[Bug 821505] New: subversion maintenance updates to 1.7.10 and 1.6.23

newer
[Bug 829425] New: freezing when...

older
[Bug 829997] New: vm manager can't...

bugzilla_noreply＠novell.com

23 May 2013 23 May '13

20:51

https://bugzilla.novell.com/show_bug.cgi?id=821505 https://bugzilla.novell.com/show_bug.cgi?id=821505#c0 Summary: subversion maintenance updates to 1.7.10 and 1.6.23 Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: All OS/Version: openSUSE 12.3 Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: Andreas.Stieger@gmx.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0 maintenance releases 1.7.10 and 1.6.23 are being prepared, to be released 2013-05-30 after a round of testing and signing. Note that the following change apparently has a CVE number associated with it. An advisory is being prepared. * fix svnserve exiting when a client connection is aborted (r1482759) from https://svn.apache.org/repos/asf/subversion/tags/1.6.23/CHANGES Version 1.6.23 (30 May 2013, from /branches/1.6.x) http://svn.apache.org/repos/asf/subversion/tags/1.6.23 User-visible changes - Server-side bugfixes: * fix FSFS repository corruption due to newline in filename (issue #4340) * fix svnserve exiting when a client connection is aborted (r1482759) - Other tool improvements and bugfixes: * fix argument processing in contrib hook scripts (r1485350) Version 1.6.22 (Not released, see changes for 1.6.23.) https://svn.apache.org/repos/asf/subversion/tags/1.7.10/CHANGES Version 1.7.10 (30 May 2013, from /branches/1.7.x) http://svn.apache.org/repos/asf/subversion/tags/1.7.10 User-visible changes: - Client-side bugfixes: * fix 'svn revert' "no such table: revert_list" spurious error (issue #4168) * fix 'svn diff' doesn't show some locally added files (issue #3797) * fix changelist filtering when --changelist values aren't UTF8 (r1475724) * fix 'svn diff --git' shows wrong copyfrom (issue #4294) * fix 'svn diff -x-w' shows wrong changes (issues #4133 and #4270, r1427278) * fix 'svn blame' sometimes shows every line as modified (issue #4034) * fix regression in 'svn status -u' output for externals (r1434750) * fix file permissions change on commit of file with keywords (issue #4331) * improve some fatal error messages (r1465975) * fix externals not removed when working copy is made shallow (issue #3741) - Server-side bugfixes: * fix repository corruption due to newline in filename (issue #4340) * fix svnserve exiting when a client connection is aborted (r1482759) * fix svnserve memory use after clear (issue #4365) * fix repository corruption on power/disk failure on Windows (r1483781) Developer-visible changes - General: * make get-deps.sh compatible with Solaris /bin/sh (r1451678) * fix infinite recursion bug in get-deps.sh (r1421541, r1424977) * fix uninitialised output parameter of svn_fs_commit_txn() (r1461743) - Bindings: * fix JavaHL thread-safety bug (r1476359) Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

29 May 29 May

05:25

New subject: [Bug 821505] subversion maintenance updates to 1.7.10 and 1.6.23

https://bugzilla.novell.com/show_bug.cgi?id=821505 https://bugzilla.novell.com/show_bug.cgi?id=821505#c FeiXiang Zhang changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |dmueller@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

31 May 31 May

20:39

New subject: [Bug 821505] subversion maintenance updates to 1.7.10 and 1.6.23

https://bugzilla.novell.com/show_bug.cgi?id=821505 https://bugzilla.novell.com/show_bug.cgi?id=821505#c1 Andreas Stieger changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED CC| |security-team@suse.de AssignedTo|dmueller@suse.com |Andreas.Stieger@gmx.de --- Comment #1 from Andreas Stieger 2013-05-31 20:39:46 UTC --- These releases contain security fixes. CVE-2013-1968 https://subversion.apache.org/security/CVE-2013-1968-advisory.txt Subversion FSFS repositories can be corrupted by newline characters in filenames CVE-2013-2088 https://subversion.apache.org/security/CVE-2013-2088-advisory.txt Subversion releases up to 1.6.22 (inclusive), and 1.7.x tags up to 1.7.10 (inclusive, but excepting 1.7.x releases made from those tags), include a contrib/ script prone to shell injection by authenticated users, which could result in arbitrary code execution. CVE-2013-2112 https://subversion.apache.org/security/CVE-2013-2112-advisory.txt Subversion svnserve servers up to 1.7.9 (inclusive) are vulnerable to a remotely triggerable DoS vulnerability. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

20:58

New subject: [Bug 821505] subversion maintenance updates to 1.7.10 and 1.6.23

https://bugzilla.novell.com/show_bug.cgi?id=821505 https://bugzilla.novell.com/show_bug.cgi?id=821505#c2 Andreas Stieger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO CC| |maintenance@opensuse.org InfoProvider| |security-team@suse.de --- Comment #2 from Andreas Stieger 2013-05-31 20:58:27 UTC --- regarding CVE-2013-2088: We don't ship these scripts in binary packages: check-mime-type.pl svn-keyword-check.pl SR to openSUSE:Factory: https://build.opensuse.org/request/show/177104 Maintenance request: https://build.opensuse.org/request/show/177105 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.