Re: ra_svn replay-range + svnsync + mod_dav_svn = corrupted revisions!

On Aug 11, 2009, at 9:41 AM, Ben Collins-Sussman wrote:

> This is a pretty serious set of bugs.

Thanks for finding them.

> ...

> Who is vulnerable to this bug? Anyone running 'svnsync sync' from
> svnserve to mod_dav_svn, using svnsync 1.5.x or later. That's a
> potentially large audience.
>
> I'm happy to try and patch ra_svn and svnsync right now, but the
> question is, how soon until the fixes go out in 1.6.x? Are they worth
> doing a 1.5.x release for?

1.6.5 is currently scheduled for next week. But if the bug is serious
enough, and the fix takes longer to code and review than the next 8
days, we can consider pushing 1.6.5 out another week or so.

As for 1.5.8, I've been making noises about cutting a (final?) 1.5.x
release for a some time, since we do have a number of pending bugfixes
either nominated or already merged. This seems like a push over the
top of that hill.

-Hyrum

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=462&dsMessageId=2382510
Received on 2009-08-11 17:00:44 CEST