[ubuntu/wily-proposed] subversion 1.8.13-1ubuntu1 (Accepted)

Colin Watson cjwatson at ubuntu.com
Thu Aug 6 11:35:14 UTC 2015


subversion (1.8.13-1ubuntu1) wily; urgency=medium

  * Resynchronise with Debian.  Remaining changes:
    - debian/rules: Manually create the doxygen output directory, otherwise
      we get weird build failures when running parallel builds.
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - Only build on requested python versions (X-Python-Versions:).
    - debian/patches/verbose-tests: Make tests verbose.

subversion (1.8.13-1) unstable; urgency=medium

  * New upstream release.  Refresh patches.
    - Remove backported patches CVE-2014-8108, CVE-2014-3580, CVE-2015-0202,
      CVE-2015-0248, CVE-2015-0251, ruby2.0-build-fixes, and
      test-failure-with-optimizations.
  * Add patches wc-queries-test1-r1672295 and wc-queries-test2-r1673691, from
    upstream, to fix wc-queries test failures with new SQLite versions.
    (Closes: #785496)

subversion (1.8.10-6) unstable; urgency=high

  * patches/CVE-2015-0202: Excessive memory use with certain REPORT requests
    against mod_dav_svn with FSFS repositories
  * patches/CVE-2015-0248: Assertion DoS vulnerability for certain mod_dav_svn
    and svnserve requests with dynamically evaluated revision numbers
  * patches/CVE-2015-0251: mod_dav_svn allows spoofing svn:author property
    values for new revisions

Date: Thu, 06 Aug 2015 11:15:12 +0100
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/subversion/1.8.13-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 06 Aug 2015 11:15:12 +0100
Source: subversion
Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion python-subversion-dbg subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8
Architecture: source
Version: 1.8.13-1ubuntu1
Distribution: wily
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description:
 libapache2-mod-svn - Apache Subversion server modules for Apache httpd
 libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package)
 libsvn-dev - Development files for Apache Subversion libraries
 libsvn-doc - Developer documentation for libsvn
 libsvn-java - Java bindings for Apache Subversion
 libsvn-perl - Perl bindings for Apache Subversion
 libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package)
 libsvn1    - Shared libraries used by Apache Subversion
 python-subversion - Python bindings for Apache Subversion
 python-subversion-dbg - Python bindings for Subversion (debug extension)
 ruby-svn   - Ruby bindings for Apache Subversion
 subversion - Advanced version control system
 subversion-dbg - Debug symbols for Apache Subversion
 subversion-tools - Assorted tools related to Apache Subversion
Closes: 785496
Changes:
 subversion (1.8.13-1ubuntu1) wily; urgency=medium
 .
   * Resynchronise with Debian.  Remaining changes:
     - debian/rules: Manually create the doxygen output directory, otherwise
       we get weird build failures when running parallel builds.
     - Build a python-subversion-dbg package.
     - Build-depend on python-all-dbg.
     - Only build on requested python versions (X-Python-Versions:).
     - debian/patches/verbose-tests: Make tests verbose.
 .
 subversion (1.8.13-1) unstable; urgency=medium
 .
   * New upstream release.  Refresh patches.
     - Remove backported patches CVE-2014-8108, CVE-2014-3580, CVE-2015-0202,
       CVE-2015-0248, CVE-2015-0251, ruby2.0-build-fixes, and
       test-failure-with-optimizations.
   * Add patches wc-queries-test1-r1672295 and wc-queries-test2-r1673691, from
     upstream, to fix wc-queries test failures with new SQLite versions.
     (Closes: #785496)
 .
 subversion (1.8.10-6) unstable; urgency=high
 .
   * patches/CVE-2015-0202: Excessive memory use with certain REPORT requests
     against mod_dav_svn with FSFS repositories
   * patches/CVE-2015-0248: Assertion DoS vulnerability for certain mod_dav_svn
     and svnserve requests with dynamically evaluated revision numbers
   * patches/CVE-2015-0251: mod_dav_svn allows spoofing svn:author property
     values for new revisions
Checksums-Sha1:
 580ec57a741d3d8ef12e9917b2d2caf0053efa04 3226 subversion_1.8.13-1ubuntu1.dsc
 437cf662b7ed27d2254aa7ca334fdd74b49262ef 9326793 subversion_1.8.13.orig.tar.gz
 be3bb01a20139361fd27b7bdf9faa875703c9a85 276872 subversion_1.8.13-1ubuntu1.diff.gz
Checksums-Sha256:
 17e7e8bbab87c22770154da4d998697f64edb81e41d3e5faba1b8e265bdf0d0e 3226 subversion_1.8.13-1ubuntu1.dsc
 17e8900a877ac9f0d5ef437c20df437fec4eb2c5cb9882609d2277e2312da52c 9326793 subversion_1.8.13.orig.tar.gz
 c9d7b17c7fd7b9356bd27657d4fc46ff53acdd8f182d17b45e35ec27bb07152e 276872 subversion_1.8.13-1ubuntu1.diff.gz
Files:
 ccbb38870dd1bf0ebb8fce0f04974fe8 3226 vcs optional subversion_1.8.13-1ubuntu1.dsc
 8065b3698d799507fb72dd7926ed32b6 9326793 vcs optional subversion_1.8.13.orig.tar.gz
 be1c66604b351db77d5db017c77c3a75 276872 vcs optional subversion_1.8.13-1ubuntu1.diff.gz
Original-Maintainer: Peter Samuelson <peter at p12n.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Colin Watson <cjwatson at debian.org> -- Debian developer
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=CyYL
-----END PGP SIGNATURE-----


More information about the Wily-changes mailing list