Red Hat Security AdvisoryRHSA-2021:0507
subversion:1.10 security update
Released 2021-02-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) libserf-1.3.9-9.module+el8.3.0+6671+2675c974.aarch64::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.ppc64le::subversion:1.10, libserf-1.3.9-9.module+el8.3.0+6671+2675c974.s390x::subversion:1.10 +37
Fixes 1 record
Priority MEDIUM 60
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.40075 · Published 2021-03-17 · Fixed in mod_authz_svn 1.10.7, 1.14.1 CWE-476
