Author: dsahlberg
Date: Sun Dec 8 23:38:03 2024
New Revision: 1922382
URL: http://svn.apache.org/viewvc?rev=1922382&view=rev
Log:
In site/publish:
Announce 1.14.5, merge 1922381 from staging.
* doap.rdf,
docs/release-notes/release-history.html,
download.html,
index.html,
news.html: Update for the 1.14.5 release
* security/CVE-2024-46901-advisory.txt,
staging/security/CVE-2024-46901-advisory.txt.asc: New
* staging/security/index.html: Add CVE-2024-46901
Added:
subversion/site/publish/security/CVE-2024-46901-advisory.txt
- copied unchanged from r1922381,
subversion/site/staging/security/CVE-2024-46901-advisory.txt
subversion/site/publish/security/CVE-2024-46901-advisory.txt.asc
- copied unchanged from r1922381,
subversion/site/staging/security/CVE-2024-46901-advisory.txt.asc
Modified:
subversion/site/publish/ (props changed)
subversion/site/publish/doap.rdf
subversion/site/publish/docs/release-notes/release-history.html
subversion/site/publish/download.html
subversion/site/publish/index.html (contents, props changed)
subversion/site/publish/news.html (contents, props changed)
subversion/site/publish/security/index.html
Propchange: subversion/site/publish/
------------------------------------------------------------------------------
Merged /subversion/site/staging:r1922381
Modified: subversion/site/publish/doap.rdf
URL:
http://svn.apache.org/viewvc/subversion/site/publish/doap.rdf?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/doap.rdf (original)
+++ subversion/site/publish/doap.rdf Sun Dec 8 23:38:03 2024
@@ -37,8 +37,8 @@
<release>
<Version>
<name>Current 1.14 LTS release</name>
- <created>2024-10-08</created>
- <revision>1.14.4</revision>
+ <created>2024-12-08</created>
+ <revision>1.14.5</revision>
</Version>
</release>
<repository>
Modified: subversion/site/publish/docs/release-notes/release-history.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/docs/release-notes/release-history.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/docs/release-notes/release-history.html (original)
+++ subversion/site/publish/docs/release-notes/release-history.html Sun Dec 8
23:38:03 2024
@@ -32,6 +32,9 @@ Subversion 2.0.</p>
<ul>
<li>
+ <b>Subversion 1.14.5</b> (Sunday, 8 December 2024): Bugfix/security
release.
+ </li>
+ <li>
<b>Subversion 1.14.4</b> (Tuesday, 8 October 2024): Bugfix/security
release.
</li>
<li>
Modified: subversion/site/publish/download.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/download.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/download.html (original)
+++ subversion/site/publish/download.html Sun Dec 8 23:38:03 2024
@@ -95,7 +95,7 @@ Other mirrors:
title="Link to this section">¶</a>
</h3>
-<p style="font-size: 150%; text-align: center;">Apache Subversion 1.14.4
LTS</p>
+<p style="font-size: 150%; text-align: center;">Apache Subversion 1.14.5
LTS</p>
<table class="centered">
<tr>
<th>File</th>
@@ -104,20 +104,20 @@ Other mirrors:
<th>PGP Public Keys</th>
</tr>
<tr>
- <td><a
href="[preferred]subversion/subversion-1.14.4.tar.bz2">subversion-1.14.4.tar.bz2</a></td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.bz2.sha512";>SHA-512</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.bz2.asc";>PGP
signatures</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS";>PGP
keyring</a>]</td>
+ <td><a
href="[preferred]subversion/subversion-1.14.5.tar.bz2">subversion-1.14.5.tar.bz2</a></td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.bz2.sha512";>SHA-512</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.bz2.asc";>PGP
signatures</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS";>PGP
keyring</a>]</td>
</tr><tr>
- <td><a
href="[preferred]subversion/subversion-1.14.4.tar.gz">subversion-1.14.4.tar.gz</a></td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.gz.sha512";>SHA-512</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.gz.asc";>PGP
signatures</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS";>PGP
keyring</a>]</td>
+ <td><a
href="[preferred]subversion/subversion-1.14.5.tar.gz">subversion-1.14.5.tar.gz</a></td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.gz.sha512";>SHA-512</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.gz.asc";>PGP
signatures</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS";>PGP
keyring</a>]</td>
</tr><tr>
- <td><a
href="[preferred]subversion/subversion-1.14.4.zip">subversion-1.14.4.zip</a></td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.zip.sha512";>SHA-512</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.zip.asc";>PGP
signatures</a>]</td>
- <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS";>PGP
keyring</a>]</td>
+ <td><a
href="[preferred]subversion/subversion-1.14.5.zip">subversion-1.14.5.zip</a></td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.zip.sha512";>SHA-512</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.zip.asc";>PGP
signatures</a>]</td>
+ <td>[<a
href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS";>PGP
keyring</a>]</td>
</tr>
</table>
Modified: subversion/site/publish/index.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/index.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/index.html (original)
+++ subversion/site/publish/index.html Sun Dec 8 23:38:03 2024
@@ -70,6 +70,31 @@
<!-- In general, we'll keep only the most recent 3 or 4 news items here. -->
+<div class="h3" id="news-20241208">
+<h3>2024-12-08 — Apache Subversion 1.14.5 Released
+ <a class="sectionlink" href="#news-20241208"
+ title="Link to this section">¶</a>
+</h3>
+
+<p>We are pleased to announce the release of Apache Subversion 1.14.5.</p>
+<p>
+This release contains a fix for a security issue:
+ <a href="/security/CVE-2024-46901-advisory.txt">CVE-2024-46901</a>
+</p>
+<p>
+ This is the most complete Subversion release to date, and we encourage
+ users of Subversion to upgrade as soon as reasonable.
