Author: stsp
Date: Mon Jul 3 12:11:51 2017
New Revision: 1800661
URL: http://svn.apache.org/viewvc?rev=1800661&view=rev
Log:
* publish/faq.html: Tweak the SHA1 entry.
Modified:
subversion/site/publish/faq.html
Modified: subversion/site/publish/faq.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/faq.html?rev=1800661&r1=1800660&r2=1800661&view=diff
==============================================================================
--- subversion/site/publish/faq.html (original)
+++ subversion/site/publish/faq.html Mon Jul 3 12:11:51 2017
@@ -765,10 +765,15 @@ Subversion has two main areas of vulnera
</ul>
<p>
The FS layer uses SHA-1 when identifying objects to store in the repository.
-To prevent different content with idential SHA-1 from being stored, upgrade
-to 1.9.6 (which, by default, prevents storing data with such collisions) or
-install the pre-commit hook found <a
href="https://svn.apache.org/repos/asf/subversion/trunk/tools/hook-scripts/reject-known-sha1-collisions.sh";>
-here</a>. As an aside, we welcome Windows developers to submit a pre-commit
+To prevent different content with identical SHA-1 from being stored, upgrade
+to 1.9.6 or 1.8.18 which, by default, prevent storing data with such
collisions.
+See our <a href="/security/sha1-advisory.txt">SHA1 advisory</a> for details.
+</p>
+<p>
+Until these new releases are available, Unix-based servers can use the
pre-commit hook found
+<a
href="https://svn.apache.org/repos/asf/subversion/trunk/tools/hook-scripts/reject-known-sha1-collisions.sh";>
+here</a>.
+As an aside, we welcome Windows developers to submit a pre-commit
script for the Windows platform. More information on submission can be found
<a
href="https://subversion.apache.org/docs/community-guide/general.html#patches";>
here</a>.
</p>
