rpm package
almalinux/subversion-libs
pkg:rpm/almalinux/subversion-libs
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-24070 | — | < 1.10.2-5.module_el8.6.0+2897+d2f1747f | 1.10.2-5.module_el8.6.0+2897+d2f1747f | Apr 12, 2022 | Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not | ||
| CVE-2020-17525 | — | < 1.10.2-4.module_el8.4.0+2266+ac338b6d | 1.10.2-4.module_el8.4.0+2266+ac338b6d | Mar 17, 2021 | Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed |
- CVE-2022-24070Apr 12, 2022affected < 1.10.2-5.module_el8.6.0+2897+d2f1747ffixed 1.10.2-5.module_el8.6.0+2897+d2f1747f
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not
- CVE-2020-17525Mar 17, 2021affected < 1.10.2-4.module_el8.4.0+2266+ac338b6dfixed 1.10.2-4.module_el8.4.0+2266+ac338b6d
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed