Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2020-17525 →

DEBIAN-CVE-2020-17525

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a cl...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 subversion

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]

Debian:13 subversion

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]

Debian:14 subversion

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-1"}]}]

Références

advisory security-tracker.debian.org