Author: cmpilato
Date: Thu Jun 2 13:54:49 2011
New Revision: 1130553
URL: http://svn.apache.org/viewvc?rev=1130553&view=rev
Log:
* CHANGES
Update to match the contents of the 1.6.17 tarball.
Modified:
subversion/branches/1.6.x/CHANGES
Modified: subversion/branches/1.6.x/CHANGES
URL:
http://svn.apache.org/viewvc/subversion/branches/1.6.x/CHANGES?rev=1130553&r1=1130552&r2=1130553&view=diff
==============================================================================
--- subversion/branches/1.6.x/CHANGES (original)
+++ subversion/branches/1.6.x/CHANGES Thu Jun 2 13:54:49 2011
@@ -1,5 +1,5 @@
Version 1.6.17
-(?? May 2011, from /branches/1.6.x)
+(01 Jun 2011, from /branches/1.6.x)
http://svn.apache.org/repos/asf/subversion/tags/1.6.17
User-visible changes:
@@ -13,7 +13,9 @@ http://svn.apache.org/repos/asf/subversi
* detect very occasional corruption and abort commit (issue #3845)
* fixed: file externals cause non-inheritable mergeinfo (issue #3843)
* fixed: file externals cause mixed-revision working copies (issue #3816)
- * disallow GETs of baselined versions of resources (r1098608)
+ * fix crash in mod_dav_svn with GETs of baselined resources (r1104126)
+ See CVE-2011-1752, and descriptive advisory at
+ http://subversion.apache.org/security/CVE-2011-1752-advisory.txt
* fixed: write-through proxy could direcly commit to slave (r917523)
* detect a particular corruption condition in FSFS (r1100213)
* improve error message when clients refer to unkown revisions (r939000)
@@ -24,6 +26,12 @@ http://svn.apache.org/repos/asf/subversi
* fix 'log -g' excessive duplicate output (issue #3650)
* fix svnsync copyfrom handling bug with BDB (r1036429)
* server-side validation of svn:mergeinfo syntax during commit (issue
#3895)
+ * fix remotely triggerable mod_dav_svn DoS
+ See CVE-2011-1783, and descriptive advisory at
+ http://subversion.apache.org/security/CVE-2011-1783-advisory.txt
+ * fix potential leak of authz-protected file contents
+ See CVE-2011-1921, and descriptive advisory at
+ http://subversion.apache.org/security/CVE-2011-1921-advisory.txt
Developer-visible changes:
* fix reporting FS-level post-commit processing errors (r1104098)
