Re: Subversion 1.6.17 Released

On Wed, Jun 1, 2011 at 4:06 PM, Hyrum Wright <hwright_at_apache.org> wrote:
> I'm happy to announce Subversion 1.6.17, available from:
>
>    http://subversion.tigris.org/downloads/subversion-1.6.17.tar.bz2
>    http://subversion.tigris.org/downloads/subversion-1.6.17.tar.gz
>    http://subversion.tigris.org/downloads/subversion-1.6.17.zip
>    http://subversion.tigris.org/downloads/subversion-deps-1.6.17.tar.bz2
>    http://subversion.tigris.org/downloads/subversion-deps-1.6.17.tar.gz
>    http://subversion.tigris.org/downloads/subversion-deps-1.6.17.zip
>
> This release addesses three security issues:
>    CVE-2011-1752: Server NULL-pointer dereference
>    CVE-2011-1783: Server memory exhaustion
>    CVE-2011-1921: mod_dav_svn exposure of unreadable paths
>

And, apparently, the long-standing issue for clients with NTFS
filesystems sytems, issue #3719. I'm very much looking forward to
testing against a CIFS share, which was taking easily 10 times as long
as checkouts on NFS shares.

My current environment is Linux based: I'll very much look forward to
tests with TortoisSVN updates to see if the CIFS filesystem problems
remain.
Received on 2011-06-03 04:53:44 CEST