gpp_maybe Security update for subversion

SUSE-SLE-Module-Server-Applications-15-SP3-2022-1162

This update for subversion fixes the following issues: - CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache HTTP server. This could be exploited by a remote attacker to cause a denial of service (bsc#1197940). - CVE-2021-28544: Fixed an information leak issue where Subversion servers may reveal the original path of files protected by path-based authorization (bsc#1197939).

• Release Date
  Apr 12 2022
• References
  Bugzilla: 1197940, 1197939
  CVEs: CVE-2022-24070, CVE-2021-28544
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.3 ppc64le

• Packages
  subversion
  Subversion version control system

  1.10.6-150300.10.8.1 lock src

  subversion-server
  Apache server module for Subversion server

  1.10.6-150300.10.8.1 lock rpm

Server Applications Module 15.3 x86_64

• Packages
  subversion
  Subversion version control system

  1.10.6-150300.10.8.1 lock src

  subversion-server
  Apache server module for Subversion server

  1.10.6-150300.10.8.1 lock rpm

Server Applications Module 15.3 s390x

• Packages
  subversion
  Subversion version control system

  1.10.6-150300.10.8.1 lock src

  subversion-server
  Apache server module for Subversion server

  1.10.6-150300.10.8.1 lock rpm

Server Applications Module 15.3 aarch64

• Packages
  subversion
  Subversion version control system

  1.10.6-150300.10.8.1 lock src

  subversion-server
  Apache server module for Subversion server

  1.10.6-150300.10.8.1 lock rpm