subversion:1.10 security update

2021-02-1507:04:31

Rockylinux Product Errata

errata.rockylinux.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.007 Low

EPSS

Percentile

80.3%

JSON

An update is available for subversion, utf8proc, libserf.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

subversion: Remote unauthenticated denial of service in mod_authz_svn (CVE-2020-17525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8aarch64libserf< 1.3.9-9.module+el8.7.0+1065+42200b2elibserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky8aarch64libserf< 1.3.9-9.module+el8.4.0+407+38733e5alibserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm
rocky8x86_64libserf< 1.3.9-9.module+el8.7.0+1065+42200b2elibserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm
rocky8x86_64libserf< 1.3.9-9.module+el8.4.0+407+38733e5alibserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm
rocky8aarch64libserf-debuginfo< 1.3.9-9.module+el8.7.0+1065+42200b2elibserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky8aarch64libserf-debuginfo< 1.3.9-9.module+el8.4.0+407+38733e5alibserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm
rocky8x86_64libserf-debuginfo< 1.3.9-9.module+el8.7.0+1065+42200b2elibserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm
rocky8x86_64libserf-debuginfo< 1.3.9-9.module+el8.4.0+407+38733e5alibserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm
rocky8aarch64libserf-debugsource< 1.3.9-9.module+el8.7.0+1065+42200b2elibserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky8aarch64libserf-debugsource< 1.3.9-9.module+el8.4.0+407+38733e5alibserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	8	aarch64	libserf	< 1.3.9-9.module+el8.7.0+1065+42200b2e	libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky	8	aarch64	libserf	< 1.3.9-9.module+el8.4.0+407+38733e5a	libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm
rocky	8	x86_64	libserf	< 1.3.9-9.module+el8.7.0+1065+42200b2e	libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm
rocky	8	x86_64	libserf	< 1.3.9-9.module+el8.4.0+407+38733e5a	libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm
rocky	8	aarch64	libserf-debuginfo	< 1.3.9-9.module+el8.7.0+1065+42200b2e	libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky	8	aarch64	libserf-debuginfo	< 1.3.9-9.module+el8.4.0+407+38733e5a	libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm
rocky	8	x86_64	libserf-debuginfo	< 1.3.9-9.module+el8.7.0+1065+42200b2e	libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm
rocky	8	x86_64	libserf-debuginfo	< 1.3.9-9.module+el8.4.0+407+38733e5a	libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm
rocky	8	aarch64	libserf-debugsource	< 1.3.9-9.module+el8.7.0+1065+42200b2e	libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm
rocky	8	aarch64	libserf-debugsource	< 1.3.9-9.module+el8.4.0+407+38733e5a	libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm