Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-17525

Fixed in a distro release EPSS 40%

Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7

Published 2021-03-17 · CVE record · OSV

Products: Apache Software Foundation Apache Subversion

Distro releases

ReleasePackageFixed in
AlmaLinux:8libserf1.3.9-9.module_el8.3.0+2053+ac338b6d
AlmaLinux:8libserf1.3.9-9.module_el8.6.0+2912+eb1cdf5a
AlmaLinux:8libserf1.3.9-9.module_el8.4.0+2266+ac338b6d
AlmaLinux:8mod_dav_svn1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8mod_dav_svn1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8mod_dav_svn1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-devel1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion-devel1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion-devel1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-gnome1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-gnome1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion-gnome1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion-javahl1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-libs1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion-libs1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion-libs1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-perl1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8subversion-perl1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion-perl1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion-tools1.10.2-4.module_el8.5.0+73+aa7e29ed
AlmaLinux:8subversion-tools1.10.2-4.module_el8.4.0+2266+ac338b6d
AlmaLinux:8subversion-tools1.10.2-4.module_el8.3.0+2053+ac338b6d
AlmaLinux:8utf8proc2.1.1-5.module_el8.4.0+2266+ac338b6d
AlmaLinux:8utf8proc2.1.1-5.module_el8.3.0+2053+ac338b6d
AlmaLinux:8utf8proc2.1.1-5.module_el8.6.0+2912+eb1cdf5a
Alpine:v3.10subversion1.12.2-r1
Alpine:v3.11subversion1.12.2-r2
Alpine:v3.12subversion1.13.0-r3
Alpine:v3.13subversion1.14.1-r0
Alpine:v3.14subversion1.14.1-r0
Alpine:v3.15subversion1.14.1-r0
Alpine:v3.16subversion1.14.1-r0
Alpine:v3.17subversion1.14.1-r0
Alpine:v3.18subversion1.14.1-r0
Alpine:v3.19subversion1.14.1-r0
Alpine:v3.20subversion1.14.1-r0
Alpine:v3.21subversion1.14.1-r0
Alpine:v3.22subversion1.14.1-r0
Alpine:v3.23subversion1.14.1-r0
Alpine:v3.24subversion1.14.1-r0
Debian:10subversion1.10.4-1+deb10u2
Debian:12subversion1.14.1-1
Debian:13subversion1.14.1-1
Debian:14subversion1.14.1-1
Debian:9subversion1.9.5-1+deb9u6
Red Hat:enterprise_linux:8libserf0:1.3.9-9.module+el8.3.0+6671+2675c974
Red Hat:enterprise_linux:8libserf-debuginfo0:1.3.9-9.module+el8.3.0+6671+2675c974
Red Hat:enterprise_linux:8libserf-debugsource0:1.3.9-9.module+el8.3.0+6671+2675c974
Red Hat:enterprise_linux:8mod_dav_svn0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8mod_dav_svn-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-debugsource0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-devel0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-devel-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-gnome0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-gnome-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-javahl0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-libs0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-libs-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-perl0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-perl-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-tools0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8subversion-tools-debuginfo0:1.10.2-4.module+el8.3.0+9886+ac338b6d
Red Hat:enterprise_linux:8utf8proc0:2.1.1-5.module+el8.3.0+6671+2675c974
Red Hat:enterprise_linux:8utf8proc-debuginfo0:2.1.1-5.module+el8.3.0+6671+2675c974
Red Hat:enterprise_linux:8utf8proc-debugsource0:2.1.1-5.module+el8.3.0+6671+2675c974
Red Hat:rhel_eus:8.1libserf0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.1libserf-debuginfo0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.1libserf-debugsource0:1.3.9-9.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.1mod_dav_svn0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1mod_dav_svn-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-debugsource0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-devel0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-devel-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-gnome0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-gnome-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-javahl0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-libs0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-libs-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-perl0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-perl-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-tools0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1subversion-tools-debuginfo0:1.10.2-2.module+el8.1.0+9889+0a9c19c4.1
Red Hat:rhel_eus:8.1utf8proc0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.1utf8proc-debuginfo0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.1utf8proc-debugsource0:2.1.1-5.module+el8.1.0+9889+0a9c19c4
Red Hat:rhel_eus:8.2libserf0:1.3.9-9.module+el8.2.0+9887+08558108
Red Hat:rhel_eus:8.2libserf-debuginfo0:1.3.9-9.module+el8.2.0+9887+08558108
Red Hat:rhel_eus:8.2libserf-debugsource0:1.3.9-9.module+el8.2.0+9887+08558108
Red Hat:rhel_eus:8.2mod_dav_svn0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2mod_dav_svn-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-debugsource0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-devel0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-devel-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-gnome0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-gnome-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-javahl0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-libs0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-libs-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-perl0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-perl-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-tools0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2subversion-tools-debuginfo0:1.10.2-2.module+el8.2.0+9887+08558108.1
Red Hat:rhel_eus:8.2utf8proc0:2.1.1-5.module+el8.2.0+9887+08558108
Red Hat:rhel_eus:8.2utf8proc-debuginfo0:2.1.1-5.module+el8.2.0+9887+08558108
Red Hat:rhel_eus:8.2utf8proc-debugsource0:2.1.1-5.module+el8.2.0+9887+08558108
Rocky Linux:8libserf0:1.3.9-9.module+el8.4.0+407+38733e5a
Rocky Linux:8libserf0:1.3.9-9.module+el8.7.0+1065+42200b2e
Rocky Linux:8subversion0:1.10.2-4.module+el8.4.0+407+38733e5a
Rocky Linux:8utf8proc0:2.1.1-5.module+el8.4.0+407+38733e5a
SUSE:Enterprise Storage 6subversion1.10.6-3.15.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise High Performance Computing 15-ESPOSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise High Performance Computing 15-LTSSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise Module for Basesystem 15 SP2subversion1.10.6-3.15.1
SUSE:Linux Enterprise Module for Development Tools 15 SP2subversion1.10.6-3.15.1
SUSE:Linux Enterprise Module for Server Applications 15 SP2subversion1.10.6-3.15.1
SUSE:Linux Enterprise Server 15 SP1-BCLsubversion1.10.6-3.15.1
SUSE:Linux Enterprise Server 15 SP1-LTSSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise Server 15-LTSSsubversion1.10.6-3.15.1
SUSE:Linux Enterprise Server for SAP Applications 15subversion1.10.6-3.15.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1subversion1.10.6-3.15.1
SUSE:Linux Enterprise Software Development Kit 12 SP5subversion1.10.6-3.3.1
SUSE:Manager Proxy 4.0subversion1.10.6-3.15.1
SUSE:Manager Retail Branch Server 4.0subversion1.10.6-3.15.1
SUSE:Manager Server 4.0subversion1.10.6-3.15.1
Ubuntu:18.04:LTSsubversion1.9.7-4ubuntu1.1
Ubuntu:20.04:LTSsubversion1.13.0-3ubuntu0.2
Ubuntu:Pro:16.04:LTSsubversion1.9.3-2ubuntu1.3+esm1
openSUSE:Leap 15.2subversion1.10.6-lp152.2.9.1
openSUSE:Tumbleweedsubversion1.14.1-1.11