Change log : subversion package : Ubuntu

1.14.2-4build2

Published in mantic-release on 2023-04-25

Published in lunar-release on 2023-03-13

Deleted in lunar-proposed (Reason: Moved to lunar)

subversion (1.14.2-4build2) lunar; urgency=medium

  * Rebuild to drop Python 3.10 extension

 -- Jeremy Bicha <email address hidden>  Tue, 28 Feb 2023 19:44:54 -0500

Available diffs

diff from 1.14.2-4build1 to 1.14.2-4build2 (333 bytes)

1.14.2-4build1

Superseded in lunar-release on 2023-03-13

Deleted in lunar-proposed on 2023-03-14 (Reason: Moved to lunar)

subversion (1.14.2-4build1) lunar; urgency=medium

  * No-change upload to remove support for ruby3.0.

 -- Lucas Kanashiro <email address hidden>  Fri, 03 Feb 2023 10:41:58 -0300

Available diffs

diff from 1.14.2-4 (in Debian) to 1.14.2-4build1 (355 bytes)

1.14.2-4

Superseded in lunar-release on 2023-02-04

Deleted in lunar-proposed on 2023-02-05 (Reason: Moved to lunar)

subversion (1.14.2-4) unstable; urgency=medium

  * Backport patch to fix building with swig 4.1 (Closes: #1023529)

 -- James McCoy <email address hidden>  Sat, 12 Nov 2022 15:30:30 -0500

Available diffs

diff from 1.14.2-3 to 1.14.2-4 (1.5 KiB)
diff from 1.14.2-3build2 (in Ubuntu) to 1.14.2-4 (1.6 KiB)

1.14.2-3build2

Superseded in lunar-proposed on 2022-11-13

subversion (1.14.2-3build2) lunar; urgency=medium

  * Rebuild against new perlapi-5.36.

 -- Gianfranco Costamagna <email address hidden>  Fri, 04 Nov 2022 17:13:37 +0100

Available diffs

diff from 1.14.2-3build1 to 1.14.2-3build2 (337 bytes)

1.14.2-3build1

Superseded in lunar-proposed on 2022-11-04

subversion (1.14.2-3build1) lunar; urgency=medium

  * No-change rebuild with Python 3.11 as supported

 -- Graham Inggs <email address hidden>  Wed, 02 Nov 2022 11:20:31 +0000

Available diffs

diff from 1.14.2-3 (in Debian) to 1.14.2-3build1 (355 bytes)

1.14.2-3

Superseded in lunar-release on 2022-12-13

Published in kinetic-release on 2022-07-18

Deleted in kinetic-proposed (Reason: Moved to kinetic)

subversion (1.14.2-3) unstable; urgency=medium

  * Re-enable the ability to store plaintext passwords (Closes: #995692)
  * Bump debhelper-compat to 13
  * Adjust lacks-unversioned-link-to-shared-library overrides
  * Adjust package-contains-upstream-installation-documentation override
  * Document uninstalled files in debian/not-installed

 -- James McCoy <email address hidden>  Tue, 12 Jul 2022 10:03:54 -0400

Available diffs

diff from 1.14.2-2 to 1.14.2-3 (1.3 KiB)

1.14.2-2

Superseded in kinetic-release on 2022-07-18

Deleted in kinetic-proposed on 2022-07-20 (Reason: Moved to kinetic)

subversion (1.14.2-2) unstable; urgency=medium

  * Skip building java bindings on kfreebsd-*. Thanks to Laurent Bigonville
    for the suggestion (Closes: #1012379)
  * Skip building ruby bindings on ia64 and kfreebsd-*
  * Disable kwallet support on kfreebsd-*
  * Use autogen-swig-{pl,py,rb} targets instead of autogen-swig
    (Closes: #986174)
  * Declare compliance with Policy 4.6.1, no changes needed
  * Fix handling of verbose/terse build logs

 -- James McCoy <email address hidden>  Mon, 06 Jun 2022 20:42:25 -0400

Available diffs

diff from 1.14.2-1 to 1.14.2-2 (2.8 KiB)

1.14.1-3ubuntu0.22.04.1

Published in jammy-updates on 2022-05-27

Published in jammy-security on 2022-05-27

subversion (1.14.1-3ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: CVE-2021-28544, CVE-2022-24070 (LP: #1970228)
    - debian/patches/CVE-2021-28544.patch, debian/patches/CVE-2022-24070.patch:
      New patches from upstream security advisories.

