-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 08 Aug 2017 23:04:58 -0400 Source: subversion Binary: subversion libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn Architecture: source amd64 all Version: 1.9.5-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Peter Samuelson <peter@p12n.org> Changed-By: James McCoy <jamessan@debian.org> Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn1 - Shared libraries used by Apache Subversion python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.9.5-1+deb9u1) stretch-security; urgency=high . * patches/CVE-2017-9800: Arbitrary code execution on clients through malicious svn+ssh URLs in svn:externals and svn:sync-from-url Checksums-Sha1: 22def587e0fabf9a4ceb7e55a304061b329c450d 3077 subversion_1.9.5-1+deb9u1.dsc ac9f8ee235f1b667dd6506864af8035aaedfc2d9 10615674 subversion_1.9.5.orig.tar.gz ff19147280346cfcc0da97629568776ca5883351 2535701 subversion_1.9.5-1+deb9u1.diff.gz bddf240031525df606362b1630ee979c5d865011 343176 libapache2-mod-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb 675f18c529ab18dfa144f65bbb19485fbe1bb163 224276 libapache2-mod-svn_1.9.5-1+deb9u1_amd64.deb 2e79ee1252809533751a60776201cb9fb3cf9fd0 1459658 libsvn-dev_1.9.5-1+deb9u1_amd64.deb 5733a3f0fde34f01852994605674fe077c9c743a 1520408 libsvn-doc_1.9.5-1+deb9u1_all.deb db95f76c3908427e9feb3a81cf35af4485b958ce 2672162 libsvn-java-dbgsym_1.9.5-1+deb9u1_amd64.deb 14b5de2812a277f462e2cddbb7c35633125a2f28 555334 libsvn-java_1.9.5-1+deb9u1_amd64.deb ffff0ea79efe7e9b4a439bfe1e8708d9287d4a4d 2988760 libsvn-perl-dbgsym_1.9.5-1+deb9u1_amd64.deb 502f543fd79336b14b776d7cbe2582c2c4d39511 977470 libsvn-perl_1.9.5-1+deb9u1_amd64.deb 12edbe8cf3b789fcffc8791340bcb07df4ba8db6 4707132 libsvn1-dbgsym_1.9.5-1+deb9u1_amd64.deb 9b1653774e2f9fd878e1b158ba5946d741549883 1318356 libsvn1_1.9.5-1+deb9u1_amd64.deb f24543fa2830375e1a137083727e5b4be8b4c8f9 1863562 python-subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb c33e42a52d981ffde9034991b3b4fd266eb27059 691272 python-subversion_1.9.5-1+deb9u1_amd64.deb 20a3065f346d7d8901bd4f1d8ffdbdebaab7effd 1777278 ruby-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb 4953fbda5083c985e7bdc11634d4995d5bcba232 596902 ruby-svn_1.9.5-1+deb9u1_amd64.deb d98c253bc1d293f5cd952455b125b59f5dc2fbe4 698948 subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb 22ad3e7398ab72434b4c2bcb866eccbc6dae31c9 35044 subversion-tools-dbgsym_1.9.5-1+deb9u1_amd64.deb 5f027b62259b8cb1048bade60d219c39c40cb7ca 319968 subversion-tools_1.9.5-1+deb9u1_amd64.deb b7a1ff4a0782878a18d95fd1e977b505bfd96f7a 21630 subversion_1.9.5-1+deb9u1_amd64.buildinfo 772d06faa905c3842b3fc16595fe624f68c6eed4 994602 subversion_1.9.5-1+deb9u1_amd64.deb Checksums-Sha256: 