I'll try to get the bugs fixed in the next 2-3 days. They don't look
so hard to fix.
On Tue, Aug 11, 2009 at 9:59 AM, Hyrum K.
Wright<hyrum_wright_at_mail.utexas.edu> wrote:
>
> On Aug 11, 2009, at 9:41 AM, Ben Collins-Sussman wrote:
>
>> This is a pretty serious set of bugs.
>
> Thanks for finding them.
>
>> ...
>
>> Who is vulnerable to this bug? Anyone running 'svnsync sync' from
>> svnserve to mod_dav_svn, using svnsync 1.5.x or later. That's a
>> potentially large audience.
>>
>> I'm happy to try and patch ra_svn and svnsync right now, but the
>> question is, how soon until the fixes go out in 1.6.x? Are they worth
>> doing a 1.5.x release for?
>
> 1.6.5 is currently scheduled for next week. But if the bug is serious
> enough, and the fix takes longer to code and review than the next 8 days, we
> can consider pushing 1.6.5 out another week or so.
>
> As for 1.5.8, I've been making noises about cutting a (final?) 1.5.x release
> for a some time, since we do have a number of pending bugfixes either
> nominated or already merged. This seems like a push over the top of that
> hill.
>
> -Hyrum
>
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=462&dsMessageId=2382518
Received on 2009-08-11 17:08:53 CEST