 -- Luís Infante da Câmara <email address hidden>  Sat, 21 May 2022 11:52:35 +0100

Available diffs

diff from 1.14.1-3ubuntu0.1 to 1.14.1-3ubuntu0.22.04.1 (316 bytes)

1.13.0-3ubuntu0.2

Published in focal-updates on 2022-05-26

Published in focal-security on 2022-05-26

subversion (1.13.0-3ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Remote unauthenticated denial-of-service in Subversion
    mod_authz_svn (LP: #1970228)
    - debian/patches/CVE-2020-17525.patch: Check for NULL repos_root_dirent in
      subversion/libsvn_repos/config_file.c.
    - CVE-2020-17525

 -- Luís Infante da Câmara <email address hidden>  Thu, 12 May 2022 21:47:08 +0100

Available diffs

diff from 1.13.0-3ubuntu0.1 (in ~ubuntu-security/ubuntu/ppa) to 1.13.0-3ubuntu0.2 (1010 bytes)
diff from 1.13.0-3 (in Debian) to 1.13.0-3ubuntu0.2 (3.9 KiB)

1.9.7-4ubuntu1.1

Published in bionic-updates on 2022-05-26

Published in bionic-security on 2022-05-26

subversion (1.9.7-4ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: CVE-2018-11782, CVE-2019-0203, CVE-2020-17525 (LP: #1970228)
    - debian/patches/CVE-2018-11782.patch: New patch from upstream security
      advisory, that also fixes CVE-2019-0203.
    - debian/patches/handle_missing_file.patch: New patch from Subversion 1.10
      needed to apply CVE-2020-17525.patch.
    - debian/patches/CVE-2020-17525.patch: New patch from upstream security
      advisory.
    - debian/patches/java10-compatibility: New patch from Debian buster to fix
      build failure with OpenJDK 11.

 -- Luís Infante da Câmara <email address hidden>  Sat, 21 May 2022 08:24:25 +0100

Available diffs

diff from 1.9.7-4ubuntu1 (in Ubuntu) to 1.9.7-4ubuntu1.1 (6.3 KiB)

1.14.2-1

Superseded in kinetic-release on 2022-06-07

Deleted in kinetic-proposed on 2022-06-08 (Reason: Moved to kinetic)

subversion (1.14.2-1) unstable; urgency=high

  * Update to new upstream version 1.14.2.
    + Security Fixes:
      - CVE-2021-28544: Don't show unreadable copyfrom paths in 'svn log -v'
      - CVE-2022-24070: Fix issue #4880 "Use-after-free of object-pools when
        used as httpd module"
  * libsvn1: Add wildcard to symbols-declares-dependency-on-other-package override
  * subversion-tools: Adjust wildcards for ruby-script-but-no-ruby-dep
  * Declare compliance with Policy 4.6.0, no changes needed
  * Update upstream signing keys
  * Re-enable testCrash_RequestChannel_nativeRead_AfterException, fixed
    upstream

 -- James McCoy <email address hidden>  Tue, 12 Apr 2022 08:38:19 -0400

Available diffs

diff from 1.14.1-3build4 (in Ubuntu) to 1.14.2-1 (390.7 KiB)

