Format: 1.8 Date: Fri, 08 Apr 2022 12:43:33 +0300 Source: subversion Binary: libapache2-mod-svn libsvn-dev libsvn-doc libsvn-java libsvn-perl libsvn1 python-subversion ruby-svn subversion subversion-tools Architecture: amd64 all Version: 1.13.0-3ubuntu0.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Spyros Seimenis Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn1 - Shared libraries used by Apache Subversion python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.13.0-3ubuntu0.1) focal-security; urgency=medium . * SECURITY UPDATE: Use-after-free of object-pools when used as httpd module - debian/patches/CVE-2022-24070.patch: Register cleanup handler to reset authz initialization state in subversion/libsvn_repos/authz.c - CVE-2022-24070 * SECURITY UPDATE: Disclosure of copyfrom paths that should be hidden according to configured path-based authz rules when copying. - debian/patches/CVE-2021-28544.patch: Do not expose copyfrom information if path is configured private with authz. - CVE-2021-28544 Checksums-Sha1: 597852706595cb9c2aafd489c1ec349efcdb9204 391388 libapache2-mod-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb c74e1b47aeff8bcf847e983c2ad3412eff83570a 87364 libapache2-mod-svn_1.13.0-3ubuntu0.1_amd64.deb e14ac5e1fcd61607e362546e1666362912bfbca6 1606496 libsvn-dev_1.13.0-3ubuntu0.1_amd64.deb 20153efdf77ef4275653e7de253b894f2a782453 1622432 libsvn-doc_1.13.0-3ubuntu0.1_all.deb fccba813549ff4d1dcf532acfd84d3126f362e52 3345852 libsvn-java-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb cb8669456535a3a5929a0620e04921ad0e567528 575296 libsvn-java_1.13.0-3ubuntu0.1_amd64.deb 6f5d0b75a1015571c2594f39672d31c238200969 4347712 libsvn-perl-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 392c70f23d5067ce53f4751c1049ff698b809b20 934648 libsvn-perl_1.13.0-3ubuntu0.1_amd64.deb b3497bd14e23f8f55e71941112bff9c4d101c0ac 6151468 libsvn1-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb dcd7d12813024bd30409a48c9c5e4e91352ca5a3 1258256 libsvn1_1.13.0-3ubuntu0.1_amd64.deb 5b9c270410fac208e63f196b9ad1e73843db47d1 2649736 python-subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 3dd838ded8d4bb911091cebfd07700389f141a43 615068 python-subversion_1.13.0-3ubuntu0.1_amd64.deb 2385460e02ea823e09183056e2ca1cf393c21339 2256180 ruby-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 0d2f539e8f43ed61c44c7c33b83cf54a51fbebe1 495428 ruby-svn_1.13.0-3ubuntu0.1_amd64.deb 6f932dd4cf770b0efe1f112e7ad789023dd18981 878084 subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 8539dedd49b67b20aa622e1aba8edfb0b25e9053 133336 subversion-tools-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 61049f25d61a8ed37c8d2d790fa322a7b4dcbbb1 201352 subversion-tools_1.13.0-3ubuntu0.1_amd64.deb 9812f29419997f90663cf081106f91548300fc4a 21208 subversion_1.13.0-3ubuntu0.1_amd64.buildinfo df992460c095565f0a399c5579d0ed5ea20b07dd 824072 subversion_1.13.0-3ubuntu0.1_amd64.deb Checksums-Sha256: 7a7b2489ea86ced678d2bb37fc7a7dfdebb719636c2c2348b370a7fe8e5ef53b 391388 libapache2-mod-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 57965409b891fdc43081e9dcd174a86898f270d86ffb797e45e825d565e59720 87364 libapache2-mod-svn_1.13.0-3ubuntu0.1_amd64.deb bcc754dffc8df6b93411e29e98ede72b47715d99b9ffd6a5b603fa6c6e13be7f 1606496 libsvn-dev_1.13.0-3ubuntu0.1_amd64.deb 2a9af61f5fdb439d6691bb1b01327d9def715186f15d2f7b543bab862cd35238 1622432 libsvn-doc_1.13.0-3ubuntu0.1_all.deb 23465aad9aab8c795dae6a738b6abeb0bc1110e8b6c142781c33225bda7f4138 3345852 libsvn-java-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb db6055f1459c2c6c1145f91becdde1e291fd011d193568468ed3621e63389256 575296 libsvn-java_1.13.0-3ubuntu0.1_amd64.deb