+ Please see the
+<!-- until release announcement e-mail <a
href="https://lists.apache.org/thread/glvmq598wv71thrd9vmbm0q5w6n3124w";
+ >release announcement</a> and the -->
+ <a href="/docs/release-notes/1.14"
+ >release notes</a> for more information about this release.</p>
+
+<p>To get this release from the nearest mirror, please visit our
+ <a href="/download.cgi#recommended-release">download page</a>.</p>
+
+</div> <!-- #news-20241208 -->
+
<div class="h3" id="news-20241008">
<h3>2024-10-08 — Apache Subversion 1.14.4 Released
<a class="sectionlink" href="#news-20241008"
@@ -115,24 +140,6 @@ This release contains a fix for a securi
</div> <!-- #news-20231228-1.14.3 -->
-<div class="h3" id="news-20230924">
-<h3>2023-09-24 — Apache Subversion 1.10.x end of life
- <a class="sectionlink" href="#news-20230924"
- title="Link to this section">¶</a>
-</h3>
-
-<p>The Subversion 1.10.x line is end of life (<abbr title="End Of
Life">EOL</abbr>).
-It was released on 2018-04-13 and was supported for the last four years
-according to the LTS release life-cycle (see <a
-href="/roadmap.html#release-planning">How we plan
-releases</a>). We recommend everyone to update to the current LTS release <a
-href="/download.cgi#recommended-release">1.14.2</a> as soon as practically
-possible since we've stopped accepting bug reports against 1.10.x and will not
-make any more 1.10.x releases. The last 1.10.x release (1.10.8) was made
-on 2022-04-12 and is available to anyone who can't update to 1.14.</p>
-
-</div> <!-- news-20230924 -->
-
<p style="font-style: italic; text-align:
right;">[Click <a href="/news.html">here</a> to see all News
items.]</p>
Propchange: subversion/site/publish/index.html
------------------------------------------------------------------------------
Merged /subversion/site/staging/index.html:r1922381
Modified: subversion/site/publish/news.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/news.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/news.html (original)
+++ subversion/site/publish/news.html Sun Dec 8 23:38:03 2024
@@ -26,6 +26,31 @@
<!-- Maybe we could insert H2's to split up the news items by -->
<!-- calendar year if we felt the need to do so. -->
+<div class="h3" id="news-20241208">
+<h3>2024-12-08 — Apache Subversion 1.14.5 Released
+ <a class="sectionlink" href="#news-20241208"
+ title="Link to this section">¶</a>
+</h3>
+
+<p>We are pleased to announce the release of Apache Subversion 1.14.5.</p>
+<p>
+This release contains a fix for a security issue:
+ <a href="/security/CVE-2024-46901-advisory.txt">CVE-2024-46901</a>
+</p>
+<p>
+ This is the most complete Subversion release to date, and we encourage
+ users of Subversion to upgrade as soon as reasonable.
+ Please see the
+<!-- until e-mail <a
href="https://lists.apache.org/thread/glvmq598wv71thrd9vmbm0q5w6n3124w";
+ >release announcement</a> and the -->
+ <a href="/docs/release-notes/1.14"
+ >release notes</a> for more information about this release.</p>
+
+<p>To get this release from the nearest mirror, please visit our
+ <a href="/download.cgi#recommended-release">download page</a>.</p>
+
+</div> <!-- #news-20241208 -->
+
<div class="h3" id="news-20241008">
<h3>2024-10-08 — Apache Subversion 1.14.4 Released
<a class="sectionlink" href="#news-20241008"
Propchange: subversion/site/publish/news.html
------------------------------------------------------------------------------
Merged /subversion/site/staging/news.html:r1922381
Modified: subversion/site/publish/security/index.html
URL:
http://svn.apache.org/viewvc/subversion/site/publish/security/index.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/security/index.html (original)
+++ subversion/site/publish/security/index.html Sun Dec 8 23:38:03 2024
@@ -339,6 +339,13 @@ clients using http(s)://</td>
<td>Subversion command line argument injection on Windows platforms</td>
</tr>
+<tr>
+ <td><a href="CVE-2024-46901-advisory.txt">CVE-2024-46901-advisory.txt</a>
+ [<a href="CVE-2024-46901-advisory.txt.asc">PGP</a>]</td>
+ <td>1.0.0-1.14.4</td>
+ <td>mod_dav_svn denial-of-service via control characters in paths</td>
+</tr>
+
</tbody>
</table>