1.14.1-3ubuntu0.1

Obsolete in impish-updates on 2022-07-23

Obsolete in impish-security on 2022-07-23

subversion (1.14.1-3ubuntu0.1) impish-security; urgency=medium

  * SECURITY UPDATE: Use-after-free of object-pools when used as httpd module
    - debian/patches/CVE-2022-24070.patch: Register cleanup handler to reset
      authz initialization state in subversion/libsvn_repos/authz.c
    - CVE-2022-24070
  * SECURITY UPDATE: Disclosure of copyfrom paths that should be hidden
    according to configured path-based authz rules when copying.
    - debian/patches/CVE-2021-28544.patch: Do not expose copyfrom information
      if path is configured private with authz.
    - CVE-2021-28544

 -- Spyros Seimenis <email address hidden>  Tue, 05 Apr 2022 17:57:55 +0300

Available diffs

diff from 1.14.1-3 (in Debian) to 1.14.1-3ubuntu0.1 (3.5 KiB)

1.13.0-3ubuntu0.1

Superseded in focal-updates on 2022-05-26

Superseded in focal-security on 2022-05-26

subversion (1.13.0-3ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Use-after-free of object-pools when used as httpd module
    - debian/patches/CVE-2022-24070.patch: Register cleanup handler to reset
      authz initialization state in subversion/libsvn_repos/authz.c
    - CVE-2022-24070
  * SECURITY UPDATE: Disclosure of copyfrom paths that should be hidden
    according to configured path-based authz rules when copying.
    - debian/patches/CVE-2021-28544.patch: Do not expose copyfrom information
      if path is configured private with authz.
    - CVE-2021-28544

 -- Spyros Seimenis <email address hidden>  Fri, 08 Apr 2022 12:43:33 +0300

Available diffs

diff from 1.13.0-3 (in Debian) to 1.13.0-3ubuntu0.1 (3.4 KiB)

1.14.1-3build4

Superseded in kinetic-release on 2022-05-23

Published in jammy-release on 2022-03-20

Deleted in jammy-proposed (Reason: Moved to jammy)

subversion (1.14.1-3build4) jammy; urgency=medium

  * No-change rebuild with Python 3.10 only

 -- Graham Inggs <email address hidden>  Thu, 17 Mar 2022 20:14:01 +0000

Available diffs

diff from 1.14.1-3build3 to 1.14.1-3build4 (316 bytes)

1.14.1-3build3

Superseded in jammy-release on 2022-03-20

Deleted in jammy-proposed on 2022-03-21 (Reason: Moved to jammy)

subversion (1.14.1-3build3) jammy; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Sun, 06 Feb 2022 13:48:40 +0100

Available diffs

diff from 1.14.1-3build2 to 1.14.1-3build3 (343 bytes)

1.14.1-3build2

Superseded in jammy-release on 2022-03-02

Deleted in jammy-proposed on 2022-03-03 (Reason: Moved to jammy)

subversion (1.14.1-3build2) jammy; urgency=medium

  * No-change upload due to ruby3.0 transition, remove ruby2.7 support.

 -- Lucas Kanashiro <email address hidden>  Fri, 03 Dec 2021 17:03:34 -0300

Available diffs

diff from 1.14.1-3 (in Debian) to 1.14.1-3build2 (433 bytes)
diff from 1.14.1-3build1 to 1.14.1-3build2 (340 bytes)

1.14.1-3build1

Superseded in jammy-proposed on 2021-12-03

subversion (1.14.1-3build1) jammy; urgency=medium

  * No-change rebuild to add python3.10.

 -- Matthias Klose <email address hidden>  Sat, 16 Oct 2021 06:59:52 +0000

Available diffs

diff from 1.14.1-3 (in Debian) to 1.14.1-3build1 (350 bytes)

1.14.1-3

Superseded in jammy-release on 2021-12-11

Obsolete in impish-release on 2022-07-23

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed (Reason: moved to Release)

subversion (1.14.1-3) unstable; urgency=medium

  * Correctly disable testCrash_RequestChannel_nativeRead_AfterException
    (Closes: #982684)

 -- James McCoy <email address hidden>  Wed, 17 Feb 2021 21:52:03 -0500

Available diffs

diff from 1.14.0-3build2 (in Ubuntu) to 1.14.1-3 (77.6 KiB)
diff from 1.14.1-1 to 1.14.1-3 (1.0 KiB)

