ELSA-2022-2234

Опубликовано: 19 мая 2022

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2022-2234: subversion:1.10 security update (IMPORTANT)

subversion [1.10.2-5]

add security fix for CVE-2022-24070

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module subversion:1.1 is enabled

libserf

1.3.9-9.module+el8.3.0+7671+a87d5147

utf8proc

2.1.1-5.module+el8.3.0+7671+a87d5147

Module subversion:1.10 is enabled

mod_dav_svn

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-devel

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-gnome

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-javahl

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-libs

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-perl

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-tools

1.10.2-5.module+el8.6.0+20670+d864ac37

Oracle Linux x86_64

Module subversion:1.1 is enabled

libserf

1.3.9-9.module+el8.3.0+7671+a87d5147

utf8proc

2.1.1-5.module+el8.3.0+7671+a87d5147

Module subversion:1.10 is enabled

mod_dav_svn

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-devel

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-gnome

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-javahl

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-libs

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-perl

1.10.2-5.module+el8.6.0+20670+d864ac37

subversion-tools

1.10.2-5.module+el8.6.0+20670+d864ac37

Связанные CVE

CVE-2022-24070

Ссылки на источники

Связанные уязвимости

CVE-2022-24070

CVSS3: 7.5

ubuntu

больше 3 лет назад

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.