On 22.09.2018 16:29, Branko Čibej wrote: > On 22.09.2018 16:22, Branko Čibej wrote: >> On 22.09.2018 16:13, Daniel Shahaf wrote: >>> Please don't download the artifacts from www*.apache.org but from a >>> mirror. I think there is a redirector CGI somewhere that automatically >>> redirects you to a mirror close to you, but I can't find it :( >> http://subversion.apache.org/download.cgi >> >> Linked from our main page. > [The original thread is on users@] > > I just noticed that when I click the 'Source Download' link in the > navigation tab on our web page, I get: > > http://subversion.apache.org/download.cgi?update=201708081800 > > instead of plain > > http://subversion.apache.org/download.cgi > > Can anyone remember why that is? It seems wrong, and also doesn't appear > to do anything, since the page contents and especially download links > appear to be the same in both cases. > > It was done in r1804690, the log message is: > > Release Subversion 1.9.7 with a fix for CVE-2017-9800. > > So it's possible that we forgot to clean that up after the security fix > release ... and also that the ?update= parameter doesn't appear to work > properly (any more).
I also noticed that publish/download.html now has explicit version numbers in links instead of using the [version] and [supported] ezt placeholders that are defined at the top of that file. Apparently this changed during the 1.10 release cycle. Again ... why? The log doesn't say. -- Brane