1.14.1-1

Superseded in hirsute-proposed on 2021-02-19

subversion (1.14.1-1) unstable; urgency=high

  * Update to new upstream version 1.14.1.
    + Fix FTBFS with OpenJDK 17 (Closes: #982084)
    + Security fix:
      - CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion
        mod_authz_svn  (Closes: #982464)

 -- James McCoy <email address hidden>  Wed, 10 Feb 2021 21:17:14 -0500

Available diffs

diff from 1.14.0-3build2 (in Ubuntu) to 1.14.1-1 (77.1 KiB)

1.14.0-3build2

Superseded in hirsute-release on 2021-02-20

Deleted in hirsute-proposed on 2021-02-21 (Reason: moved to Release)

subversion (1.14.0-3build2) hirsute; urgency=medium

  * No-change rebuild to drop python3.8 extensions.

 -- Matthias Klose <email address hidden>  Mon, 07 Dec 2020 18:44:19 +0100

Available diffs

diff from 1.14.0-3build1 to 1.14.0-3build2 (324 bytes)

1.14.0-3build1

Superseded in hirsute-release on 2020-12-09

Deleted in hirsute-proposed on 2020-12-10 (Reason: moved to Release)

subversion (1.14.0-3build1) hirsute; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Mon, 09 Nov 2020 12:47:06 +0100

Available diffs

diff from 1.14.0-2 (in Debian) to 1.14.0-3build1 (992 bytes)
diff from 1.14.0-3 (in Debian) to 1.14.0-3build1 (326 bytes)

1.14.0-3

Superseded in hirsute-proposed on 2020-11-09

subversion (1.14.0-3) unstable; urgency=medium

  * Rename python suffixes to the versioned python suffix.
    Thanks to Matthias Klose for the patch (Closes: #972197)
  * Rename python-script-but-no-python-dep override to python3 version

 -- James McCoy <email address hidden>  Sat, 31 Oct 2020 20:44:20 -0400

Available diffs

diff from 1.14.0-2ubuntu1 (in Ubuntu) to 1.14.0-3 (659 bytes)

1.14.0-2ubuntu1

Superseded in hirsute-proposed on 2020-11-02

subversion (1.14.0-2ubuntu1) hirsute; urgency=medium

  * Rename python extensions to the versioned python suffix.

 -- Matthias Klose <email address hidden>  Sat, 31 Oct 2020 08:33:14 +0100

Available diffs

diff from 1.14.0-2build1 to 1.14.0-2ubuntu1 (697 bytes)

1.14.0-2build1

Superseded in hirsute-proposed on 2020-10-31

subversion (1.14.0-2build1) hirsute; urgency=medium

  * No-change rebuild to build with python3.9 as supported.

 -- Matthias Klose <email address hidden>  Sat, 24 Oct 2020 10:55:56 +0200

Available diffs

diff from 1.14.0-2 (in Debian) to 1.14.0-2build1 (361 bytes)

1.14.0-2

Superseded in hirsute-release on 2020-12-04

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

subversion (1.14.0-2) unstable; urgency=medium

  * Backport patch from upstream to fix FTBFS (Closes: #966989)
    - Fix crash in JavaHL JNI wrapper caused by object lifetimes
  * svn_load_dirs.1: Use correct groff macro for single-quote
  * Update lintian overrides to account for renamed tags

 -- James McCoy <email address hidden>  Mon, 17 Aug 2020 13:01:19 -0400

Available diffs

diff from 1.14.0-1 to 1.14.0-2 (2.2 KiB)

1.14.0-1

Superseded in groovy-release on 2020-08-30

Deleted in groovy-proposed on 2020-08-31 (Reason: moved to Release)

subversion (1.14.0-1) unstable; urgency=medium

  * Update to new upstream version 1.14.0.
  * Install NOTICE as required by Apache license
  * rules: Disable dh_auto_test for Arch: all builds

