-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.0 Source: subversion Binary: subversion, subversion-dbg, libsvn1, libsvn-dev, libsvn-doc, libapache2-mod-svn, libapache2-svn, python-subversion, subversion-tools, libsvn-java, libsvn-perl, ruby-svn, libsvn-ruby1.8 Architecture: any all Version: 1.8.10-6+deb8u1 Maintainer: Peter Samuelson <[email protected]> Uploaders: Troy Heber <[email protected]>, James McCoy <[email protected]> Homepage: http://subversion.apache.org/ Standards-Version: 3.9.5 Vcs-Browser: http://anonscm.debian.org/viewvc/pkg-subversion/src/1.8.x/ Vcs-Svn: svn://anonscm.debian.org/pkg-subversion/src/1.8.x/ Testsuite: autopkgtest Build-Depends: debhelper (>= 8), libserf-dev (>= 1.2), zlib1g-dev, libapr1-dev, libaprutil1-dev, libdb5.3-dev, libsasl2-dev, apache2-dev (>= 2.4.10-10+deb8u1), dh-apache2, libsqlite3-dev (>= 3.7.12), libgnome-keyring-dev, libdbus-1-dev, kdelibs5-dev, quilt, doxygen, autotools-dev, autoconf, libtool, swig, python-all-dev, perl, libperl-dev, ruby, ruby-dev, default-jdk, junit Build-Conflicts: libsvn-dev (<< 1.8~), ruby-test-unit Package-List: libapache2-mod-svn deb httpd optional arch=any libapache2-svn deb oldlibs extra arch=all libsvn-dev deb libdevel extra arch=any libsvn-doc deb doc extra arch=all libsvn-java deb java optional arch=any libsvn-perl deb perl optional arch=any libsvn-ruby1.8 deb oldlibs extra arch=all libsvn1 deb libs optional arch=any python-subversion deb python optional arch=any ruby-svn deb ruby optional arch=any subversion deb vcs optional arch=any subversion-dbg deb debug extra arch=any subversion-tools deb vcs extra arch=any Checksums-Sha1: 8e1e1e5fd97c3f575a81d66232c62dc902257a17 9331079 subversion_1.8.10.orig.tar.gz 88f538c260fb194f23dbdcb237e34f4a0e7686d5 295824 subversion_1.8.10-6+deb8u1.diff.gz Checksums-Sha256: d0efa2533225c0bfba2ac27bcc004255997cbbde58f4f970dfb9dc3cc825005f 9331079 subversion_1.8.10.orig.tar.gz d069a9d66b6015eb6e9b68ec0a4436facd84da1204dac783913a01ded83ef3d3 295824 subversion_1.8.10-6+deb8u1.diff.gz Files: 88cd7d8cc0fcdd00957ecca5c2550d5c 9331079 subversion_1.8.10.orig.tar.gz 0d2c195668d0c44ff793605e633533aa 295824 subversion_1.8.10-6+deb8u1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVcdhtcaHXzVBzv3gAQjBnw//UIg6K0pNA4TTbn0Qaay6RtYQ4z96CSUa i1zwYSAn2E9aS4wdtW4POkVaC3zAyKC+pKjisfJJ7d9yx3HoC2rLGv/U4J0rm5tc WOFK7iudy1ljqWnl4hYrMqQPzdrKgIjg1aGxsowD1i3KY4iLCq+slfncx0n2+z9u 94hoUiZgsFYTceeAPL78pwNiGtFGn22GRgX3zmfDLxdq4bfInZn2IZkjs/5/ZCwR Pcdzv6ShOnPZMMeCCBKtZK8uXQnhTPwYGSx/xTYHBF5KjCmmEthK+U6ZMu5mwkqI VpWMLadv/u7WYaT/8vD+Yi3Yt4ety2MWcVteeiLo0oeIqsDT4KzRD/QQD8QPk0Ou I5NVFkT+SWkHpc7HCwsF+0GpaGCfnzJU3UJ1Oz2JWyM5aqXWHDp6wccDQd1TQA86 IlzA9yv9AokSDMMNphrtsVO2EfZGaeI+Xwf+BCi5ug2TRV+EAUbHHG2IKSsDyySA vjMsZcAy0Eu8LEQyTj0f/maW+rVmhw4SEqjdSeQ/tW8yINWcHKRVDTLuAKA2qT8k O98aiwhuHzj2nIoZq6ZCG0DYqwwqhZn0xPk8tztZ0di1J75SX8G9DNNlm6uepqPM bMijSx8fIaViLWlZYv8gVsNX7CKPY31GfuASaE/06IAha5rkV0Tftd0aphfWKkzs tFtiQpusUKg= =dTxe -----END PGP SIGNATURE----- Changes: subversion (1.8.10-6+deb8u1) jessie-security; urgency=high * Add (Build-)Depends on apache2 packages necessary for security fixes. * patches/CVE-2015-3814: Mixed anonymous/authenticated path-based authz with httpd 2.4 * patches/CVE-2015-3817: svn_repos_trace_node_locations() reveals paths hidden by authz -- James McCoy <[email protected]> Sat, 08 Aug 2015 22:32:18 -0400
