svn commit: r1800659 - in /subversion/site/publish/docs/release-notes: 1.8.html 1.9.html

[stsp]

Author: stsp
Date: Mon Jul  3 12:05:41 2017
New Revision: 1800659

URL: http://svn.apache.org/viewvc?rev=1800659&view=rev
Log:
* release-notes/1.8.html,
  release-notes/1.9.html: Link to SHA1 advisory from known issues section.

Modified:
    subversion/site/publish/docs/release-notes/1.8.html
    subversion/site/publish/docs/release-notes/1.9.html

Modified: subversion/site/publish/docs/release-notes/1.8.html
URL: 
http://svn.apache.org/viewvc/subversion/site/publish/docs/release-notes/1.8.html?rev=1800659&r1=1800658&r2=1800659&view=diff
==============================================================================
--- subversion/site/publish/docs/release-notes/1.8.html (original)
+++ subversion/site/publish/docs/release-notes/1.8.html Mon Jul  3 12:05:41 2017
@@ -2608,6 +2608,21 @@ similar errors with other httpd configur
 
 </div> <!-- mod_dav_svn-fsmap -->
 
+<div class="h3" id="shattered-sha1">
+<h3>Subversion is unable to store SHA1 collisions
+  <a class="sectionlink" href="#shattered-sha1"
+    title="Link to this section">&para;</a>
+</h3>
+
+<p>
+Subversion up to and including 1.8.17 can incorrectly store files with
+different content but the same SHA1 checksum. We recommend that all
+servers update to 1.8.18 and enable representation sharing.
+See our <a href="/security/sha1-advisory.txt">SHA1 advisory</a> for details.
+</p>
+
+</div>  <!-- shattered-sha1 -->
+
 </div>  <!-- issues -->
 
 <div class="h2" id="svn-1.6-deprecation">

Modified: subversion/site/publish/docs/release-notes/1.9.html
URL: 
http://svn.apache.org/viewvc/subversion/site/publish/docs/release-notes/1.9.html?rev=1800659&r1=1800658&r2=1800659&view=diff
==============================================================================
--- subversion/site/publish/docs/release-notes/1.9.html (original)
+++ subversion/site/publish/docs/release-notes/1.9.html Mon Jul  3 12:05:41 2017
@@ -1451,6 +1451,21 @@ protocol.
 
 </div>  <!-- httpv1-commit-race -->
 
+<div class="h3" id="shattered-sha1">
+<h3>Subversion is unable to store SHA1 collisions
+  <a class="sectionlink" href="#shattered-sha1"
+    title="Link to this section">&para;</a>
+</h3>
+
+<p>
+Subversion up to and including 1.9.5 can incorrectly store files with
+different content but the same SHA1 checksum. We recommend that all
+servers update to 1.9.6 and enable representation sharing.
+See our <a href="/security/sha1-advisory.txt">SHA1 advisory</a> for details.
+</p>
+
+</div>  <!-- shattered-sha1 -->
+
 </div>  <!-- issues -->
 
 <div class="h2" id="troubleshooting">