 -- James McCoy <email address hidden>  Wed, 03 Jun 2020 22:21:57 -0400

Available diffs

diff from 1.13.0-4 to 1.14.0-1 (704.3 KiB)

1.13.0-4

Superseded in groovy-release on 2020-06-21

Deleted in groovy-proposed on 2020-06-22 (Reason: moved to Release)

subversion (1.13.0-4) unstable; urgency=medium

  * Disable building python-subversion if SWIG 4.0 is installed
    (Closes: #954866)
  * Remove python-subversion from subversion-tool's Recommends

 -- James McCoy <email address hidden>  Sat, 25 Apr 2020 08:58:28 -0400

Available diffs

diff from 1.13.0-3 to 1.13.0-4 (2.2 KiB)

1.13.0-3

Superseded in groovy-release on 2020-05-08

Published in focal-release on 2020-03-29

Deleted in focal-proposed (Reason: moved to Release)

subversion (1.13.0-3) unstable; urgency=medium

  [ James McCoy ]
  * rules: Use "pyversions -s" instead of "pyversions -i"
  * Build with swig3.0 to fix FTBFS with swig4.0 (Closes: #951893)
  * Declare compliance with Policy 4.5.0, no changes needed
  * Build-Depend on debhelper-compat (= 12)

  [ Dimitri John Ledkov ]
  * swig.m4: Do not include ruby include subdir

 -- James McCoy <email address hidden>  Tue, 24 Mar 2020 08:33:36 -0400

Available diffs

diff from 1.13.0-2ubuntu2 (in Ubuntu) to 1.13.0-3 (1.8 KiB)

1.13.0-2ubuntu2

Superseded in focal-release on 2020-03-29

Deleted in focal-proposed on 2020-03-30 (Reason: moved to Release)

subversion (1.13.0-2ubuntu2) focal; urgency=medium

  * Do not include ruby include subdir which has headers that clash with
    standard ones, such as assert.h.

 -- Dimitri John Ledkov <email address hidden>  Fri, 06 Mar 2020 14:19:28 +0000

Available diffs

diff from 1.13.0-2 (in Debian) to 1.13.0-2ubuntu2 (1.2 KiB)
diff from 1.13.0-2ubuntu1 to 1.13.0-2ubuntu2 (793 bytes)

1.13.0-2ubuntu1

Superseded in focal-proposed on 2020-03-06

subversion (1.13.0-2ubuntu1) focal; urgency=medium

  * Build using swig3.0.

 -- Dimitri John Ledkov <email address hidden>  Fri, 06 Mar 2020 04:33:48 +0000

Available diffs

diff from 1.13.0-2build1 to 1.13.0-2ubuntu1 (714 bytes)

1.13.0-2build1

Superseded in focal-proposed on 2020-03-06

subversion (1.13.0-2build1) focal; urgency=medium

  [ Rafael David Tinoco ]
  * Sponsoring ruby2.7 transitions

  [ Lucas Kanashiro ]
  * No-change rebuild for ruby2.7

 -- Rafael David Tinoco <email address hidden>  Mon, 02 Mar 2020 16:35:25 +0000

Available diffs

diff from 1.13.0-2 (in Debian) to 1.13.0-2build1 (352 bytes)

1.13.0-2

Superseded in focal-release on 2020-03-26

Deleted in focal-proposed on 2020-03-28 (Reason: moved to Release)

subversion (1.13.0-2) unstable; urgency=medium

  [ James McCoy ]
  * gbp.conf: Do not number patches

  [ Steve Langasek ]
  * use python2 as the interpreter now for tests, not python (Closes: #948770)

 -- James McCoy <email address hidden>  Sun, 19 Jan 2020 08:59:14 -0500

Available diffs

diff from 1.13.0-1ubuntu1 (in Ubuntu) to 1.13.0-2 (1.3 KiB)

1.13.0-1ubuntu1

Superseded in focal-release on 2020-01-24

Deleted in focal-proposed on 2020-01-25 (Reason: moved to Release)

subversion (1.13.0-1ubuntu1) focal; urgency=medium

  * debian/patches/python2-in-tests.patch: use python2 as the
    interpreter now for tests, not python.

