Control: severity -1 normal Control: tag -1 - security On Mon, Sep 19, 2022 at 02:53:24AM +0200, Vincent Lefevre wrote: > On 2022-09-18 14:40:36 -0400, James McCoy wrote: > > You're saying that the change you were preparing was lost, but nothing > > was actually changed in svn, right? > > Yes. What happens is that svn retrieves the current property value > from the server, puts it in a file "/tmp/svn-prop.tmp" and runs an > editor on this file. The user modifies this file and quits the > editor. Then svn normally updates this property on the server > (from the modified svn-prop.tmp) and removes this temporary file. > The issue is that svn removes this file even when the update fails.
Ok. I don't see this as either "critical" or a security issue. "Data loss" implies the actual versioned data is corrupted/lost. Cheers, -- James GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7 2D23 DFE6 91AE 331B A3DB
