-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Dec 2015 20:26:57 -0500 Source: subversion Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8 Architecture: source Version: 1.9.3-1 Distribution: unstable Urgency: high Maintainer: Peter Samuelson <peter@p12n.org> Changed-By: James McCoy <jamessan@debian.org> Closes: 796781 797216 802156 802611 803725 Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package) libsvn1 - Shared libraries used by Apache Subversion libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package) python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-dbg - Debug symbols for Apache Subversion subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.9.3-1) unstable; urgency=high . * New upstream release. + Security fixes - CVE-2015-5259: Heap overflow and out-of-bounds read in svn:// protocol parser - CVE-2015-5343: Heap overflow and out-of-bounds read in mod_dav_svn + Fix dumps of no-op changes with “svnadmin dump”. (Closes: #803725) + Fix segfault when performing a diff when repository is on server root. (Closes: #802611) + Fix translations of commit notifications. (Closes: #802156) + Fix authz with mod_auth_ntlm/mod_auth_kerb. (Closes: #797216) + Restore reporting (un)lock errors as failures. (Closes: #796781) Checksums-Sha1: 5a0d5f3f9c29930bac5668f20555b0096f8f8c6b 3200 subversion_1.9.3-1.dsc b0cf8a64b1c244fcf2fa282d59ba34d7a57c3751 10600934 subversion_1.9.3.orig.tar.gz 0dd28123ebf9cce9f894443bf46eb3fc4d47d295 2420957 subversion_1.9.3-1.diff.gz Checksums-Sha256: 895cce2b81a1822ace4ee189bda8b09731a38ba7d0fc7940866ce4212cf42069 3200 subversion_1.9.3-1.dsc 74cd21d2f8a2a54e4dbd2389fe1605a19dbda8ba88ffc4bb0edc9a66e143cc93 10600934 subversion_1.9.3.orig.tar.gz 72c829b4713587cdadba1652bf62d651e62ad2878b7a740c8aa6ddc90636d4ec 2420957 subversion_1.9.3-1.diff.gz Files: 172b373be0b06240e1d243d8a06f9c80 3200 vcs optional subversion_1.9.3-1.dsc a92bcfaec4e5038f82c74a7b5bbd2f46 10600934 vcs optional subversion_1.9.3.orig.tar.gz 39034914bf5b9523077f4efe026fb647 2420957 vcs optional subversion_1.9.3-1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJWcMjgXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5MUJGQkY0RDY5NTZCRDVERjdCNzJEMjNE RkU2OTFBRTMzMUJBM0RCAAoJEN/mka4zG6Pbt+QQAKFVHYtvYTmJK/iDhN2GKxSI WFie3OJFS56nApBsumi7fIQ/Zx3ePQCYMphfADSnXDff1Pe1bkrl+FWGwsYuBe0e 4/axIO/LUrxMdYMb0RJgQ4kYJlROyqOG+VH8fwloNBwlIdegN6TXK/CSi4ylaS7B AAWNuEUlqKKYUTFyh7uR9Y7YTJUvamDUq8FJdGfSkGcNVswYSVR3WDBa+oP4upHP xZQEminu3BuMn3iWAQzFGN5UlEdBDzIwjPe4x0mvHBaH9Ota7LDN/fTGsGOUcn9+ fuoY4zefAL771AwsVDSOqiNmF8UuD7xHHQFPdKjDqvSXOjp099RAJ+fO4RAwGzEt SN5qEp/tFnww0W9Vmll7bmPs1kKkrRKxsejIdjivRJIiui/6SuaHWb0AIAWKBcVg vFnJ10C5tFkODdSJKG3/tjFv1iOq2uqR6gY6pWLsbki2SU5KpDPabJcDh/XaAnL1 3h/yIyJa4+pR0hvMf3ZYW1Lzg92qyFC3cobYYdo/FYSIe6MgT4k0AqUsNKyOWSwP XWs59RYCbKkCad+0pM6VK2+v4Z7jrFok0JVK7BBzt/k7r7ajJeO5Td3/jFR0wIlD uiGsGINFYtlu3IKyosreo8HB904fG2dIzZAFM2zgp9di05xWa8v9lxY+sIZQVWab c1cvbCyl9hHTwMF4/3fr =4M4u -----END PGP SIGNATURE-----