-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 12 Apr 2022 08:38:19 -0400
Source: subversion
Architecture: source
Version: 1.14.2-1
Distribution: unstable
Urgency: high
Maintainer: James McCoy <jamessan@debian.org>
Changed-By: James McCoy <jamessan@debian.org>
Changes:
subversion (1.14.2-1) unstable; urgency=high
.
* Update to new upstream version 1.14.2.
+ Security Fixes:
- CVE-2021-28544: Don't show unreadable copyfrom paths in 'svn log -v'
- CVE-2022-24070: Fix issue #4880 "Use-after-free of object-pools when
used as httpd module"
* libsvn1: Add wildcard to symbols-declares-dependency-on-other-package override
* subversion-tools: Adjust wildcards for ruby-script-but-no-ruby-dep
* Declare compliance with Policy 4.6.0, no changes needed
* Update upstream signing keys
* Re-enable testCrash_RequestChannel_nativeRead_AfterException, fixed
upstream
Checksums-Sha1:
4ee89984537c6bcc3261849ea2e42ffb33800531 3807 subversion_1.14.2-1.dsc
c6c9a7060a955be1038f8633f130de966c87cd1e 11626792 subversion_1.14.2.orig.tar.gz
8c5b4b93add6966b9128eedfb9f19063f393ed7f 3215 subversion_1.14.2.orig.tar.gz.asc
d4ce5db74825c8968a66945a5928e8eb72795f4e 336060 subversion_1.14.2-1.debian.tar.xz
Checksums-Sha256:
1a588f83e1acffbe49324cc6e0dc4d42a38c75035230920c2d5f5575b60b4613 3807 subversion_1.14.2-1.dsc
fd826afad03db7a580722839927dc664f3e93398fe88b66905732c8530971353 11626792 subversion_1.14.2.orig.tar.gz
da6a0a5ff56f671ad2d1eae708f8d1cc1abf0485b029a163ff8272cba5475861 3215 subversion_1.14.2.orig.tar.gz.asc
08851e29ef29d2ea4c2f30de9fdfb800430aaf0e39a7c5906cefd122163da67b 336060 subversion_1.14.2-1.debian.tar.xz
Files:
fd5de4356f7867a4943d471b3b652460 3807 vcs optional subversion_1.14.2-1.dsc
3a06583540d597609fe2e1c81788e455 11626792 vcs optional subversion_1.14.2.orig.tar.gz
c792b2a2d0cb8f04a7a0b792d37e2396 3215 vcs optional subversion_1.14.2.orig.tar.gz.asc
8a505dde8fbff66797311611851dc02f 336060 vcs optional subversion_1.14.2-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=0rN5
-----END PGP SIGNATURE-----
