(RHSA-2021:0507) Important: subversion:1.10 security update

2021-02-1507:04:31

access.redhat.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64utf8proc< 2.1.1-5.module+el8.3.0+6671+2675c974utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm
RedHatanyppc64lesubversion-tools< 1.10.2-4.module+el8.3.0+9886+ac338b6dsubversion-tools-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHatanyppc64lesubversion-gnome< 1.10.2-4.module+el8.3.0+9886+ac338b6dsubversion-gnome-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHatanyppc64leutf8proc< 2.1.1-5.module+el8.3.0+6671+2675c974utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.ppc64le.rpm
RedHatanyppc64lesubversion-debugsource< 1.10.2-4.module+el8.3.0+9886+ac338b6dsubversion-debugsource-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHatanys390xmod_dav_svn< 1.10.2-4.module+el8.3.0+9886+ac338b6dmod_dav_svn-1.10.2-4.module+el8.3.0+9886+ac338b6d.s390x.rpm
RedHatanys390xsubversion-perl-debuginfo< 1.10.2-4.module+el8.3.0+9886+ac338b6dsubversion-perl-debuginfo-1.10.2-4.module+el8.3.0+9886+ac338b6d.s390x.rpm
RedHatanyppc64lesubversion< 1.10.2-4.module+el8.3.0+9886+ac338b6dsubversion-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHatanyx86_64mod_dav_svn< 1.10.2-4.module+el8.3.0+9886+ac338b6dmod_dav_svn-1.10.2-4.module+el8.3.0+9886+ac338b6d.x86_64.rpm
RedHatanys390xutf8proc-debugsource< 2.1.1-5.module+el8.3.0+6671+2675c974utf8proc-debugsource-2.1.1-5.module+el8.3.0+6671+2675c974.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	utf8proc	< 2.1.1-5.module+el8.3.0+6671+2675c974	utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.x86_64.rpm
RedHat	any	ppc64le	subversion-tools	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	subversion-tools-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHat	any	ppc64le	subversion-gnome	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	subversion-gnome-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHat	any	ppc64le	utf8proc	< 2.1.1-5.module+el8.3.0+6671+2675c974	utf8proc-2.1.1-5.module+el8.3.0+6671+2675c974.ppc64le.rpm
RedHat	any	ppc64le	subversion-debugsource	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	subversion-debugsource-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHat	any	s390x	mod_dav_svn	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	mod_dav_svn-1.10.2-4.module+el8.3.0+9886+ac338b6d.s390x.rpm
RedHat	any	s390x	subversion-perl-debuginfo	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	subversion-perl-debuginfo-1.10.2-4.module+el8.3.0+9886+ac338b6d.s390x.rpm
RedHat	any	ppc64le	subversion	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	subversion-1.10.2-4.module+el8.3.0+9886+ac338b6d.ppc64le.rpm
RedHat	any	x86_64	mod_dav_svn	< 1.10.2-4.module+el8.3.0+9886+ac338b6d	mod_dav_svn-1.10.2-4.module+el8.3.0+9886+ac338b6d.x86_64.rpm
RedHat	any	s390x	utf8proc-debugsource	< 2.1.1-5.module+el8.3.0+6671+2675c974	utf8proc-debugsource-2.1.1-5.module+el8.3.0+6671+2675c974.s390x.rpm