-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Aug 2015 21:32:47 -0400 Source: subversion Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8 Architecture: all source Version: 1.9.0-1 Distribution: unstable Urgency: medium Maintainer: Peter Samuelson <peter@p12n.org> Changed-By: James McCoy <jamessan@debian.org> Closes: 739278 786903 791844 Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package) libsvn1 - Shared libraries used by Apache Subversion libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package) python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-dbg - Debug symbols for Apache Subversion subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.9.0-1) unstable; urgency=medium . * Upload to unstable * New upstream release. + Security fixes - CVE-2015-3184: Mixed anonymous/authenticated path-based authz with httpd 2.4 - CVE-2015-3187: svn_repos_trace_node_locations() reveals paths hidden by authz * Add >= 2.7 requirement for python-all-dev Build-Depends, needed to run tests. * Remove Build-Conflicts against ruby-test-unit. (Closes: #791844) * Remove patches/apache_module_dependency in favor of expressing the dependencies in authz_svn.load/dav_svn.load. * Build-Depend on apache2-dev (>= 2.4.16) to ensure ap_some_authn_required() is available when building mod_authz_svn and Depend on apache2-bin (>= 2.4.16) for runtime support. . subversion (1.9.0~rc3-1) experimental; urgency=medium . * New upstream pre-release. * Point the Vcs-* URLs at the right directory . subversion (1.9.0~rc2-2) experimental; urgency=medium . * Bump minimum JDK version to 1.6 in accordance with upstream change, “javahl: requires Java 1.6 (r1677003)” - This causes libsvn-java to no longer be available where gcj is the only available Java implementation . subversion (1.9.0~rc2-1) experimental; urgency=medium . * New upstream pre-release. Refresh patches. . subversion (1.9.0~rc1-2) experimental; urgency=medium . * Install bash completion to /usr/share/bash-completion/completions * Add dav_svn_get_repos_path2 symbol to apache_module_dependency patch. (Closes: #786903) . subversion (1.9.0~rc1-1) experimental; urgency=medium . * New upstream pre-release. Refresh patches. + Remove backported patches libtoolize, ruby2.0-build-fixes, test-failure-with-optimizations, CVE-2014-3580, CVE-2014-8108, CVE-2015-0202, CVE-2015-0248, CVE-2015-0251. + New svn-vendor tool, alternative to svn_load_dirs. + svn-bench renamed to svnbench and moved to subversion package. + fsfs-stats tool replaced by the "stats" subcommand of the new svnfsfs command. + Minimum supported version of serf bumped to 1.3.4. + pkgconfig files are available for the various libsvn_* libraries. + Fix “access forbidden” errors when performing a diff on a remote repository when the user does not have access to the parent directory. (Closes: #739278) * debian/rules: Add new generated files to clean target * debian/control: + Remove Troy Heber from Uploaders, at his request. Thanks for all the fish! + Add dh-python to Build-Depends Checksums-Sha1: 2897fb9d7d5ad3d3ff51c2c704410a22b90ec54f 144372 libapache2-svn_1.9.0-1_all.deb dcee271a4038be40914b9b61dc06d715b742448c 1511916 libsvn-doc_1.9.0-1_all.deb b1486d6530ac4526b4af08ab1c0edfa9b1184235 968 libsvn-ruby1.8_1.9.0-1_all.deb d8d61734afde15f53266fb5ac67c324ec382bc6a 3256 subversion_1.9.0-1.dsc 59958ee5e112a242c37d829331dde38affe2337a 10531048 subversion_1.9.0.orig.tar.gz 10fd8b806774c5819bb91cec2f90d0e7831d0e11 284298 subversion_1.9.0-1.diff.gz Checksums-Sha256: 733c85b11df65db3e4d6a5c556b8c7e98302cbf44aa0ff4454e59cfc35971fa8 144372 libapache2-svn_1.9.0-1_all.deb 08ce4444f31bfa3bbb6d15239be4c67b1af557fb20a0a71b5a4676b2cc4919d6 1511916 libsvn-doc_1.9.0-1_all.deb 825373ccbc7c968e90715b6321558219f52f7faad137399224efcdae4bff252c 968 libsvn-ruby1.8_1.9.0-1_all.deb 2aab77819c482850216df554fb7c3b9d0d004f6a1543dde14c028a9d0c8b4f68 3256 subversion_1.9.0-1.dsc 703ebece4e0fddbde6877dd3d2a9ac78314ae712a8a6ff8f48a5b104861d7fb2 10531048 subversion_1.9.0.orig.tar.gz 27877901906c865c0f73c5eec04e52d09bd6de134f63bb7889bfe5db6d2d5ed2 284298 subversion_1.9.0-1.diff.gz Files: 513613ade86b4e89320df3b18667e771 144372 oldlibs extra libapache2-svn_1.9.0-1_all.deb d1d0ed26e8704cbc57c88cc7a530940a 1511916 doc extra libsvn-doc_1.9.0-1_all.deb e2fbe7f011b938b2bf21d8661291d59c 968 oldlibs extra libsvn-ruby1.8_1.9.0-1_all.deb ee72830bb4a0000d99679663d70f95d4 3256 vcs optional subversion_1.9.0-1.dsc 055edda79b1d01d645fba197b782350e 10531048 vcs optional subversion_1.9.0.orig.tar.gz 6ca073c489b99842dd7108005b529c6e 284298 vcs optional subversion_1.9.0-1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJVxWsJXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5MUJGQkY0RDY5NTZCRDVERjdCNzJEMjNE RkU2OTFBRTMzMUJBM0RCAAoJEN/mka4zG6PbsEYP/0xMErzn/JjXurmQoi7FE6y8 TGq2njFF1+RmgBc9AdMcpG8Z0pJpW43EI9rTCwvaTF1DvTHLh+u7b48G7ZT4JPPk nIXuHFEAB7ZZw9cz7y2wiJttxOjV9trUx2OH/soNvLNCIcpiLOWFNLUEPWVCeXe4 bQAP6bsVl5VnxZf90PKtflqA2Vxx6kv3QDCDjKylEcHI4z6DnAv0e9yMokWXNLEq PCy2aW79jZyQTFhvD/dnS/aAMjIOFR5LV2f9GoPOJ9XpUmbeXMEJj+6Z3FpAjL74 Q/9S8AdIVA3/AruuLcVBqhgLPdk2Q4Xh8lN2FbJqIQK80P2VNeRxywek9c++MJuO 5rmPuF19MVEod9qTFeJCAgzjSjOHN5S0aTTF0yYgKr2jGaP16naECTqayGKx57lN CPqqz2DQ1hp2RLCiAm5so4iMzqFpDBJIPOKZXjBKK3ImbAwQhyGbqHRdi/9r0V+T oQcckTPqo7zAdvEtk3v+WHQFFQw0b7M4dNVeE9u8lFAc01hHkfbP5VA/MSM1M6E5 lrGC59IuulLhHBLqnVNpL89//CCFoj5nEevli+Ja0O7NCakUrqG9yA74pWfjHhez cqrig9WfIcuAvAiQB44SaeYIfmnvVf4WeI+TzcBLsFx1C0lPzb9XOr8bdV2mSgdb zjM4fWRAWuck/v0NJ/wp =PhNG -----END PGP SIGNATURE-----