 -- Steve Langasek <email address hidden>  Mon, 13 Jan 2020 07:25:01 +0000

Available diffs

diff from 1.13.0-1 (in Debian) to 1.13.0-1ubuntu1 (922 bytes)
diff from 1.13.0-1build1 to 1.13.0-1ubuntu1 (900 bytes)

1.13.0-1build1

Superseded in focal-proposed on 2020-01-13

subversion (1.13.0-1build1) focal; urgency=medium

  * No-change rebuild to restore i386 binaries

 -- Steve Langasek <email address hidden>  Sun, 12 Jan 2020 21:42:59 +0000

Available diffs

diff from 1.13.0-1 (in Debian) to 1.13.0-1build1 (317 bytes)

1.13.0-1

Superseded in focal-release on 2020-01-19

Deleted in focal-proposed on 2020-01-20 (Reason: moved to Release)

subversion (1.13.0-1) unstable; urgency=medium

  * New upstream release
  * debian/watch:
    + Monitor 1.13.x versions
  * Update upstream signing keys
  * debian/control:
    + Bump minimum jdk version to 1.8
    + Switch to junit4 for Java tests
    + Bump libsvn-dev Build-Conflicts to << 1.13~
    + Remove obsolete Build-Depends on apache2-dev
    + Fix a typos in the pkg.subversion.nokde profile name
  * Declare compliance with Policy 4.4.1, no changes needed
  * Fix FTBFS on certain archs due to PIC/PIE interaction.
    Thanks to Thorsten Glaser for the patch (Closes: #942798)
  * libsvn1.symbols:
    + Mark private/experimental symbols as optional
    + Update symbols for 1.11, 1.12, and 1.13
  * debian/tests:
    + Replace $ADTTMP with $AUTOPKGTEST_TMP
  * Add fetch-keys script to update/minimize signing-key.asc
  * Add a pkg.subversion.nojava build profile

 -- James McCoy <email address hidden>  Thu, 28 Nov 2019 22:11:05 -0500

Available diffs

diff from 1.10.6-1build1 (in Ubuntu) to 1.13.0-1 (1.7 MiB)

1.10.6-1build1

Superseded in focal-release on 2019-12-12

Deleted in focal-proposed on 2019-12-13 (Reason: moved to Release)

subversion (1.10.6-1build1) focal; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden>  Fri, 18 Oct 2019 19:38:16 +0000

Available diffs

diff from 1.10.6-1 (in Debian) to 1.10.6-1build1 (317 bytes)

1.10.0-2ubuntu4

Superseded in eoan-proposed on 2019-09-01

subversion (1.10.0-2ubuntu4) eoan; urgency=medium

  * No-change rebuild to drop multiarch-support dependency.

 -- Matthias Klose <email address hidden>  Sun, 01 Sep 2019 03:42:06 +0000

Available diffs

diff from 1.10.0-2ubuntu3 to 1.10.0-2ubuntu4 (336 bytes)

1.10.6-1

Superseded in focal-release on 2019-10-24

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

subversion (1.10.6-1) unstable; urgency=medium

  * Update to new upstream version 1.10.6.
    + Security fix
      - CVE-2018-11782: Remotely triggerable DoS vulnerability in svnserve
        'get-deleted-rev'
      - CVE-2019-0203: Remote unauthenticated denial-of-service in Subversion
        svnserve
  * Support a pkg.subversion.nokde build profile.
    Thanks to Jason Duerstock for the patch (Closes: #929326)

 -- James McCoy <email address hidden>  Wed, 31 Jul 2019 07:01:38 -0400

Available diffs

diff from 1.10.0-2ubuntu3 (in Ubuntu) to 1.10.6-1 (2.6 MiB)
diff from 1.10.0-2ubuntu4 (in Ubuntu) to 1.10.6-1 (2.6 MiB)

