-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 05 Jun 2013 23:12:33 +0200 Source: subversion Binary: subversion libsvn1 libsvn-dev libsvn-doc libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl libsvn-ruby1.8 libsvn-ruby Architecture: source all amd64 Version: 1.6.17dfsg-4+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Salvatore Bonaccorso <carnil@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libapache2-svn - Subversion server modules for Apache libsvn-dev - Development files for Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Subversion libsvn-perl - Perl bindings for Subversion libsvn-ruby - Ruby bindings for Subversion (dummy package) libsvn-ruby1.8 - Ruby bindings for Subversion libsvn1 - Shared libraries used by Subversion python-subversion - Python bindings for Subversion subversion - Advanced version control system subversion-tools - Assorted tools related to Subversion Closes: 711033 Changes: subversion (1.6.17dfsg-4+deb7u3) wheezy-security; urgency=high . * Non-maintainer upload by the Security Team. * Add CVE-2013-1968.patch patch. CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline characters in filenames. (Closes: #711033) * Add CVE-2013-2112.patch patch. CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033) Checksums-Sha1: fe1963706152ec8629929c13c8e02c811f3ae1ad 2941 subversion_1.6.17dfsg-4+deb7u3.dsc e353f97fdeb6aefa37c6db45e8c22c4205cef4b7 7757112 subversion_1.6.17dfsg.orig.tar.gz 1a3007ee3e7105f71b5dab72ee7d244f7af04f0b 113574 subversion_1.6.17dfsg-4+deb7u3.diff.gz b136aa9036c966fbee84b368388d4e7f9b9391e8 2084032 libsvn-doc_1.6.17dfsg-4+deb7u3_all.deb ad25abf916be9e4078e304be462eccc07ffe7b59 225100 subversion-tools_1.6.17dfsg-4+deb7u3_all.deb ebf4688c55bb09dd163ad8b3bf34a4e6155039fd 764 libsvn-ruby_1.6.17dfsg-4+deb7u3_all.deb 71d680847bb6d2f1dc5bf44a83862ed3a7dcabf2 1320680 subversion_1.6.17dfsg-4+deb7u3_amd64.deb 15c4592eb39f906d43e6d4ba5b314a967cfe3bc9 935602 libsvn1_1.6.17dfsg-4+deb7u3_amd64.deb 425e1f943fc411d0d6ca82efeb81beb6c3ef5689 1423756 libsvn-dev_1.6.17dfsg-4+deb7u3_amd64.deb b8ce49f95ffc1bf4a0ed5dcd3376d5297cfc2a22 172954 libapache2-svn_1.6.17dfsg-4+deb7u3_amd64.deb 7a33334336e5d6ee55116f3eafa6e7ed8d2f975e 1339950 python-subversion_1.6.17dfsg-4+deb7u3_amd64.deb 92661e18c4f5bd8d55de3352f6691df696ef7b63 306454 libsvn-java_1.6.17dfsg-4+deb7u3_amd64.deb d6f400fe76d0950fd89ad755ab1888ba442a9fe5 1082472 libsvn-perl_1.6.17dfsg-4+deb7u3_amd64.deb 07251cf91232328dccf20dfc77843812e070ed4d 629674 libsvn-ruby1.8_1.6.17dfsg-4+deb7u3_amd64.deb Checksums-Sha256: b4c56452834133c774aa76b991c00f206e0cf507d8991933edc1575ac9326084 2941 subversion_1.6.17dfsg-4+deb7u3.dsc 45a8a067b65cfe5326f9676f991d82f39d67f8309c35e58f67e689eb702679d0 7757112 subversion_1.6.17dfsg.orig.tar.gz 6b366ef037c7d57222ab14b5196a125a4f6da59bbad8dde6d681464539643cf0 113574 subversion_1.6.17dfsg-4+deb7u3.diff.gz f0385a93b259269d554920b3c161f457a348d8ed0e4762f369a59bbe12958b4a 2084032 libsvn-doc_1.6.17dfsg-4+deb7u3_all.deb afc88b9a88744a64920ee13c7841394bad39ce752f5465efc0fd8a8863526516 225100 subversion-tools_1.6.17dfsg-4+deb7u3_all.deb 