Most recent entries from all

ALSA-2022:2234 — Important: subversion:1.10 security update

Affected: AlmaLinux:8: libserf, AlmaLinux:8: mod_dav_svn, AlmaLinux:8: subversion, AlmaLinux:8: subversion-devel, AlmaLinux:8: subversion-gnome, AlmaLinux:8: subversion-javahl, AlmaLinux:8: subversion-libs, AlmaLinux:8: subversion-perl, AlmaLinux:8: subversion-tools, AlmaLinux:8: utf8proc

Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.

Security Fix(es):

* subversion: Subversion's mod_dav_svn is vulnerable to memory corruption (CVE-2022-24070)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-05791

Withdrawn: BELL-CVE-2022-24070 — CVE-2022-24070 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-665 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2022-avi-665

cnvd-2022-38524

EUVD-2026-14023

fkie_cve-2022-24070

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.

GHSA-c3j6-9rv7-vmqq

gsd-2022-24070

msrc_CVE-2022-24070 — Apache Subversion mod_dav_svn is vulnerable to memory corruption

msrc_CVE-2022-24070

OESA-2022-1647 — subversion security update

Affected: openEuler:20.03-LTS-SP1: subversion, openEuler:20.03-LTS-SP3: subversion, openEuler:22.03-LTS: subversion

Subversion exists to be universally recognized and adopted as an open-source, centralized version control system characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects, from individuals to large-scale enterprise operations. Security Fix(es): Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal copyfrom paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the copyfrom path of the original. This also reveals the fact that the node was copied. Only the copyfrom path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.(CVE-2021-28544)

Subversion s mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.(CVE-2022-24070)

openSUSE-SU-2024:12007-1 — libsvn_auth_gnome_keyring-1-0-1.14.2-1.1 on GA media

libsvn_auth_gnome_keyring-1-0-1.14.2-1.1 on GA media

RHSA-2022:2222 — Red Hat Security Advisory: subversion:1.10 security update

subversion: Subversion's mod_dav_svn is vulnerable to memory corruption

SUSE-SU-2022:1161-1 — Security update for subversion

Security update for subversion

UBUNTU-CVE-2022-24070

Affected: Ubuntu:20.04:LTS: subversion, Ubuntu:22.04:LTS: subversion

WID-SEC-W-2022-0778 — Apple macOS: Mehrere Schwachstellen

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, Informationen falsch darzustellen und einen Cross-Site-Scripting-Angriff durchzuführen.