Important: subversion:1.10 security update

2022-05-1213:15:51

errata.almalinux.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.5%

JSON

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64subversion< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8aarch64utf8proc< 2.1.1-5.module_el8.4.0+2266+ac338b6dutf8proc-2.1.1-5.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux8aarch64subversion-gnome< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-gnome-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8aarch64subversion-perl< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-perl-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8aarch64mod_dav_svn< 1.10.2-5.module_el8.5.0+2896+dbb67bd2mod_dav_svn-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8aarch64subversion-tools< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-tools-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8noarchsubversion-javahl< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-javahl-1.10.2-5.module_el8.5.0+2896+dbb67bd2.noarch.rpm
almalinux8aarch64subversion-devel< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-devel-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux8aarch64libserf< 1.3.9-9.module_el8.4.0+2266+ac338b6dlibserf-1.3.9-9.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux8aarch64subversion-libs< 1.10.2-5.module_el8.5.0+2896+dbb67bd2subversion-libs-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	aarch64	subversion	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	aarch64	utf8proc	< 2.1.1-5.module_el8.4.0+2266+ac338b6d	utf8proc-2.1.1-5.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux	8	aarch64	subversion-gnome	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-gnome-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	aarch64	subversion-perl	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-perl-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	aarch64	mod_dav_svn	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	mod_dav_svn-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	aarch64	subversion-tools	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-tools-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	noarch	subversion-javahl	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-javahl-1.10.2-5.module_el8.5.0+2896+dbb67bd2.noarch.rpm
almalinux	8	aarch64	subversion-devel	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-devel-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm
almalinux	8	aarch64	libserf	< 1.3.9-9.module_el8.4.0+2266+ac338b6d	libserf-1.3.9-9.module_el8.4.0+2266+ac338b6d.aarch64.rpm
almalinux	8	aarch64	subversion-libs	< 1.10.2-5.module_el8.5.0+2896+dbb67bd2	subversion-libs-1.10.2-5.module_el8.5.0+2896+dbb67bd2.aarch64.rpm