589504e228c1189b870ce8b7a24098b6ab2e80f9d4a3abe43a09114988d85cb6 764 libsvn-ruby_1.6.17dfsg-4+deb7u3_all.deb 54fa12c03ce7551040f9e266055076ec5b1c4c16bc2fe0fab3b54b407523b6b4 1320680 subversion_1.6.17dfsg-4+deb7u3_amd64.deb 8a3ce8292aeff58afd6476efb2328e5acd07f3dc20ee05b89d16c0330abf8196 935602 libsvn1_1.6.17dfsg-4+deb7u3_amd64.deb acdf7469f6bac5caaaf897c1d7fe203263a9406b94d2300376e67cace00a08fc 1423756 libsvn-dev_1.6.17dfsg-4+deb7u3_amd64.deb ef509fbcb87d13484a67891c2e31bb3b7fa780b47a02b85d479e8b92e396b283 172954 libapache2-svn_1.6.17dfsg-4+deb7u3_amd64.deb 24b06f22a330f1957dff530bfd5a8ee6825081b0b52e2ab007c455a1265a0281 1339950 python-subversion_1.6.17dfsg-4+deb7u3_amd64.deb bf397144db27968bc0eb382f50e66d369250699a518cc00eb7e1cd924a872eac 306454 libsvn-java_1.6.17dfsg-4+deb7u3_amd64.deb 4c5f140ab27d8bc4502489b90a3813fe27f934fba9b5a274c257dc726b5c5a73 1082472 libsvn-perl_1.6.17dfsg-4+deb7u3_amd64.deb 38af4405c2a899ed8944fb088c11374ddcb710fc902e0053f986795106091470 629674 libsvn-ruby1.8_1.6.17dfsg-4+deb7u3_amd64.deb Files: 8fe137770077449c231af4728a960da0 2941 vcs optional subversion_1.6.17dfsg-4+deb7u3.dsc 2bb85bcf6f1fb1ccec11dc2b4c89463b 7757112 vcs optional subversion_1.6.17dfsg.orig.tar.gz fb89280d3bd228235c160eca173f44b8 113574 vcs optional subversion_1.6.17dfsg-4+deb7u3.diff.gz 098cff68a9af1f1df20d7beb38a5d5da 2084032 doc extra libsvn-doc_1.6.17dfsg-4+deb7u3_all.deb 7f3b20b4eb96173e28de09374f955b78 225100 vcs extra subversion-tools_1.6.17dfsg-4+deb7u3_all.deb 2141a28a1a107c2bb5f5d8c3be5e71af 764 ruby optional libsvn-ruby_1.6.17dfsg-4+deb7u3_all.deb 7a664ee8c25ed82ddfdb832162f6cb47 1320680 vcs optional subversion_1.6.17dfsg-4+deb7u3_amd64.deb f456cb6cce4904cd31954836304b8330 935602 vcs optional libsvn1_1.6.17dfsg-4+deb7u3_amd64.deb 96f6624c5bbf8be9d8492a8f866e566d 1423756 libdevel extra libsvn-dev_1.6.17dfsg-4+deb7u3_amd64.deb c4b58ccded6b526716d9f36c549fc09e 172954 httpd optional libapache2-svn_1.6.17dfsg-4+deb7u3_amd64.deb 01add55473f7910e8e21c35ff96c9ed7 1339950 python optional python-subversion_1.6.17dfsg-4+deb7u3_amd64.deb 8108251f1a1234a5f8a78da977755496 306454 java optional libsvn-java_1.6.17dfsg-4+deb7u3_amd64.deb a517619f9d04bd65e0991240aa609414 1082472 perl optional libsvn-perl_1.6.17dfsg-4+deb7u3_amd64.deb 34e63f4905572264a26b4f623f7535c6 629674 ruby optional libsvn-ruby1.8_1.6.17dfsg-4+deb7u3_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCgAGBQJRsXdwAAoJEHidbwV/2GP+JYcP/3sG9XWBuUUSVrZLylTOVzvR v9DxXsZjc1u1WX3yJBk8y5XujaamMF+lygpqtOY6D9diUxkpxqzAmArqM2hnnD8U nfUBTIo5c7kVRVTPfi3Qb/kezq/dUu+J3c/3q8MkhdslOT7TEf/7tjVm/tuKMeIR g79Q88SUqqhjKHSoOJV52b0WHFnUEkr+4+jVEC/ebBaNjXu6pZKZi6plNNr+/6dz ZdFmxAEurqG4lFnzRXhQTRLhEJy520VfoQBSAgBQKT3BFwcx4sFRogaBxdFTG+fB IqLrlYnJL6KKG7xs8/uQpHfMkHBV8dHciR+c435O+G3NF6kVnYNwkXhqxjNvg4eZ V38zWaPddFcSDvZccSgSP90sbM6eJxMuLaMnSgTlAryIhkYMoHcuWGOQYkAj0sGF undT0xBVRZCMh61j+E4xk1mSn0vYkMrwSYSPjsmVjuI8LTbLdAozDlcnBwpqCrWp CNyuVEk+WURK96gwAoP2/k4FLYCdqh9v8Arysk22OuJC0UmHnt1U0mXg8hDY6ZoC tS5naecFHr6LF7lu6jhGIZ7HhsJT88cMYgRWRrcWvo2V0i8bxywfbvHZ0C1K5qSR 0JurMoPXinZgV4JDX6Q/S3Qjpw6/8iNbteZ5nRLiCsCIRxtv6lsLo9ja63E6d0ir mkXv67KXHGhjrJgwjYH5 =Sfsw -----END PGP SIGNATURE-----