This release fixes two vulnerabilities: * mod_authz_svn: do not leak information in mixed anonymous/authenticated httpd (dav) configurations (CVE-2015-3184) * do not leak paths that were hidden by path-based authz (CVE-2015-3187) Non-security fixes: * document svn:autoprops * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A * improve conflict prompts for binary files * improve performance of 'ls -v' * improved Sqlite 3.8.9 query performance * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev * mod_dav_svn: do not ignore skel parsing errors * detect invalid svndiff data earlier * prevent possible repository corruption on power/disk failures * fixed issue #4577: Read error with some repository nodes * fixed issue #4531: server-side copy (over dav) is slow * swig-pl: fix some stack memory problems OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=209
92 lines
4.2 KiB
Plaintext
92 lines
4.2 KiB
Plaintext
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
|
|
Comment: GPGTools - http://gpgtools.org
|
|
|
|
iQIcBAABCgAGBQJVtdM0AAoJEBvKZYajR5Q/xmUP/09bbaXFJT/NAzfswGfOUsFy
|
|
OWLDXSNZvgHXERxHqTJMdpToGEGsrRM1z202rUn5b0UxdkV/T40jNBAV0KKHsJ31
|
|
DQLNf8h/8uhw1xrsDKOJhyxGguOQxKJcQPJASi100Q18NeH7l7HyExMYNI0Damv7
|
|
IKN8vI0Y03xZQgXwNLTXTzyorfSeYfg7+AZlVBpIawkZ/zu6yuBv5Bldf0936prv
|
|
rUgmIQtHrpa6lCP5fK0vU/QorjyCTjyevxUzCoe8yZTYlAfFKZZdg2H8p8erROK9
|
|
O+/3eyDhpi8PSfiYkl9PiSEAww4oYpUayZo1BHl4Mq32hANU9U9pEMtTC1tQaUVJ
|
|
BaV/0ejvfugmLjQYfMF6C2ZTqYPoetRttsGwjD89tsduBAooAIwwjDK5T4buaQYP
|
|
4MBiR/YenBqlA+195rUide465TK0psSCvOOlN3/Ph3zGm0lSW2Rn5vfD4qUzOLBr
|
|
1BGkuOUr+S3qUXDC3cIpt0mt6LTMQUcSeMiekYTKoInphzZ0vWf+2z/NZwGe14Qv
|
|
lheNfW2jO2vnY8sWNBXibz0k1wROVaaEGSHoqE3xuUoRFujZKIZ87Nc58lVt3BXx
|
|
D8Ct0XbDYlbb6oqzs0+i4JYxbui/tY5mfRRy/GIs7KuD3PDehkD2pcqpmZrVb0Ew
|
|
luP6J7hon2iF630KZDq0
|
|
=16rK
|
|
-----END PGP SIGNATURE-----
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v1
|
|
|
|
iQEcBAABAgAGBQJVtklqAAoJEE99uqmaWblzyJQIAJncHmMPiPtULbA/Ad3adaBR
|
|
cSBYqbbdgFUV2gGyS7b0DFWUfQ7pMk5lkxDAMV47H6//DqIqIGSYoxB8OfyVn6M8
|
|
xiHeWBnRqvZH2DlMBYAvXGcHhRciN8rYqShCldZkvzPvkNU6sY/Fqp9s01HFEN4G
|
|
0yHY2PfeBoeAG0ZSV1ONABeGtT7YgF9MT7Rwp4LJ0O9sykbc0I4qDuL+2hMUL0/s
|
|
cZOknbnrKiJUEEZ1CDJ8YWuZ+EoBNkbGZTFneSsedyQnDP8moOFt8fYr4AIQR3oe
|
|
TmcdrHhes+q8CrbpUIt27TisJ7Sd4s1B3kZ0pUs+vlu3qU9xh7P1RoFYgDaZ54w=
|
|
=izkq
|
|
-----END PGP SIGNATURE-----
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v1
|
|
|
|
iQIcBAABAgAGBQJVtli/AAoJEJnsdBtXkhrMv2sQAICByH1og3TI4mMd6gty6e4d
|
|
2US06Hzjh71UxcpaEkCIIZhQVGqYSIz6MAsRDUeiSAomj9kHF8e+FZq5FPaU/aJo
|
|
rel6sOTpIubbIBim8MxUx/6H94AMVZ5sIld0flTkvKvnVtkpgFF8Qh1sCU6Protw
|
|
qx+KRbtpe11bDqsA10SLuYpe7ZUnJZj8YUaAxX6aZKODGGlbKIUhddVVrl0dPK2i
|
|
/QfwlAxYdM5ROI791NUSRqOMIjvH1/eJZFwb8B3+S8Ot00g4VA25yqfY1fLDrTRk