1.6.17dfsg-3ubuntu3.8

Published in precise-updates on 2021-05-03

Published in precise-security on 2021-05-03

subversion (1.6.17dfsg-3ubuntu3.8) precise-security; urgency=medium

  * SECURITY UPDATE: Remotely triggerable DoS vulnerability in svnserve
    'get-deleted-rev' and Remote unauthenticated denial-of-service
    - debian/patches/CVE-2018-11782-and-CVE-2019-0203.patch: properly handle certain replies
      in subversion/libsvn_ra_svn/client.c, subversion/svnserve/serve.c,
    - CVE-2018-11782
    - CVE-2019-0203

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 29 Jul 2019 14:51:27 -0300

Available diffs

1.9.3-2ubuntu1.3

Published in xenial-updates on 2019-07-31

Published in xenial-security on 2019-07-31

subversion (1.9.3-2ubuntu1.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Remotely triggerable DoS vulnerability in svnserve
    'get-deleted-rev'
    - debian/patches/CVE-2018-11782.patch: properly handle certain replies
      in subversion/libsvn_ra_svn/client.c, subversion/svnserve/serve.c,
      subversion/tests/libsvn_ra/ra-test.c.
    - CVE-2018-11782
  * SECURITY UPDATE: Remote unauthenticated denial-of-service in svnserve
    - debian/patches/CVE-2019-0203.patch: properly handle errors in
      subversion/svnserve/serve.c.
    - CVE-2019-0203
  * WARNING: this update does _not_ include the changes from
    (1.9.3-2ubuntu1.2) in xenial-proposed.

 -- Marc Deslauriers <email address hidden>  Fri, 26 Jul 2019 09:55:16 -0400

Available diffs

diff from 1.9.3-2ubuntu1.1 to 1.9.3-2ubuntu1.3 (2.9 KiB)

1.9.3-2ubuntu1.2

Deleted in xenial-proposed on 2019-08-05 (Reason: moved to -updates)

subversion (1.9.3-2ubuntu1.2) xenial; urgency=medium

  * Backport patches/perl-swig-crash from upstream to fix crashes with Perl
    bindings, commonly seen when using git-svn (LP: #1451028)

 -- James McCoy <email address hidden>  Wed, 14 Mar 2018 22:29:16 -0400

Available diffs

diff from 1.9.3-2ubuntu1 to 1.9.3-2ubuntu1.2 (5.8 KiB)

1.10.0-2ubuntu2.1

Obsolete in cosmic-updates on 2020-07-13

Obsolete in cosmic-security on 2020-07-13

subversion (1.10.0-2ubuntu2.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-11803.patch: fix in
      subversion/mod_dav_svn/reports/list.c.
    - CVE-2018-11803

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 23 Jan 2019 12:12:36 -0300

Available diffs

diff from 1.10.0-2ubuntu2 (in Ubuntu) to 1.10.0-2ubuntu2.1 (926 bytes)

1.10.0-2ubuntu3

Superseded in eoan-release on 2019-09-02

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed on 2020-07-14 (Reason: moved to release)

subversion (1.10.0-2ubuntu3) disco; urgency=medium

  * No-change rebuild for the perl 5.28 transition.

 -- Adam Conrad <email address hidden>  Fri, 02 Nov 2018 18:15:03 -0600

Available diffs

diff from 1.10.0-2ubuntu2 to 1.10.0-2ubuntu3 (335 bytes)

1.10.0-2ubuntu2

Superseded in disco-release on 2018-11-08

Obsolete in cosmic-release on 2020-07-13

Deleted in cosmic-proposed on 2020-07-13 (Reason: moved to release)

subversion (1.10.0-2ubuntu2) cosmic; urgency=medium

  * Merge with Debian; remaining changes:
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - debian/patches/verbose-tests: Make tests verbose.
    - debian/rules: add verbosity level to --with-ruby-test-verbose
      configure argument as the ruby swig test errors out without a
      specific level

