File _patchinfo of Package patchinfo.23578
<patchinfo incident="23578">
<issue tracker="cve" id="2022-24070"/>
<issue tracker="cve" id="2021-28544"/>
<issue tracker="bnc" id="1197940">VUL-0: EMBARGOED: CVE-2022-24070: subversion: Subversion's mod_dav_svn is vulnerable to memory corruption</issue>
<issue tracker="bnc" id="1197939">VUL-0: EMBARGOED: CVE-2021-28544: subversion: SVN authz protected copyfrom paths regression</issue>
<packager>dspinella</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for subversion</summary>
<description>This update for subversion fixes the following issues:
- CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache
HTTP server. This could be exploited by a remote attacker to cause a denial of
service (bsc#1197940).
- CVE-2021-28544: Fixed an information leak issue where Subversion servers may
reveal the original path of files protected by path-based authorization
(bsc#1197939).
</description>
</patchinfo>