Headline

RHSA-2022:4722: Red Hat Security Advisory: subversion:1.14 security update

An update for the subversion:1.14 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-24070: subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: subversion:1.14 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the subversion:1.14 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2074772 - CVE-2022-24070 subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.src.rpm

SHA-256: 62758e6cc4c940067ee5f2c83b099a3d685868c68c0e10581c9223690247dd6b

subversion-1.14.1-2.module+el8.4.0+9885+61c1c622.src.rpm

SHA-256: b275a6ca36135bc09f557593ee1281a54c76a50529f130668ca964a3afd84b02

utf8proc-2.1.1-5.module+el8.4.0+8637+d3bad2c2.src.rpm

SHA-256: bca6d526bc5c50a1fc0f4a3415d0bf2247ef612724340641e647e88c80263b17

x86_64

libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: b280bb514277e01a27553d143c292be927c65e660bb12af3126adaaf202f6fba

libserf-debuginfo-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: 6510f6820dae37a22a17b6a0c8c713281696257e3739b2788117eafd240d0927

libserf-debugsource-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: 95a976ce34814a7c2165a53f7fb3f4df6f3c57c02544a9b6d7514efde93b0129

mod_dav_svn-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: fa4b97f9b693d419051a5eba46c7993ea853a01106906513dfa6739f0ec644fc

mod_dav_svn-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 152e4d41d44b9bc7d2ba54c966424b390e9ac5ed596d2253c80e2787e2829406

python3-subversion-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 3ba9a028609bbaaf3b154087b175bf35dc19b60d9058acb7be87c54e67060621

python3-subversion-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 9c3bcef5130048b42105197e653610f0f21523aaf47122aee9af0083ffd901ea

subversion-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 9af9f18229f72adefb90498dece186c3258e304169f2b6a3b9653223726bf57b

subversion-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 3bee1fe5de5a3f2d1e13eef2642358c7f22be1746c158b0d28be86a9e5a0e2bd

subversion-debugsource-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 8ec02586c9b6fe833b5955ae5efe9c67e00bd6df028268d777fb3ebdf6875e05

subversion-devel-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 2c077974a5f30cfaf80582ee75cffbbe88ce5a5bdabacf3a84ffab0311996179

subversion-devel-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: d5e02b9edba8c61a914ad7f179a1aa5e6f2e1a75e0eaafa05ffb40c3b3b90a50

subversion-gnome-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: a59a3d951d89b6f848570bbc0b6357a07b18a2fa96220fe38249fc0d1568632d

subversion-gnome-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 2887ac5fbe37f4377128b35da1a6a1e4e8acf27b1286b71b489fd8de696126e1

subversion-javahl-1.14.1-2.module+el8.4.0+9885+61c1c622.noarch.rpm

SHA-256: 0e4dd0054aebaa6b6b7e7a53ecbc653e8a01bc9511ea538593b9db202524dfb6

subversion-libs-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 3648b3fe9b0978328ac1555dfeed32c8f1f6f105534747891fdf8c0bc7e32ae7

subversion-libs-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 306093bbbf6d6974e8b9d37655ced5e572f1cd31f8bd99b2fa9ee0584ce72897

subversion-perl-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: 3edd028ce3a4849a27c9c3d014fa399b5a17970ffb2d7cc5977ea57ce0341f5f

subversion-perl-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: e181d945b395dc0fb9e7d3fcfa27b427e4a95b2d873bbf4ca07a1c370a9c4b24

subversion-tools-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: fc08e3dd7ab566b60e3bfa292ace2a290ad9d5a9cfbfa77cd08781b23350d9a6

subversion-tools-debuginfo-1.14.1-2.module+el8.4.0+9885+61c1c622.x86_64.rpm

SHA-256: f73895e3868dda44c69f87c2f03eb6a0e56a6bca7688cbc496e72ba554a33907

utf8proc-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: f6261ecc81350d9ee9533f2fbd1aa20dc5d5bb9e46b8409a5264692b25f49184

utf8proc-debuginfo-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: b12e46aa79f9526380df0abb625d53de0f19ad2747c1728a274827dfe5a61a01

utf8proc-debugsource-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: fca659e486987312c8548b151e05fdc5a330bd2a507ed638d895a0f02382fa9a

Red Hat Enterprise Linux Server - AUS 8.4