Is 3242 actually included in this? The release notes show:
* permissions fixes when doing reintegrate merges (related to issue #3242)
but doesn't actually list "Subversion demands unnecessary access to parent directories of operations" in the list. (#3242) The tracker shows 1.6.13 was the "target milestone".
BOb
> -----Original Message-----
> From: hyrum_at_hyrumwright.org [mailto:hyrum_at_hyrumwright.org] On
> Behalf Of Hyrum K. Wright
> Sent: Friday, October 01, 2010 1:08 PM
> To: Subversion Development; users; announce
> Subject: Subversion 1.6.13 Released
>
> [ Please note: I prior version of this mail referred to the
> incorrect
> CVE number. ]
>
> I'm happy to announce Subversion 1.6.13, available from:
>
> http://subversion.tigris.org/downloads/subversion-
> 1.6.13.tar.bz2
> http://subversion.tigris.org/downloads/subversion-1.6.13.tar.gz
> http://subversion.tigris.org/downloads/subversion-1.6.13.zip
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.tar.bz2
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.tar.gz
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.zip
>
> This is a bugfix release, part of the 1.6.x release series. Of
> note, this
> release includes a fix which addresses CVE-2010-3315, a security
> issue when
> using 'SVNPathAuthz short_circuit'. More information can be found
> here:
> http://subversion.apache.org/security/CVE-2010-3315-advisory.txt
>
> The MD5 checksums are:
>
> 7ae1c827689f21cf975804005be30aeb subversion-1.6.13.tar.bz2
> 8451f5d771edc0a0302bd9a52d54e150 subversion-1.6.13.tar.gz
> dd4009b239a5354b434e5f66cddde145 subversion-1.6.13.zip
> 2a7d662bac872c61a5e11c89263d7f07 subversion-deps-
> 1.6.13.tar.bz2
> 688bdb107731f9db2f3b6297b663a68d subversion-deps-1.6.13.tar.gz
> bb960d37f835e5e556e23e4eb85a9b08 subversion-deps-1.6.13.zip
>
> The SHA1 checksums are:
>
> 185efd129c3c4b04f1544d62bb9a3fcd0f58ba29 subversion-
> 1.6.13.tar.bz2
> 06d3afc49182c80ea712c13409c008d27a4e889b subversion-
> 1.6.13.tar.gz
> 6530528fae0335cd8495ebf1f2072e2dd9df2e31 subversion-1.6.13.zip
> e51bffda416a3a9abe068aab6f90d174dedef352 subversion-deps-
> 1.6.13.tar.bz2
> 1faa5ba0c87210f534ed445d061e4955396524d4 subversion-deps-
> 1.6.13.tar.gz
> 945ef9f68998aedf320af50d220e47a470684a06 subversion-deps-
> 1.6.13.zip
>
> PGP Signatures are available at:
>
> http://subversion.tigris.org/downloads/subversion-
> 1.6.13.tar.bz2.asc
> http://subversion.tigris.org/downloads/subversion-
> 1.6.13.tar.gz.asc
> http://subversion.tigris.org/downloads/subversion-
> 1.6.13.zip.asc
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.tar.bz2.asc
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.tar.gz.asc
> http://subversion.tigris.org/downloads/subversion-deps-
> 1.6.13.zip.asc
>
> For this release, the following people have provided PGP
> signatures:
>
> Senthil Kumaran S [1024D/6CCD4038] with fingerprint:
> 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038
> Philip Martin [2048R/ED1A599C] with fingerprint:
> A844 790F B574 3606 EE95 9207 76D7 88E1 ED1A 599C
> Paul T. Burba [1024D/53FCDC55] with fingerprint:
> E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55
> Julian Foad [1024D/353E25BC] with fingerprint:
> 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC
> Bert Huijben [1024D/9821F7B2] with fingerprint:
> 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2
> Hyrum K. Wright [1024D/4E24517C] with fingerprint:
> 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C
> Stefan Sperling [1024D/F59D25F0] with fingerprint:
> B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0
> Mark Phippard [1024D/035A96A9] with fingerprint:
> D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9
>
> Release notes for the 1.6.x release series may be found at:
>
> http://subversion.apache.org/docs/release-notes/1.6.html
>
> You can find the list of changes between 1.6.13 and earlier
> versions at:
>
> http://svn.apache.org/repos/asf/subversion/tags/1.6.13/CHANGES
>
> Questions, comments, and bug reports to
> users_at_subversion.apache.org.
>
> Thanks,
> - The Subversion Team
Received on 2010-10-01 19:55:39 CEST