|
|
TJm7irnayIlsH7sW63agYTknYUa3Y5/ZBbBjdU9WYZqM0iRxwFJrWSpFqN1F9lmI
|
|
Vw6wt/yJp6lWzI/L3rJ2e7ZlI0bNO656GY34JRbmlnyumBE5pURc/RxFBGuk4DTD
|
|
+huDK34zdtkeH8cZNwdbkqkr9S3BLea1VVIiHLvYmMBluJ2wO63oPDZK7HffAt0k
|
|
tQyEhuWe60JIE6lLrmkQ0KGxEVJkyfmB3whX78IeIFtIgiGb351vVbJW/hEXKbhC
|
|
r4KOQRQIxwCl8Yill51sffcTIfwRu708gnGoc+ieZwglifM13K7ZHryaL9JKHWge
|
|
RCN7sV7vIarn4PE2AL1xKFMQ0IQtHKXAkhmGgRBwav6S0eFAS/a/KkK0UKS7ciAq
|
|
SGkEa18kAaqGB5lFdFFX
|
|
=IVs2
|
|
-----END PGP SIGNATURE-----
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v1
|
|
|
|
iQIcBAABCAAGBQJVtmgtAAoJEB+wZLhO7MSTN84P/1a1fljrY3uLy8Uz7O85pghP
|
|
YIl14/ijISIvrNHEduyCCFVC5HztneBuwZltXQKPCYl1C2y2E4xYISnObZa0ypgs
|
|
1Qyj1aowaI+KiPR15kmVH7mtNBOts3TL/dR3R8Nnhih9Ouwh0l6XWm9S27+S3XSH
|
|
4C+Ekmj4oldhZRZXPMTeABnA7lgTfkxnmvFi7nD0er0yrC1KlS7BI18Jfl1VRHNK
|
|
IK748ZeDVWAxePK/UNEz1yqngDzjHiOngNR6OQG1eOomS2ZoDcY7WnFMJhBYlJCp
|
|
lVR2FAc4qZz4+TiYXB5pEp7BdaG6AdXccH/j5C4Z3/cHYkL4lVL3OxnJ6pkCbaU5
|
|
kbfySo913NPm3d2DPobvWEbC9JnOo0qK/8EBYth2OLgL9BF+NWQ/q//OMmsj4xBS
|
|
IIl1enJjP3gYdv96TkqolrYOUR/2jCQ793Hn2UJFGjNpAhcpy9yND6UCRW5cUqX0
|
|
gnKBrZGXOMZ0e/oeGYahYWlTbNQGx2jkRdumJd9xssjVnAqu3gkICXwQNE77DmY8
|
|
IeSAeH4lsf0aVQ2YhScPI5ESa0/VAoeyu0eyJWPrT6x7yrJ3naTXr+E0PZyuU+PP
|
|
ig5mWn9r0gmBflgZFVenQbC7SfhWCYTinRTCAHINln2kYMoOxW76sewm5O7A+G8q
|
|
JgGk7jB/Qp1sKuA3qdnp
|
|
=Chlj
|
|
-----END PGP SIGNATURE-----
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v1
|
|
|
|
iQEcBAABCAAGBQJVu0fRAAoJEHbXiOHtGlmcrP8H/1HiJs4i3H21iVdLJE7Jg/gq
|
|
GTIe/QrqqGM1v+NmF6SSgSTiyLD0Q5fjoaq2dpFDbt76SM/BFgkYVjDyFB8te5zR
|
|
ZlHQpttYU3uy9wBgupdazd1M/OQjie2p6bZMfLgCskhSKmBJDU+s9+xQ0DE2BmtH
|
|
tBKV/ME9ZNIwZMlQTG8ehsBNyLTFhEEQ/x8Qher8QHnYRhSH6gTL8UrkoSRF7M26
|
|
NznCOi7AOP4cEfbisklRaovkze3+ZhRGpIq9mhFVL9vCmuYD3WSJsPJ+3bwJq23+
|
|
cmgb6bMv0+Vx6RK28S5ddACKFIsGs/wnZVNkL2iIFLiC6ZBwkJPHRDeujPTXcCA=
|
|
=T24s
|
|
-----END PGP SIGNATURE-----
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v1
|
|
|
|
iQIcBAABAgAGBQJVv8/yAAoJEMSmxiXMyOHfqWcP/2Rwd5tAXk1Z/fqbfjJOHR8v
|
|
bIntA2PM0ES/2v0ndb9LbQeQRn6QINWfkcW5yt62H4dMfe5zOK66lLxZ0jbG3Ztx
|
|
+DEzaGmQ+tkEl5pQFstGjFKVGCEwTAjcrHrf+AhrfRhHOwg+aGh6m4AsOSuADETz
|
|
Kt6sDx61GBTTy+lgeuI6DMViu7d3NYZV3zAH+kf/j9YEcrCwL7xotXtH3LFtlhow
|
|
NW1AneASscTxKx5np8IqDD4rvOqoqQJ0Zz0oDcF6/CrZfRuMDK5sN6LSENYGSdLM
|
|
NHhcZxn7wfGQMxti75a/5h2dHxNE1PN11vWgFiBuaau7pr421ixLMbx3knssoYvL
|
|
hmNDVjNV20IvtVTXEDawCLjDwT2y+AiBsrp/kw3WTUgZUNVA+BFjGfb0t7P08ZuE
|
|
Yv9BAaa/cBO2q1SdF/SAt/lTHAuHFiCyfBiEoRTkjuQYbBD3hAfGH57LhLfpjk6k
|
|
mGdM/R6HBCVxHFhsEMFIXmqxyzGk4PG0bkoEy7vmyIquPJQO5yFyMLfzm/hqjCGC
|
|
6pbbyqOcJvYkk346QAy7on5r92IL+oZ+CqFIobry8eBOUdXRTwlHFSN7fTUVpU03
|
|
EwQtYph795HdFLblBREjQLE9ac4p7uvR32euWjE4zpiU28mwMGmjN+CODsUG+JV8
|
|
DHBtnhXpZG7EsGpn1+xI
|
|
=rFWj
|
|
-----END PGP SIGNATURE-----
|