VDB
GCVE-110-MAGEIA-2015-326
GCVE-110-MAGEIA-2015-326
Advisory Published
Subversion's mod_authz_svn does not properly restrict anonymous access in some
mixed anonymous/authenticated environments when using Apache httpd 2.4. The
result is that anonymous access may be possible to files for which only
authenticated access should be possible (CVE-2015-3184).
Subversion servers, both httpd and svnserve, will reveal some paths that
should be hidden by path-based authz. When a node is copied from an
unreadable location to a readable location the unreadable path may be
revealed. This vulnerablity only reveals the path, it does not reveal the
contents of the path (CVE-2015-3187).
This update also re-enables the java subpackage for the Mageia 5 subversion
package (mga#16075).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | subversion | 0 (affected), 1.8.14-1.mga4 (unaffected) | — |
| Mageia | subversion | 0 (affected), 1.8.14-1.mga5 (unaffected) | — |
References
Browse GCVE Records
73,280 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.