Available diffs

diff from 1.9.7-4ubuntu1 to 1.10.0-2ubuntu2 (7.5 MiB)
diff from 1.10.0-2ubuntu1 to 1.10.0-2ubuntu2 (569 bytes)

1.10.0-2ubuntu1

Superseded in cosmic-proposed on 2018-07-29

subversion (1.10.0-2ubuntu1) cosmic; urgency=medium

  * Merge with Debian; remaining changes:
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - debian/patches/verbose-tests: Make tests verbose.
    - debian/rules: add verbosity level to --with-ruby-test-verbose
      configure argument as the ruby swig test errors out without a
      specific level

Available diffs

diff from 1.9.7-4ubuntu1 to 1.10.0-2ubuntu1 (7.5 MiB)

1.9.7-4ubuntu1

Superseded in cosmic-release on 2018-07-30

Published in bionic-release on 2018-03-28

Deleted in bionic-proposed (Reason: moved to release)

subversion (1.9.7-4ubuntu1) bionic; urgency=medium

  * Merge with Debian; remaining changes:
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - debian/patches/verbose-tests: Make tests verbose.
    - debian/rules: add verbosity level to --with-ruby-test-verbose
      configure argument as the ruby swig test errors out without a
      specific level

Available diffs

diff from 1.9.7-3ubuntu3 to 1.9.7-4ubuntu1 (1.6 KiB)

1.9.7-3ubuntu3

Superseded in bionic-release on 2018-03-28

Deleted in bionic-proposed on 2018-03-29 (Reason: moved to release)

subversion (1.9.7-3ubuntu3) bionic; urgency=high

  * No change rebuild against ruby-defaults without ruby2.3 support.

 -- Dimitri John Ledkov <email address hidden>  Thu, 01 Mar 2018 09:36:33 +0000

Available diffs

diff from 1.9.7-3ubuntu2 to 1.9.7-3ubuntu3 (337 bytes)

1.9.7-3ubuntu2

Superseded in bionic-release on 2018-03-28

Deleted in bionic-proposed on 2018-03-29 (Reason: moved to release)

subversion (1.9.7-3ubuntu2) bionic; urgency=medium

  * No-change rebuild for ruby2.5 update.

 -- Matthias Klose <email address hidden>  Thu, 01 Feb 2018 19:14:27 +0000

Available diffs

diff from 1.9.7-3ubuntu1 to 1.9.7-3ubuntu2 (329 bytes)

1.9.7-3ubuntu1

Superseded in bionic-release on 2018-02-02

Deleted in bionic-proposed on 2018-02-03 (Reason: moved to release)

subversion (1.9.7-3ubuntu1) bionic; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - debian/patches/verbose-tests: Make tests verbose.
    - debian/rules: add verbosity level to --with-ruby-test-verbose
      configure argument as the ruby swig test errors out without a
      specific level

Available diffs

diff from 1.9.7-2ubuntu1 to 1.9.7-3ubuntu1 (16.4 KiB)

1.9.7-2ubuntu1

Superseded in bionic-release on 2017-12-16

Superseded in bionic-release on 2017-12-04

Obsolete in artful-release on 2020-07-10

Deleted in artful-proposed on 2020-07-10 (Reason: moved to release)

subversion (1.9.7-2ubuntu1) artful; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Build a python-subversion-dbg package.
    - Build-depend on python-all-dbg.
    - debian/patches/verbose-tests: Make tests verbose.
  * Updated changes:
    - debian/rules: add verbosity level to --with-ruby-test-verbose
      configure argument as the ruby swig test errors out without a
      specific level
  * Dropped Ubuntu changes:
    - debian/patches/CVE-2017-9800-1.9.6.patch: fixed upstream
    - debian/control: drop X-Python-Versions: as it is no longer
      needed with 2.7 the only remaining supported python 2 version
      and on obsolete flag
    - debian/rules: drop change that ignores swig test failures

Available diffs

diff from 1.9.5-1ubuntu3 to 1.9.7-2ubuntu1 (4.5 MiB)

Ubuntusubversion package

Change log for subversion package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
subversion package