[suggest] Subversion 1.6.13 update released with HTTP/HTTPS security patch

[Nico Kadel-Garcia]

There's a recent security update for Subversion HTTP and HTTPS
servers, due to a flaw in the mod_dav_svn modu The announcement and
the security notice are at http://subversion.apache.org/. (I'm very
glad that Subversion is now hosted there: it lends additional open
source credit to it.)

I've just built the new 1.6.13 release, using RPMforge SRPM's for
1.6.12, with the new source tarball and the version number updated.
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

[Yury V. Zaytsev]

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

Subversion.spec patch attached. It changes the following lines:

* the subversion version
* the release number
* the swig download link

Regards,
jpo

[Yury V. Zaytsev]

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

Could you also update the subversion-1.5.spec with the attached patch?

It only updates it to subversion 1.5.7. It doesn't apply the security
patch listed at the end of CVE-2010-3315 advisory
(http://subversion.apache.org/security/CVE-2010-3315-advisory.txt).

Note: The advisory mentions a subversion 1.5.8 that hasn't been
released yet (hopefully it will be soon).

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

Could you also update the subversion-1.5.spec with the attached patch?

It only updates it to subversion 1.5.7. It doesn't apply the security
patch listed at the end of CVE-2010-3315 advisory
(http://subversion.apache.org/security/CVE-2010-3315-advisory.txt).

Note: The advisory mentions a subversion 1.5.8 that hasn't been
released yet (hopefully it will be soon).

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

Could you also update the subversion-1.5.spec with the attached patch?

It only updates it to subversion 1.5.7. It doesn't apply the security
patch listed at the end of CVE-2010-3315 advisory
(http://subversion.apache.org/security/CVE-2010-3315-advisory.txt).

Note: The advisory mentions a subversion 1.5.8 that hasn't been
released yet (hopefully it will be soon).

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

Could you also update the subversion-1.5.spec with the attached patch?

It only updates it to subversion 1.5.7. It doesn't apply the security
patch listed at the end of CVE-2010-3315 advisory
(http://subversion.apache.org/security/CVE-2010-3315-advisory.txt).

Note: The advisory mentions a subversion 1.5.8 that hasn't been
released yet (hopefully it will be soon).

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

Could you also update the subversion-1.5.spec with the attached patch?

It only updates it to subversion 1.5.7. It doesn't apply the security
patch listed at the end of CVE-2010-3315 advisory
(http://subversion.apache.org/security/CVE-2010-3315-advisory.txt).

Note: The advisory mentions a subversion 1.5.8 that hasn't been
released yet (hopefully it will be soon).

Regards,
jpo

[Yury V. Zaytsev]

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

[Yury V. Zaytsev]

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

[Yury V. Zaytsev]

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

[Yury V. Zaytsev]

Post by Yury V. Zaytsev
You can encourage it by sending a patch that I will commit immediately.

Many thanks, committed!

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

Subversion.spec patch attached. It changes the following lines:

* the subversion version
* the release number
* the swig download link

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

Subversion.spec patch attached. It changes the following lines:

* the subversion version
* the release number
* the swig download link

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

Subversion.spec patch attached. It changes the following lines:

* the subversion version
* the release number
* the swig download link

Regards,
jpo

[Jose Pedro Oliveira]

Yuri,

Post by Yury V. Zaytsev

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

Subversion.spec patch attached. It changes the following lines:

* the subversion version
* the release number
* the swig download link

Regards,
jpo

[Nico Kadel-Garcia]

There's a recent security update for Subversion HTTP and HTTPS
servers, due to a flaw in the mod_dav_svn modu The announcement and
the security notice are at http://subversion.apache.org/. (I'm very
glad that Subversion is now hosted there: it lends additional open
source credit to it.)

I've just built the new 1.6.13 release, using RPMforge SRPM's for
1.6.12, with the new source tarball and the version number updated.
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

[Yury V. Zaytsev]

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

[Nico Kadel-Garcia]

There's a recent security update for Subversion HTTP and HTTPS
servers, due to a flaw in the mod_dav_svn modu The announcement and
the security notice are at http://subversion.apache.org/. (I'm very
glad that Subversion is now hosted there: it lends additional open
source credit to it.)

I've just built the new 1.6.13 release, using RPMforge SRPM's for
1.6.12, with the new source tarball and the version number updated.
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

[Yury V. Zaytsev]

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

[Nico Kadel-Garcia]

There's a recent security update for Subversion HTTP and HTTPS
servers, due to a flaw in the mod_dav_svn modu The announcement and
the security notice are at http://subversion.apache.org/. (I'm very
glad that Subversion is now hosted there: it lends additional open
source credit to it.)

I've just built the new 1.6.13 release, using RPMforge SRPM's for
1.6.12, with the new source tarball and the version number updated.
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

[Yury V. Zaytsev]

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.

[Nico Kadel-Garcia]

There's a recent security update for Subversion HTTP and HTTPS
servers, due to a flaw in the mod_dav_svn modu The announcement and
the security notice are at http://subversion.apache.org/. (I'm very
glad that Subversion is now hosted there: it lends additional open
source credit to it.)

I've just built the new 1.6.13 release, using RPMforge SRPM's for
1.6.12, with the new source tarball and the version number updated.
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

[Yury V. Zaytsev]

Post by Nico Kadel-Garcia
It's building and operating well under 64-bit RHEL 5. Can I encourage
testing and an update for this package, due to the server side
security issue?

You can encourage it by sending a patch that I will commit immediately.