Important: subversion:1.10 security update

2019-08-1517:34:10

errata.almalinux.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.5%

JSON

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: NULL pointer dereference in svnserve leading to an unauthenticated remote DoS (CVE-2019-0203)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64utf8proc< 2.1.1-5.module_el8.4.0+2266+ac338b6dutf8proc-2.1.1-5.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux8aarch64libserf< 1.3.9-9.module_el8.4.0+2266+ac338b6dlibserf-1.3.9-9.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux8x86_64libserf< 1.3.9-9.module_el8.3.0+2053+ac338b6dlibserf-1.3.9-9.module_el8.3.0+2053+ac338b6d.x86_64.rpm
almalinux8x86_64utf8proc< 2.1.1-5.module_el8.3.0+2053+ac338b6dutf8proc-2.1.1-5.module_el8.3.0+2053+ac338b6d.x86_64.rpm
almalinux8ppc64lelibserf< 1.3.9-9.module_el8.6.0+2912+eb1cdf5alibserf-1.3.9-9.module_el8.6.0+2912+eb1cdf5a.ppc64le.rpm
almalinux8ppc64leutf8proc< 2.1.1-5.module_el8.6.0+2912+eb1cdf5autf8proc-2.1.1-5.module_el8.6.0+2912+eb1cdf5a.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	aarch64	utf8proc	< 2.1.1-5.module_el8.4.0+2266+ac338b6d	utf8proc-2.1.1-5.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux	8	aarch64	libserf	< 1.3.9-9.module_el8.4.0+2266+ac338b6d	libserf-1.3.9-9.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux	8	x86_64	libserf	< 1.3.9-9.module_el8.3.0+2053+ac338b6d	libserf-1.3.9-9.module_el8.3.0+2053+ac338b6d.x86_64.rpm
almalinux	8	x86_64	utf8proc	< 2.1.1-5.module_el8.3.0+2053+ac338b6d	utf8proc-2.1.1-5.module_el8.3.0+2053+ac338b6d.x86_64.rpm
almalinux	8	ppc64le	libserf	< 1.3.9-9.module_el8.6.0+2912+eb1cdf5a	libserf-1.3.9-9.module_el8.6.0+2912+eb1cdf5a.ppc64le.rpm
almalinux	8	ppc64le	utf8proc	< 2.1.1-5.module_el8.6.0+2912+eb1cdf5a	utf8proc-2.1.1-5.module_el8.6.0+2912+eb1cdf5a.ppc64le.rpm