Hello community, here is the log from the commit of package subversion for openSUSE:Factory checked in at 2015-04-02 16:03:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/subversion (Old) and /work/SRC/openSUSE:Factory/.subversion.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "subversion" Changes: -------- --- /work/SRC/openSUSE:Factory/subversion/subversion.changes 2015-03-28 18:39:02.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.subversion.new/subversion.changes 2015-04-02 16:03:28.000000000 +0200 @@ -1,0 +2,24 @@ +Tue Mar 31 12:00:00 UTC 2015 - [email protected] + +- Apache Subversion 1.8.13 + This release fixes three vulerabilities: + * Subversion HTTP servers with FSFS repositories were vulnerable + to a remotely triggerable excessive memory use with certain + REPORT requests. + (bsc#923793 CVE-2015-0202) + * Subversion mod_dav_svn and svnserve were vulnerable to a + remotely triggerable assertion DoS vulnerability for certain + requests with dynamically evaluated revision numbers. + (bsc#923794 CVE-2015-0248) + * Subversion HTTP servers allow spoofing svn:author property + values for new revisions + (bsc#923795 CVE-2015-0251) +- Non-security updates: + * fixes number of client and server side non-security bugs + * improved working copy performanc + * reduction of resource use + * stability improvements + * usability improvements +- 1.8.12 was not released + +------------------------------------------------------------------- Old: ---- subversion-1.8.11.tar.bz2 subversion-1.8.11.tar.bz2.asc New: ---- subversion-1.8.13.tar.bz2 subversion-1.8.13.tar.bz2.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ subversion.spec ++++++ --- /var/tmp/diff_new_pack.rKm2my/_old 2015-04-02 16:03:29.000000000 +0200 +++ /var/tmp/diff_new_pack.rKm2my/_new 2015-04-02 16:03:29.000000000 +0200 @@ -36,7 +36,7 @@ %bcond_without python_ctypes %bcond_with all_regression_tests Name: subversion -Version: 1.8.11 +Version: 1.8.13 Release: 0 Summary: Subversion version control system License: Apache-2.0 ++++++ subversion-1.8.11.tar.bz2 -> subversion-1.8.13.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/subversion/subversion-1.8.11.tar.bz2 /work/SRC/openSUSE:Factory/.subversion.new/subversion-1.8.13.tar.bz2 differ: char 11, line 1