343fda8307ee3d0238303dc5c07fe394000058446bad56d800e5583a62c6b5fd 3077 subversion_1.9.5-1+deb9u1.dsc 280ba586c5d51d7b976b65d22d5e8e42f3908ed1c968d71120dcf534ce857a83 10615674 subversion_1.9.5.orig.tar.gz 2bb2797c058e1ca671dcf219c2fb7317ec106078ce496ea00a921c0eb37299a7 2535701 subversion_1.9.5-1+deb9u1.diff.gz c7d072f752b1ff66089da7241076e13ad0d77dc3bab52af0bf97832387a1c3d4 343176 libapache2-mod-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb d09daf491b88bbd53435508160028ae707819638a88b8d781882ec41b2919f6a 224276 libapache2-mod-svn_1.9.5-1+deb9u1_amd64.deb 2ffb162697c65e9ef6abc2513e625d93d5c8103ad4ad55064d310193c7871220 1459658 libsvn-dev_1.9.5-1+deb9u1_amd64.deb 460034b0ec7c7bce2942e2b097b27e1c994974a4af7e07c4780197a341158c6b 1520408 libsvn-doc_1.9.5-1+deb9u1_all.deb 870088617bf608862844511a2f68afa26c9806942ea94c33b044747c6cf798e4 2672162 libsvn-java-dbgsym_1.9.5-1+deb9u1_amd64.deb eda7ddac88221bd3e960bb4f545bfb356868839cdd6743e5625e27b245cd7a48 555334 libsvn-java_1.9.5-1+deb9u1_amd64.deb bd39fa57ee3841a4d031cf697b09bd3ec67ae8ce033f727ecb8f109b0ea7f4d2 2988760 libsvn-perl-dbgsym_1.9.5-1+deb9u1_amd64.deb cbc4e1df683f9327246dc6cb90dcb9f7c480c67c5bb7f06ed3f99fb472270399 977470 libsvn-perl_1.9.5-1+deb9u1_amd64.deb 18971f51db163114849701a16e0e107cb322a41b64002e8bc01b7d8c3a48477d 4707132 libsvn1-dbgsym_1.9.5-1+deb9u1_amd64.deb 0b5244e1d1749cdc9c7317bb3ee8f692e5dd99ccd420f611933f3799a1781c25 1318356 libsvn1_1.9.5-1+deb9u1_amd64.deb ea407bb42294e07680ca614a51db9d94ec484e2cf3a7032c435890c159252c64 1863562 python-subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb a4f1f544e21c0ab4f62c5f953f58a4212be3eb2baf7c0df4791e75c8373a6188 691272 python-subversion_1.9.5-1+deb9u1_amd64.deb 7019ccb7b8190457887fd2723301284f486613bc069f6c9562595cf6a8021296 1777278 ruby-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb b02f75d9a3d8a9ee1873cc8da5d3b5a472dbca75ac3f8a1be5812503d07c3113 596902 ruby-svn_1.9.5-1+deb9u1_amd64.deb eb02bf95940dd21af79e785fd71b8a5c1113416d03d49b920131b406b2d47642 698948 subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb a214214bf99b807fac02898d140f0838735656cb8b36d2b6c8939e10544f00d8 35044 subversion-tools-dbgsym_1.9.5-1+deb9u1_amd64.deb 8bfca38b05225058e0ccf13b318f782a0ff02f6cbf33109b816be7fc44d976a6 319968 subversion-tools_1.9.5-1+deb9u1_amd64.deb 27f6cf5140757ff019d9aff071578dd89f5bef6221ca6094450921b189020bd0 21630 subversion_1.9.5-1+deb9u1_amd64.buildinfo 96dc3a4bafe55cdde81149740679c67bbe201e4f18e7977774642500512cbd9c 994602 subversion_1.9.5-1+deb9u1_amd64.deb Files: 78c6a52b1d259e1733296b97806c6058 3077 vcs optional subversion_1.9.5-1+deb9u1.dsc 8fb42396b9d16d96755dc7e2375f1163 10615674 vcs optional subversion_1.9.5.orig.tar.gz ac98ce63b767a826e873b9d793b63e62 2535701 vcs optional subversion_1.9.5-1+deb9u1.diff.gz