-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Aug 2015 20:31:26 -0400 Source: subversion Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8 Architecture: source amd64 all Version: 1.8.13-1+deb9u1 Distribution: stretch Urgency: medium Maintainer: Peter Samuelson <peter@p12n.org> Changed-By: James McCoy <jamessan@debian.org> Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package) libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package) libsvn1 - Shared libraries used by Apache Subversion python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-dbg - Debug symbols for Apache Subversion subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.8.13-1+deb9u1) stretch; urgency=medium . * Add (Build-)Depends on apache2 packages necessary for security fixes. * patches/CVE-2015-3814: Mixed anonymous/authenticated path-based authz with httpd 2.4 * patches/CVE-2015-3817: svn_repos_trace_node_locations() reveals path hidden by authz Checksums-Sha1: bc6f7f8cd9147346cd65aa62cc59206b12123f00 3145 subversion_1.8.13-1+deb9u1.dsc 32e574329a1782f9dc988a3b0d82a026048c4e44 288336 subversion_1.8.13-1+deb9u1.diff.gz f5f1ddb7acb1da6dfe21ee7867b5cf18d06e2254 203072 libapache2-mod-svn_1.8.13-1+deb9u1_amd64.deb b490c09ef02bedc76f369d0158b0a20fc5158d2a 127738 libapache2-svn_1.8.13-1+deb9u1_all.deb 072db1f1b14eb9e791a1df5850e1157f7e73fa22 1216130 libsvn-dev_1.8.13-1+deb9u1_amd64.deb ee34651f688487349c0f10977b2356f0163ad4ba 1398872 libsvn-doc_1.8.13-1+deb9u1_all.deb 3708852751d2e1f5c59ac8ba8b5cf1fe1df93a18 350944 libsvn-java_1.8.13-1+deb9u1_amd64.deb 05550ed13f6f3523eb439643fd79aeb77d8da6fd 942232 libsvn-perl_1.8.13-1+deb9u1_amd64.deb 200b085ac734853679b154f907f1c2244001c022 974 libsvn-ruby1.8_1.8.13-1+deb9u1_all.deb 945c1d46762bf38203d83001ecf55b615b7de556 1075950 libsvn1_1.8.13-1+deb9u1_amd64.deb 71180d0ff8480628a54a88c368afb9324fa0c39d 654422 python-subversion_1.8.13-1+deb9u1_amd64.deb 158a3ebdde28cef60f06dcf5e3b85770014c475f 563684 ruby-svn_1.8.13-1+deb9u1_amd64.deb fd71207dd89db8a0b46aa9f0b2ddaecefe18f59f 8412282 subversion-dbg_1.8.13-1+deb9u1_amd64.deb 8f3b9eb92c01291cd96b7381a98985e25c25f474 324308 subversion-tools_1.8.13-1+deb9u1_amd64.deb 5d2f3afea3b67799d7794b25d5d24d317ef64044 919598 subversion_1.8.13-1+deb9u1_amd64.deb Checksums-Sha256: 49172dbd2ca68b05e437805ffa45011d05286347647f7ee6b3b90c91f846d10b 3145 subversion_1.8.13-1+deb9u1.dsc d42184f5352f85fb304a8e469f3ebff64ddebb5a35bfc428f4cce32491b9b1a2 288336 subversion_1.8.13-1+deb9u1.diff.gz 14af303f7eb1ff2e307e8184ba2e54804c52f001ceb879a23e529547ec6a6077 203072 libapache2-mod-svn_1.8.13-1+deb9u1_amd64.deb 118bbb56204a666743fd70084ef0b82ed72fa98ecf2c90b142c188f5ba96ec00 127738 libapache2-svn_1.8.13-1+deb9u1_all.deb cefcc88902148c3eee0419fdf9e6f8a5f8c94c62be3bf5415a9b70d3a8cef109 1216130 libsvn-dev_1.8.13-1+deb9u1_amd64.deb fb73a89126ae0ac13d7049206036dd486bd7d9106f58de166c4d085f06b22b95 1398872 libsvn-doc_1.8.13-1+deb9u1_all.deb a5a55ffb720a869e8e90ef32d21acfdc3c29cbefb1d7fd1f2128a7bf61c34f63 350944 libsvn-java_1.8.13-1+deb9u1_amd64.deb b737880a8227a6d8735c4f239a2f26728148300666f186be97ab3e8527191416 