This is the mail archive of the
mailing list for the Cygwin project.
- From: David Rothenberger <daveroth at acm dot org>
- To: cygwin-announce at cygwin dot com
- Date: Sat, 31 Aug 2013 05:29:05 -0700
- Subject: Updated: subversion-1.8.3-1
- Authentication-results: sourceware.org; auth=none
- Reply-to: The Cygwin Mailing List <cygwin at cygwin dot com>
See CHANGES (URL below) for more information about the differences
between 1.8.0 and previous Subversion releases.
IMPORTANT: Please read the release notes (URL below) before
upgrading from a previous major release. 1.8 includes a new working
copy format with a manual upgrade operation. This will render your
working copy unusable with previous major releases. Furthermore,
there are some issues trying to upgrade corrupt working copies.
Please see the release notes
for more details about the changes in Subversion.
for more details about the changes in 1.8.3.
This release changes mod_dav_svn to no longer map requests to the local
filesystem. Administrators of mod_dav_svn servers should read the
section about this in the release notes:
This release addresses three security issues:
CVE-2013-4246: fsfs: corruption from editing packed revision properties
CVE-2013-4262: admin-side tools: symlink attack against pid file
CVE-2013-4277: svnserve: symlink attack against pid file
More information on these vulnerabilities, including the relevant
advisories and potential attack vectors and workarounds, can be found
on the Subversion security website:
Subversion is a version control system designed to be a compelling
successor to CVS.
for the latest official release of the Subversion Book.
Note that downloads from sourceware.org (aka cygwin.com) aren't
allowed due to bandwidth limitations. This means that you will need
to find a mirror which has this update, please choose the one
nearest to you: http://cygwin.com/mirrors.html
If you want to make a point or ask a question the Cygwin mailing list is
the appropriate place.
CYGWIN-ANNOUNCE UNSUBSCRIBE INFO:
To unsubscribe to the cygwin-announce mailing list, look at the
"List-Unsubscribe: " tag in the email header of this message. Send
email to the address specified there. It will be in the format:
If you need more information on unsubscribing, start reading here:
Please read *all* of the information on unsubscribing that is available
starting at this URL.
David Rothenberger ---- firstname.lastname@example.org
The philosophical principle that even the simplest
solution is bound to have something wrong with it.