(RHSA-2022:2236) Important: subversion:1.10 security update

2022-05-1213:18:16

access.redhat.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.8%

JSON

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Subversion’s mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64subversion-perl-debuginfo< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-perl-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.aarch64.rpm
RedHatanyx86_64utf8proc-debugsource< 2.1.1-5.module+el8.2.0+9887+08558108utf8proc-debugsource-2.1.1-5.module+el8.2.0+9887+08558108.x86_64.rpm
RedHatanyx86_64subversion-gnome-debuginfo< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-gnome-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm
RedHatanys390xsubversion-devel< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-devel-1.10.2-3.module+el8.2.0+15168+f36597c9.s390x.rpm
RedHatanyppc64lesubversion-gnome< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-gnome-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHatanyppc64lesubversion-gnome-debuginfo< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-gnome-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHatanys390xutf8proc< 2.1.1-5.module+el8.2.0+9887+08558108utf8proc-2.1.1-5.module+el8.2.0+9887+08558108.s390x.rpm
RedHatanys390xsubversion-debuginfo< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.s390x.rpm
RedHatanyppc64lesubversion-tools-debuginfo< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-tools-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHatanyppc64lesubversion-debugsource< 1.10.2-3.module+el8.2.0+15168+f36597c9subversion-debugsource-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	subversion-perl-debuginfo	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-perl-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.aarch64.rpm
RedHat	any	x86_64	utf8proc-debugsource	< 2.1.1-5.module+el8.2.0+9887+08558108	utf8proc-debugsource-2.1.1-5.module+el8.2.0+9887+08558108.x86_64.rpm
RedHat	any	x86_64	subversion-gnome-debuginfo	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-gnome-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.x86_64.rpm
RedHat	any	s390x	subversion-devel	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-devel-1.10.2-3.module+el8.2.0+15168+f36597c9.s390x.rpm
RedHat	any	ppc64le	subversion-gnome	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-gnome-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHat	any	ppc64le	subversion-gnome-debuginfo	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-gnome-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHat	any	s390x	utf8proc	< 2.1.1-5.module+el8.2.0+9887+08558108	utf8proc-2.1.1-5.module+el8.2.0+9887+08558108.s390x.rpm
RedHat	any	s390x	subversion-debuginfo	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.s390x.rpm
RedHat	any	ppc64le	subversion-tools-debuginfo	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-tools-debuginfo-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm
RedHat	any	ppc64le	subversion-debugsource	< 1.10.2-3.module+el8.2.0+15168+f36597c9	subversion-debugsource-1.10.2-3.module+el8.2.0+15168+f36597c9.ppc64le.rpm