b382668234358b6a26e98aa0cadf286e 343176 debug extra libapache2-mod-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb e41a39ee45e1771e52771313078fbe6f 224276 httpd optional libapache2-mod-svn_1.9.5-1+deb9u1_amd64.deb 312459babf3e60f02526b30029cbc6a0 1459658 libdevel extra libsvn-dev_1.9.5-1+deb9u1_amd64.deb 01edc4913cea4067f88e7ca98db844b5 1520408 doc extra libsvn-doc_1.9.5-1+deb9u1_all.deb 73b99eb7fba870ecc56b472ec46215b2 2672162 debug extra libsvn-java-dbgsym_1.9.5-1+deb9u1_amd64.deb 248afe057dec4c63daac49d87ed60a54 555334 java optional libsvn-java_1.9.5-1+deb9u1_amd64.deb a5bd133f6434f3e1b5c502309f1aaf16 2988760 debug extra libsvn-perl-dbgsym_1.9.5-1+deb9u1_amd64.deb 45826346c84b2af0434cc299a99d5c89 977470 perl optional libsvn-perl_1.9.5-1+deb9u1_amd64.deb 35adab273fd50505bdcc72e5bb200277 4707132 debug extra libsvn1-dbgsym_1.9.5-1+deb9u1_amd64.deb 7a49c053dbe6c4f76b065f83b763771f 1318356 libs optional libsvn1_1.9.5-1+deb9u1_amd64.deb de65a1bbf6105a9985051cfc22f30bfa 1863562 debug extra python-subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb 1e3616da90c9f8b102eb9e7c7ce077f2 691272 python optional python-subversion_1.9.5-1+deb9u1_amd64.deb 72280e767caea2c89e563b5c8f5aac0b 1777278 debug extra ruby-svn-dbgsym_1.9.5-1+deb9u1_amd64.deb 0c90c8e07ffeb58f6b8c0008f4016b4f 596902 ruby optional ruby-svn_1.9.5-1+deb9u1_amd64.deb 8c3622a54c0753db29e52fb35daf7742 698948 debug extra subversion-dbgsym_1.9.5-1+deb9u1_amd64.deb ad06812acd8ffe56d4c5f77183824690 35044 debug extra subversion-tools-dbgsym_1.9.5-1+deb9u1_amd64.deb 863743012f4fb880706a679a9d5c2329 319968 vcs extra subversion-tools_1.9.5-1+deb9u1_amd64.deb 463ed146b6b86b8757ff08f60bd964ff 21630 vcs optional subversion_1.9.5-1+deb9u1_amd64.buildinfo fa74d18303fbeffa748cd03a25a5f5af 994602 vcs optional subversion_1.9.5-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEkb+/TWlWvV33ty0j3+aRrjMbo9sFAlmMj6BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDkx QkZCRjRENjk1NkJENURGN0I3MkQyM0RGRTY5MUFFMzMxQkEzREIACgkQ3+aRrjMb o9vu8hAAxlc7+2MyPM8GzaChd548CS5smyjBIoaLaZAqvBeU3hK2iJlrbbeIGACV X51heuE7EGtFE+dJJwFRwux7cefQ1UQoj1VephTK06nyLYX5LYJWCYhu1WI7Ny3g AD/c/iDzZfBcnzo+jEJIYwRLplQRV5r7GP47lOZVWXdhZD5DSR6k7mpm5HryY53a V/tS5oWMSKowmiXCNOuYJiW+MEu0Z7dF8W1ZfEPApRcUZPJRR+7jY2QrW+ipACao 19Lq54Ei8zF4LkHn/qX115qFIuvV73ADFwHcSVLK3YZsboU2viEsgwCmnTq7T0c9 f1UWarwh3WhddAyiChPm932y1MlIztTB5fLsEXe1DnG+xilQPtp3oTVgf60C5FzE wr66kS4jV3ot6H9+qPYmAcRDNRZIYgtLBRx5N5DWMYdBzpIGRfYcPKBDMH43/bgf g4/MPPEN9nWJkePyEbjeIivL6kQfc3sEHx/7GMB3jjEhZcu4NQiavPBemCsMpap3 XXnbxoBjsiU6X1rdFEe5Z99rdOKOpKqoX0yBn/LPBMOPqC/EBkA9p1P9uovnNq+L 0tppxVEEzgvUYK0gkLh9FwUPQZXuQlu/3ZI6F7dTo0zkzlgZIEvBjMaxvixWBirP 7lzmIWLcf9J+b+SjQ9hXGN2rRf0Zk9d1Ji+OGEj+BeXUh7UrEPU= =J4uE -----END PGP SIGNATURE-----