Headline

RHSA-2022:4941: Red Hat Security Advisory: subversion:1.14 security update

An update for the subversion:1.14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-24070: subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #perl #ibm #sap

Synopsis

Important: subversion:1.14 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the subversion:1.14 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2074772 - CVE-2022-24070 subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption

Red Hat Enterprise Linux for x86_64 8

SRPM

libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.src.rpm

SHA-256: 62758e6cc4c940067ee5f2c83b099a3d685868c68c0e10581c9223690247dd6b

subversion-1.14.1-2.module+el8.6.0+15201+2f551d15.src.rpm

SHA-256: d62894339a262954ff35d1595f11ba5c53bd6c400bd13cba0c2610091bce110f

utf8proc-2.1.1-5.module+el8.4.0+8637+d3bad2c2.src.rpm

SHA-256: bca6d526bc5c50a1fc0f4a3415d0bf2247ef612724340641e647e88c80263b17

x86_64

subversion-javahl-1.14.1-2.module+el8.6.0+15201+2f551d15.noarch.rpm

SHA-256: ecd72ab771b44012edb93709b42fbf359d16e2be9cf0a4335516fa2632297aa4

libserf-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: b280bb514277e01a27553d143c292be927c65e660bb12af3126adaaf202f6fba

libserf-debuginfo-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: 6510f6820dae37a22a17b6a0c8c713281696257e3739b2788117eafd240d0927

libserf-debugsource-1.3.9-9.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: 95a976ce34814a7c2165a53f7fb3f4df6f3c57c02544a9b6d7514efde93b0129

mod_dav_svn-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: dc49e1865acfe1e61495e4dbb09ecccbf93a22cf4d4603e55bc4a7b5a4a0f8a9

mod_dav_svn-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: b945e65e88ababac02eb86b6bebfd8b87265680f45645451f88ff44d2b2187f3

python3-subversion-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 1fd96853d21907f564b87748604c069c3cb9c6bc0aaa7c2a80952737a25a95c6

python3-subversion-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: f4e78e8461feecd1dfd30ddf4606eba26377d3f948cfb76c6b585d6e4876bb91

subversion-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: a6224f6715af7eaaf8398c8f7aa3bf9d647c97449c5267729888bcad5879eefc

subversion-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 2496c23ba27c79a6c23ea261be505d6fe2eeea1459955857e02c0d33f17c6802

subversion-debugsource-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 703e0fec2e3ce48b9c95f4a711ab7fb78a1b6707e65073c7ea200969f48e6879

subversion-devel-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 1f2cf14e22a04f70fd32dfbc6bbd5a569097939ccc1841e3dc5ab648b12283b7

subversion-devel-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: c6c24d579aba194e1de1ce5d3a0ea7b768daf443975542491ed1d53e846cc877

subversion-gnome-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 36d57634308796361ef2b69c8d3162fdb5790912feb19003984c28732b7da01a

subversion-gnome-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 1cc72d1f0528cd9b48fef8964e902fb037865bc188dd3fffc9c28d29e253b59c

subversion-libs-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: ec171717673288bea1f7be94e69e34027331aae8f87f51b6b8e93075310bc669

subversion-libs-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 088fbb0ff02baf82fd495cbc2b03aafea26796d76ffc70a4195e5d3b6e84eb55

subversion-perl-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 11c63d24167ac94b47c00e97c2e001ecf30935242204da6dbfe3bab46ae5313e

subversion-perl-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: e6adae5993e1ec6220d2b337648843ccf7bd7cec36072144eb1b9fdbfcc52898

subversion-tools-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 6962be43360a2c1f6c58c56cac64cc21bc17aa584f610d959a7fa0e423bdd774

subversion-tools-debuginfo-1.14.1-2.module+el8.6.0+15201+2f551d15.x86_64.rpm

SHA-256: 769750ce933fddf3fe4063a1242145749e62c1517a98ed3b4dab2ca5e2f8dda0

utf8proc-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: f6261ecc81350d9ee9533f2fbd1aa20dc5d5bb9e46b8409a5264692b25f49184

utf8proc-debuginfo-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: b12e46aa79f9526380df0abb625d53de0f19ad2747c1728a274827dfe5a61a01

utf8proc-debugsource-2.1.1-5.module+el8.4.0+8637+d3bad2c2.x86_64.rpm

SHA-256: fca659e486987312c8548b151e05fdc5a330bd2a507ed638d895a0f02382fa9a

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6