| Package | Affected versions | Patched versions |
|---|---|---|
| subversion | ≥ 1.11.0, < 1.14.1≥ 1.9.0, < 1.10.7 | 1.14.11.10.7 |
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free