942232 libsvn-perl_1.8.13-1+deb9u1_amd64.deb 9a003f8c422542e6eece7d236c4a9ce8b3d106fbcaa7b91115606c2c0550d51a 974 libsvn-ruby1.8_1.8.13-1+deb9u1_all.deb aa524a5b5b45c65a0c713d0e3a93a49e3ed9daa833b53349cf6d60200af297cd 1075950 libsvn1_1.8.13-1+deb9u1_amd64.deb 1394254213967104f451f64cd4c3b716685b3ddb05a7eb3fe695be4cf41876c0 654422 python-subversion_1.8.13-1+deb9u1_amd64.deb 7946e57b91f9781a16db0679479dff595c6a7de319dc3b5079c6567ba734cb68 563684 ruby-svn_1.8.13-1+deb9u1_amd64.deb ebc4f5a7f37f82dccf4da12af78824e6775a730a6602032e7ad52f178443dba7 8412282 subversion-dbg_1.8.13-1+deb9u1_amd64.deb b79c67fc0e921ea6aaba0ac75e69da847630eebf659632b6eef0de4694064aa1 324308 subversion-tools_1.8.13-1+deb9u1_amd64.deb 29ef0fd6e4bf1f8916410a7923f9ece8a661bf7eccb73e6185dd7e9d1ee96e4d 919598 subversion_1.8.13-1+deb9u1_amd64.deb Files: 6c3da3c6e55cad00e61c18a094d04a27 3145 vcs optional subversion_1.8.13-1+deb9u1.dsc b571f315c591ef68ddb32672c8a935c4 288336 vcs optional subversion_1.8.13-1+deb9u1.diff.gz b167a28634615735e1fbddf19b81701a 203072 httpd optional libapache2-mod-svn_1.8.13-1+deb9u1_amd64.deb 7fdf85b4c4acf74367a74275ed6ce63b 127738 oldlibs extra libapache2-svn_1.8.13-1+deb9u1_all.deb b504931d5d81e64d274cbaaec685927c 1216130 libdevel extra libsvn-dev_1.8.13-1+deb9u1_amd64.deb 3e81877082dad637beb3f74a5e69c811 1398872 doc extra libsvn-doc_1.8.13-1+deb9u1_all.deb 19919e4131fb8e0695f43b83cf3e8522 350944 java optional libsvn-java_1.8.13-1+deb9u1_amd64.deb 8df873577467b662ad7827cac2bacb40 942232 perl optional libsvn-perl_1.8.13-1+deb9u1_amd64.deb 092995882ea2ae2a2bcb1d8045471230 974 oldlibs extra libsvn-ruby1.8_1.8.13-1+deb9u1_all.deb 169133b848d009b9e535729dc4d7f55f 1075950 libs optional libsvn1_1.8.13-1+deb9u1_amd64.deb bf18fade204895cef5cd891183b1ddf1 654422 python optional python-subversion_1.8.13-1+deb9u1_amd64.deb 2b2292bdcf125c6badc24a98b79da47c 563684 ruby optional ruby-svn_1.8.13-1+deb9u1_amd64.deb 8d84f98a9a3f6387ec3ce2a1fbed3832 8412282 debug extra subversion-dbg_1.8.13-1+deb9u1_amd64.deb 6fdf1c004adbdf3b039b364548287ba8 324308 vcs extra subversion-tools_1.8.13-1+deb9u1_amd64.deb 24e1b5f5972e921d43dcbdb4d1ef46b1 919598 vcs optional subversion_1.8.13-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJVy/mkXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5MUJGQkY0RDY5NTZCRDVERjdCNzJEMjNE RkU2OTFBRTMzMUJBM0RCAAoJEN/mka4zG6Pb0dcP/iv/6GKM86ZPDjoNZPb+GQcj RFqzztr88BhB/qpOaW6PwryGP0+J3qsg97Jzehpx0cOx7BKl6JfLwMoDNM+T3IPR fjQnh3pGeCEPzuzlt8aHjLf0X4mpfxYw1Bw9JKtWr8FaAUwLFYc0Ef2UelgJUfmm PNzbBTtKkTZDBNiC+UwJNntNROYVMCxnqJDFJwRDeoN6urqHR93mz8m/Awexxnfc xGIy/bKanW0FLTIgj5Fxtppkl0si+DZfBJppanAFyg45M63cdwaTaEwEtlN++tV/ nNM8OFNiSuRLAg9lmBmzw0yKqnk0oq4CuMrxPVAwd4TurQztUZlZQGt7sW/eKQaM pTAi98eP5eBu5GGOBMNcepC7bKYGhtNPhCdQiaZekU4Ro88Ix0M59jqY53k5XsAV LAaI4JDvRamGuJQjp0RzcYUaHK6WCYv8fweFhD9kVtAzKnR760M971M+/RJUYtWT 7JyJavuq8OZv5QYzrtGNL91OoxIPquDonPKhoqKqjtb6mjqyKogwuTSvn/Lz5/O0 AGMhZUZBAFG8N+MQcgfEhd6Lh7CRMQs2/0DAlcllqL2MalpP4ZvWnTb5PU4O/WcT cr9MKSnza+tbgHixmw8hzaAYxoWcFDptxdUDzzxJADJ2dLE2jnZNnF9YyLtesjdE tnpiec9nlDnx9A5ExgVK =q2ik -----END PGP SIGNATURE-----