e2f40c6c311152136f38b15fe5fc735e949f927

subversion-libs-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: ed1ab6b3c61f224597c37e1737567f6726bbad9bd292fad4da3baa565758c3c0

subversion-perl-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: ec925e64b8edd17a35f02beab82becfd85769afbfa070c8a98d6b8369588b62a

subversion-perl-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 7cfd17aa0e4fe7c7207614eb152d32b24ee81046465048be0a842995376dfc67

subversion-tools-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 151287afad150354e6e1c2b863924478973fdb94f53b38ce95155aa07082ab47

subversion-tools-debuginfo-1.10.2-5.module+el8.6.0+15157+188c9801.x86_64.rpm

SHA-256: 7ab69719e55da2897372f98cb38908b4405c63232144d289513a5541b2ae9829

utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 429f392bc1abfe295663f06c8cc99f0268f8a0fbde3220ec64cd4a2a4402282f

utf8proc-debuginfo-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 9511cbd082b45a2e6186828f03d7bae5ce61b3edd2882196fe5a09ba6e465b32

utf8proc-debugsource-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm

SHA-256: 02e1c4ed626130c697239869522212d1d06890e6198e7d38d65139b6aa3e8f27

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6