Security update for subversion SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1162-1 Final 1 1 2022-04-12T12:58:42Z current 2022-04-12T12:58:42Z 2022-04-12T12:58:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for subversion This update for subversion fixes the following issues: - CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache HTTP server. This could be exploited by a remote attacker to cause a denial of service (bsc#1197940). - CVE-2021-28544: Fixed an information leak issue where Subversion servers may reveal the original path of files protected by path-based authorization (bsc#1197939). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-1162,SUSE-SLE-Module-Basesystem-15-SP3-2022-1162,SUSE-SLE-Module-Development-Tools-15-SP3-2022-1162,SUSE-SLE-Module-Server-Applications-15-SP3-2022-1162,openSUSE-SLE-15.3-2022-1162,openSUSE-SLE-15.4-2022-1162 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221162-1/ Link for SUSE-SU-2022:1162-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010684.html E-Mail link for SUSE-SU-2022:1162-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1197939 SUSE Bug 1197939 https://bugzilla.suse.com/1197940 SUSE Bug 1197940 https://www.suse.com/security/cve/CVE-2021-28544/ SUSE CVE CVE-2021-28544 page https://www.suse.com/security/cve/CVE-2022-24070/ SUSE CVE CVE-2022-24070 page SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 openSUSE Leap 15.3 libsvn_auth_gnome_keyring-1-0-1.10.6-150300.10.8.1 libsvn_auth_kwallet-1-0-1.10.6-150300.10.8.1 subversion-1.10.6-150300.10.8.1 subversion-bash-completion-1.10.6-150300.10.8.1 subversion-devel-1.10.6-150300.10.8.1 subversion-perl-1.10.6-150300.10.8.1 subversion-python-1.10.6-150300.10.8.1 subversion-python-ctypes-1.10.6-150300.10.8.1 subversion-ruby-1.10.6-150300.10.8.1 subversion-server-1.10.6-150300.10.8.1 subversion-tools-1.10.6-150300.10.8.1 subversion-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 subversion-devel-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 subversion-bash-completion-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 subversion-perl-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 subversion-python-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 subversion-tools-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 subversion-server-1.10.6-150300.10.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libsvn_auth_gnome_keyring-1-0-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 libsvn_auth_kwallet-1-0-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-bash-completion-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-devel-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-perl-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-python-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-python-ctypes-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-ruby-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-server-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 subversion-tools-1.10.6-150300.10.8.1 as a component of openSUSE Leap 15.3 Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable. CVE-2021-28544 SUSE Linux Enterprise Module for Basesystem 15 SP3:subversion-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:subversion-devel-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-bash-completion-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-perl-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-python-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-tools-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:subversion-server-1.10.6-150300.10.8.1 openSUSE Leap 15.3:libsvn_auth_gnome_keyring-1-0-1.10.6-150300.10.8.1 openSUSE Leap 15.3:libsvn_auth_kwallet-1-0-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-bash-completion-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-devel-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-perl-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-python-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-python-ctypes-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-ruby-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-server-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-tools-1.10.6-150300.10.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221162-1/ https://www.suse.com/security/cve/CVE-2021-28544.html CVE-2021-28544 https://bugzilla.suse.com/1197939 SUSE Bug 1197939 Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected. CVE-2022-24070 SUSE Linux Enterprise Module for Basesystem 15 SP3:subversion-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:subversion-devel-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-bash-completion-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-perl-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-python-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:subversion-tools-1.10.6-150300.10.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:subversion-server-1.10.6-150300.10.8.1 openSUSE Leap 15.3:libsvn_auth_gnome_keyring-1-0-1.10.6-150300.10.8.1 openSUSE Leap 15.3:libsvn_auth_kwallet-1-0-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-bash-completion-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-devel-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-perl-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-python-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-python-ctypes-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-ruby-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-server-1.10.6-150300.10.8.1 openSUSE Leap 15.3:subversion-tools-1.10.6-150300.10.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221162-1/ https://www.suse.com/security/cve/CVE-2022-24070.html CVE-2022-24070 https://bugzilla.suse.com/1197940 SUSE Bug 1197940