[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

[announce-unsubscribe@tortoisesvn.tigris.org]

From: Moshe Fishman <moshe_at_noam-it.net>
Date: Tue, 12 Aug 2014 18:33:17 +0300

-----Original Message-----
From: Stefan Küng [mailto:tortoisesvn_at_gmail.com]
Sent: Monday, August 11, 2014 11:05 PM
To: users
Subject: TortoiseSVN 1.8.8 released

Hi,

TortoiseSVN 1.8.8 is ready for download.
It is linked against Subversion 1.8.10.

This is a bugfix-only release.

The svn library fixes two security issues:
  CVE-2014-3522: ra_serf improper validation of wildcards in SSL certs.
  CVE-2014-3528: credentials cached with svn may be sent to wrong server.

The serf library fixes one security issue:
  CVE-2014-3504: serf does not correctly validate certificates
   with wildcards in them for HTTPs

CVE-2014-3522 and CVE-2014-3504 are for the same issue, but have separate CVE numbers, one for each lib.

For more info on the security issues in svn please read the full
advisories here:
http://subversion.apache.org/security/

And we're linking now with OpenSSL 1.0.1i which has also a few security
issues fixed, which you can read about here:
http://www.openssl.org/news/secadv_20140806.txt

You can get it from our download page:
http://tortoisesvn.net/downloads.html

Since it may take a while for the website changes to go live, here's the
link to the sourceforge files section:
https://sourceforge.net/projects/tortoisesvn/files/1.8.8/

Since there are security issues fixed, we've also released TortoiseSVN
1.7.15 which is available from the Sourceforge files section:
https://sourceforge.net/projects/tortoisesvn/files/1.7.15/

The changelog for TortoiseSVN 1.8.8:

Version 1.8.8
- BUG: Issue #640: Restore after commit - Unchecked
        files are not restored upon commit. (Stefan)
- BUG: Issue #641: svn:global-ignores does not work
        with multiple targets selected. (Stefan)
- BUG: Issue #642: Log message not saved in history
        on cancel. (Stefan)
- BUG: Issue #644: Bug in rename when "similar file name"
        renames are involved and file names
        include multiple dots. (Stefan)
- BUG: Issue #653: Unified diff from log no longer
        includes property changes. (Stefan)

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=755&dsMessageId=3086614
To unsubscribe from this discussion, e-mail: [announce-unsubscribe_at_tortoisesvn.tigris.org].
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3086643
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2014-08-12 17:34:13 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.