subversion:1.10 security update

エラータID: AXSA:2022-3786:01

リリース日: 
2022/09/02 Friday - 04:25
題名: 
subversion:1.10 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- subversion には、mod_dav_svn のパスベースの認証ルール検索処理
において解放後メモリ参照の脆弱性があります。(CVE-2022-24070)

Modularity name: subversion
Stream name: 1.10

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-24070
Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. libserf-1.3.9-9.module+el8+1510+d25e82dc.src.rpm
    MD5: cde2295d06d96fdba53b75c14a16c8b0
    SHA-256: 6e696303df35736400009d1154a76dffcc0ea9885e75eef7a5d1aa707cb9664a
    Size: 154.45 kB
  2. subversion-1.10.2-5.module+el8+1510+d25e82dc.src.rpm
    MD5: 66e20bf97a67e4ee14aaa5a457d4bbf9
    SHA-256: 3b520889be096fa86967500de3057e6bd3ffa7460b0f12f2c1177a007fc0d4c9
    Size: 8.07 MB
  3. utf8proc-2.1.1-5.module+el8+1510+d25e82dc.src.rpm
    MD5: c26ae944472b483a5a2cec367261a07d
    SHA-256: b6723401f43bd2e6ab72df8d79c418e365a86234c5dada710278498f7fc88ff3
    Size: 148.80 kB

Asianux Server 8 for x86_64
  1. libserf-1.3.9-9.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 8a36a84438939ad196bdf4c4b88bb67f
    SHA-256: 3d52548592ea6127e351de7817d90b98d1b9e1aa90e249c7ac490caa4d7ccc79
    Size: 58.41 kB
  2. libserf-debugsource-1.3.9-9.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 028199e60c0ff780125f143ef374ac80
    SHA-256: 498d4529c552e828c0d38263358180c1b96573cbe2bb41bd8e0e62706b45d76d
    Size: 98.56 kB
  3. mod_dav_svn-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 6f12dd6ddb15edf9f1c3d79389434672
    SHA-256: 32d12bb154796a4e374f9582b87f6dd6aa8265fc6ed9c29b6cb03a02718aa822
    Size: 106.05 kB
  4. subversion-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 03fca1c50554f5a7c1982610714e220a
    SHA-256: 017a0e1cfa3f69cd0ae8203709b3eb4dac80e1df5e0e8b89ec0ebe4359149c0a
    Size: 1.12 MB
  5. subversion-debugsource-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 4998b8f2e81c8948ab4701ba2cb60d45
    SHA-256: cf48c0c68e44c523b98efd021ce21751de2b19202a6563f924e446050c168d03
    Size: 3.43 MB
  6. subversion-devel-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 58c8a37f2d9c940b6ee9a9139c415bc1
    SHA-256: dfb07cb8593f95ecd185ff24663567e8aa74c20f07dd8952e707efcba8643e47
    Size: 341.03 kB
  7. subversion-gnome-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 99a18cf4da3b8b0f9647434ee82e3bea
    SHA-256: 5e9be28ecc8a0aed5f350734a179beaabd2640cdd8bd32d990d86f2c8ab9a609
    Size: 23.44 kB
  8. subversion-javahl-1.10.2-5.module+el8+1510+d25e82dc.noarch.rpm
    MD5: 82f3a096aeb0ab7303fe7595068f2d94
    SHA-256: c2d9636837f443fe442b15b5932b025ef3bad9dbfb633a18a3ef153553f1e27f
    Size: 390.61 kB
  9. subversion-libs-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: f3d32386e856b82a2cf9f27bf4e9e8e4
    SHA-256: 0337140c084f13b2d287bf9a938266d023c268d540c8b03a00c747a9fc4d9ab8
    Size: 1.49 MB
  10. subversion-perl-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: 6164d29f0bbf9ecd50fea4c7b8a964f0
    SHA-256: d21f17136eca7fbc589a0a30b4b2e17d2f720036cfad6b645f221c671f2c6cb9
    Size: 0.95 MB
  11. subversion-tools-1.10.2-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: b126b3566c2aa860d01db495c5a8e987
    SHA-256: 2a77e64bec381874411dff15581f6722a872027d555b87e436c0e1eff612b182
    Size: 222.78 kB
  12. utf8proc-2.1.1-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: e6fcfb67912b61f80ad235ee7919120c
    SHA-256: 0a785627c8147f0b4d7e77357bd7ba451880adb88fe1d707ccf5e9d58f719316
    Size: 65.70 kB
  13. utf8proc-debugsource-2.1.1-5.module+el8+1510+d25e82dc.x86_64.rpm
    MD5: dc2ff8c5738ea72e8710af8328b69c7a
    SHA-256: a0a5767bad1997ad7019a289c87b8dc22179314f732c0518c6a662f6c790316b
    Size: 79.49 kB