bb18c461bf0a1ee08d80378e9509aec35f78ac0a5d03fbf039b6bed493378a60 4347712 libsvn-perl-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 425e5c5fa625a703f677047fcef2badea4860eaeddba6ba97e45931d57f28cc9 934648 libsvn-perl_1.13.0-3ubuntu0.1_amd64.deb b75395d25ffc4e6036f9e8711b2ea01c5cb3e4d4fd48b28d9f088de42d302bca 6151468 libsvn1-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 07a92288140cf258c9a2104943165d2a3dd54c4fc14d59ab36ee6b6b23007ad1 1258256 libsvn1_1.13.0-3ubuntu0.1_amd64.deb 9e0e73de7d5d8fcb91921ba9f68839821a31349d9db10d9eae50550d7ea4110c 2649736 python-subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 8f06acbd9b822719106d7dc7fb8333cec55af36a7e6fc7d14006f4a35ea8a4e7 615068 python-subversion_1.13.0-3ubuntu0.1_amd64.deb 3c15b8bdf0c980637bcb754bc171b4a51eeeabef926f4953695b055df58bac0c 2256180 ruby-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 2021b2074ed6f8ef83c5fb620094466aa45e1f95a38d80ed8a9a77a4fffa9539 495428 ruby-svn_1.13.0-3ubuntu0.1_amd64.deb ec53f035ebdda3379826cdc87be86578e30c717b9009f03f7c3c06d444a0698e 878084 subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 1809589efdb8d7c640d8941c8a1ecd74fe41ad5d39ff794d3862592c52eca6ad 133336 subversion-tools-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb d8d5e9cf47ba7da2c410a62ab4e7df897882330dcfd29d0ce520dbf9fe764ec6 201352 subversion-tools_1.13.0-3ubuntu0.1_amd64.deb 23a69cbaadcdd074de8e04c8ce2cd3b78f8539c8c9eb86380c1407e4ace0cdf3 21208 subversion_1.13.0-3ubuntu0.1_amd64.buildinfo 896152789d507cc2065bc3abf4d7621e1eb933f5f8227e3a90d2abe3fa4b98e9 824072 subversion_1.13.0-3ubuntu0.1_amd64.deb Files: 48cc71b307343f43a35b7f1e8f112bc6 391388 debug optional libapache2-mod-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 4e8442f710cfe8f292886b3b65da7b1c 87364 httpd optional libapache2-mod-svn_1.13.0-3ubuntu0.1_amd64.deb c082f7a7b28ec9ee5f68d1f78d2a07e7 1606496 libdevel optional libsvn-dev_1.13.0-3ubuntu0.1_amd64.deb 2cc917afb282dd45888be8631c3ca4ac 1622432 doc optional libsvn-doc_1.13.0-3ubuntu0.1_all.deb 9158ca9b2009da1ac98d3271d6adf589 3345852 debug optional libsvn-java-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 3146f3ff505eb80f9f0edf16f2c91c05 575296 java optional libsvn-java_1.13.0-3ubuntu0.1_amd64.deb f6e7371a776303dce469c1577c21bf1c 4347712 debug optional libsvn-perl-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 0a3d46feb1ca76d5a7255b2d4e6a8f8f 934648 perl optional libsvn-perl_1.13.0-3ubuntu0.1_amd64.deb f71a59a4b0767b86cfe9b213cab54518 6151468 debug optional libsvn1-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 5b7a9d70adf4ca0cd8f370d0edd8004f 1258256 libs optional libsvn1_1.13.0-3ubuntu0.1_amd64.deb 79a952126e60d2771364b15af5421018 2649736 debug optional python-subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 2ad79221012c085b25a7594b8194e7e9 615068 python optional python-subversion_1.13.0-3ubuntu0.1_amd64.deb caea0ef1253e04904087d6289a24f406 2256180 debug optional ruby-svn-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb d27bc0fda07ed035257745c5747d1cd4 495428 ruby optional ruby-svn_1.13.0-3ubuntu0.1_amd64.deb 257cf7efa72b817c71791d1ddb82e2db 878084 debug optional subversion-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb e6b986327508dcea712ceea5b3b2a88a 133336 debug optional subversion-tools-dbgsym_1.13.0-3ubuntu0.1_amd64.ddeb 2b31526c778f0f041794733048a02d39 201352 vcs optional subversion-tools_1.13.0-3ubuntu0.1_amd64.deb 5525fd2543a3bed4547ced6e19e58bb6 21208 vcs optional subversion_1.13.0-3ubuntu0.1_amd64.buildinfo abd846b8a4cacb18e0b7ad6bbb6b50a8 824072 vcs optional subversion_1.13.0-3ubuntu0.1_amd64.deb Original-Maintainer: James McCoy