[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Want to check for any Security update for Subversion 1.4.5

From: Stefan Sperling <stsp_at_elego.de>
Date: Fri, 27 Nov 2009 09:04:04 +0100

On Fri, Nov 27, 2009 at 02:23:36AM +0530, Satheesh Kumar2 wrote:
> Hi,
>
> I am Satheesh from IBM, i am supporting Subversion 1.4.5 for one of our
> customer. we have yearly checks for any security update for the products
> that we install and support for our customers.
> Could you please let me know if any security update relased for the
> Subversion 1.4.5.

1.5.7 and 1.6.4 were security fix releases (CVE-2009-2411).
The vendor you are getting 1.4.5 from may have 1.4.x patches for this
problem, but 1.4.x is no longer supported by the Subversion project.
The project only supports two stable releases at a time, and in
practice, the older of the two gets little attention and receives
critical securify fixes only.

You should update to the latest 1.6.x release if possible.

Stefan

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2424783

Please start new threads on the <users_at_subversion.apache.org> mailing list.
To subscribe to the new list, send an empty e-mail to <users-subscribe_at_subversion.apache.org>.
Received on 2009-11-27 09:05:19 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.