MGASA-2025-0058

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2025-0058.html

Import Source

https://advisories.mageia.org/MGASA-2025-0058.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2025-0058

Related

CVE-2024-46901

Published

2025-02-12T18:29:04Z

Modified

2025-02-12T17:57:25Z

Summary

Updated subversion packages fix security vulnerability

Details

Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. (CVE-2024-46901)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / subversion

Package

Name: subversion
Purl: pkg:rpm/mageia/subversion?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.14.2-2.1.mga9

Ecosystem specific

{
    "section": "core"
}