[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

TortoiseSVN 1.8.8 released

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Mon, 11 Aug 2014 22:04:48 +0200


TortoiseSVN 1.8.8 is ready for download.
It is linked against Subversion 1.8.10.

This is a bugfix-only release.

The svn library fixes two security issues:
  CVE-2014-3522: ra_serf improper validation of wildcards in SSL certs.
  CVE-2014-3528: credentials cached with svn may be sent to wrong server.

The serf library fixes one security issue:
  CVE-2014-3504: serf does not correctly validate certificates
   with wildcards in them for HTTPs

CVE-2014-3522 and CVE-2014-3504 are for the same issue, but have
separate CVE numbers, one for each lib.

For more info on the security issues in svn please read the full
advisories here:

And we're linking now with OpenSSL 1.0.1i which has also a few security
issues fixed, which you can read about here:

You can get it from our download page:

Since it may take a while for the website changes to go live, here's the
link to the sourceforge files section:

Since there are security issues fixed, we've also released TortoiseSVN
1.7.15 which is available from the Sourceforge files section:

The changelog for TortoiseSVN 1.8.8:

Version 1.8.8
- BUG: Issue #640: Restore after commit - Unchecked
        files are not restored upon commit. (Stefan)
- BUG: Issue #641: svn:global-ignores does not work
        with multiple targets selected. (Stefan)
- BUG: Issue #642: Log message not saved in history
        on cancel. (Stefan)
- BUG: Issue #644: Bug in rename when "similar file name"
        renames are involved and file names
        include multiple dots. (Stefan)
- BUG: Issue #653: Unified diff from log no longer
        includes property changes. (Stefan)


   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
To unsubscribe from this discussion, e-mail: [dev-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2014-08-11 22:05:01 CEST

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.