Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade subversion | Mar 26, 2024 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade subversion-debugsourceUpgrade subversion-debuginfoUpgrade subversion-perl-debuginfoUpgrade subversion-devel-debuginfoUpgrade python3-subversionUpgrade subversion-perlUpgrade subversionUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-javahlUpgrade subversion-libsUpgrade python3-subversion-debuginfoUpgrade subversion-tools-debuginfoUpgrade subversion-libs-debuginfo | Feb 17, 2025 | Mar 27, 2022 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Applescript | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Archiveutility | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Automation | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Coretext | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Filesystemevents | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Icu | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Javascriptcore | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Liblouis | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Multitouch | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Pluginkit | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Psnormalizer | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Safari | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Smb | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Softwareupdate | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Spindump | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Spotlight | — | — | Oct 14, 2024 | Apr 12, 2022 |
| Apple Osx Subversion | — | Upgrade macOS to the latest version | Jul 27, 2022 | Jul 20, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 12, 2022 |
| Debian | — | Upgrade subversion | Apr 14, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade subversion-ltsUpgrade subversionUpgrade mod_dav_svn-ltsUpgrade mod_dav_svn | Nov 4, 2022 | Apr 13, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade subversion-helpUpgrade subversion | Aug 2, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mod_dav_svnUpgrade subversionUpgrade subversion-libs | Jun 22, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade subversion-helpUpgrade subversion | Jul 11, 2022 | Apr 12, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 12, 2022 |
| Suse | — | Upgrade subversion-perlUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-serverUpgrade subversion-python-ctypesUpgrade subversion-rubyUpgrade subversion-pythonUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0Upgrade libsvn_auth_kwallet-1-0Upgrade subversion-bash-completion | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade subversion-toolsUpgrade python-subversionUpgrade libapache2-mod-svnUpgrade python3-subversionUpgrade libsvn-perlUpgrade ruby-svnUpgrade libsvn1Upgrade subversionUpgrade libsvn-java | Apr 13, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub