lp:debian/squeeze/subversion

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

13. By Salvatore Bonaccorso on 2013-06-06

* Non-maintainer upload by the Security Team.
* Add CVE-2013-1968.patch patch.
  CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline
  characters in filenames. (Closes: #711033)
* Add CVE-2013-2112.patch patch.
  CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033)

12. By Peter Samuelson <email address hidden> on 2011-05-31

[ Michael Diers ]
* patches/cve-2011-1752: New patch for CVE-2011-1752, fixing a remotely
  triggered crash in mod_dav_svn, delivering baselined WebDAV resources.
* patches/cve-2011-1783: New patch for CVE-2011-1783 and CVE-2011-1921,
  fixing remotely triggered memory exhaustion and a content leak of
  files that are meant to be unreadable.

11. By Peter Samuelson <email address hidden> on 2011-01-05

* patches/loosen-sqlite-version-check: New patch: Relax the SQLite
  version check, to match the Debian sqlite3 packaging.
  (Closes: #608925)
* patches/cve-2010-4539: New patch for CVE-2010-4539, fixing a remotely
  triggered crash in mod_dav_svn involving use of the SVNParentPath
  feature. (Closes: #608989)

10. By Peter Samuelson <email address hidden> on 2010-12-22

* Apply two patches from upstream 1.6.15:
  - patches/server-memleak: New patch: fix some server-side memory leaks.
  - patches/no-wc1.7-check: New patch: Stop checking for being inside a
    1.7 working copy. The value is too low and the performance penalty
    too high.

9. By Peter Samuelson <email address hidden> on 2010-10-01

* patches/cve-2010-3315: New patch for CVE-2010-3315, whereby, in rare
  configurations, mod_dav_svn could give too much access to authorized
  users.
* control: Update Vcs-* fields, Homepage, Policy to 3.9.1 (no changes),
  tweak python version declaration (Closes: #587853).

8. By Peter Samuelson <email address hidden> on 2010-06-21

* Urgency medium, as it (probably) fixes some FTBFS.
* New upstream version.
  - Fixes some or all cases of inappropriate need for read access to the
    root of the repository. (Closes: #510883)
* Disable parallel mode for 'make check', which appears to have made
  some build daemons sad.
* svn-bisect: use pegs to support bisecting in deleted branches.
  Thanks Nikita Borodikhin. (Closes: #582344)
* patches/ruby-test-info: expand for more failures nobody can figure
  out. Sigh.
* Upgrade from source format 1.0 to 1.0.

7. By Peter Samuelson <email address hidden> on 2010-04-19

* New upstream version. Rediff a patch or two.
  - Mergeinfo queries no longer require access to repository root.
    (Ref: #510883)
  - Ignores errors reading .svn/ in parent directories. (Closes: #570271)
* rules: Run 'check' target in parallel mode.

6. By Peter Samuelson <email address hidden> on 2010-01-27

* New upstream release.
  - patches/16x-po, patches/ruby-test-core: remove, applied upstream.
* patches/java-build: Update for gcj 4.4. Update the build dependency
  too, as this version of the patch will not work on gcj 4.3.
  Thanks to Nobuhiro Iwamatsu. (Closes: #561516)
* patches/build-fixes: Fix parallelism in 'doc-api' target. Again.
  (Closes: #537297)
* patches/ruby-test-info: Disable the two failing ruby tests that
  nobody can reproduce except on the buildds. (Closes: #545372)

5. By Peter Samuelson <email address hidden> on 2009-07-14

* New upstream release.
* Update package sections corresponding to recent ftpmaster work.
* Re-enable libsvn_ra_serf, now that serf 0.3.0-0.2 is available.
* Add symbols file for libsvn1, for finer-grained dependencies.

4. By Peter Samuelson <email address hidden> on 2009-02-25

* New upstream release.
* patches/commit-email2: New patch to fix mail header formatting in
  commit-email.pl hook. (Closes: #508301)
* Tweak 'site-packages' location for python 2.6, taken from the Ubuntu
  patch uploaded by Matthias Klose.
* Build-Depends is back again to libdb4.6-dev.