Apache Subversion

I'm happy to announce Subversion 1.6.9, available from: http://subversion.tigris.org/downloads/subversion-1.6.9.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.9.tar.gz ... [More] http://subversion.tigris.org/downloads/subversion-1.6.9.zip http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.9.zip (Please note that Subversion 1.6.7 and 1.6.8 were never publicly released.) The MD5 checksums are: 9c30a47b1d48664e7afef68bb4834c53 subversion-1.6.9.tar.bz2 facaa0ee78c8f24b9af12c74662bbd24 subversion-1.6.9.tar.gz bb0fe4ccfdd4645ea4581933c6a666b3 subversion-1.6.9.zip c480173d939a5a6d0c71c717ab71e392 subversion-deps-1.6.9.tar.bz2 75d2383c82b698f3aeab5bea6e95019b subversion-deps-1.6.9.tar.gz 09f3287d3c4d35dfe8a543e70aefd916 subversion-deps-1.6.9.zip The SHA1 checksums are: 477aa89e60de7974ac0aa921cc369b4c2907693c subversion-1.6.9.tar.bz2 679284ad9bd13bff9e09a6a8e5985ca1e62a822d subversion-1.6.9.tar.gz bb5807ca8c2095cdb7d8944365f653e2e08c4d8e subversion-1.6.9.zip 76dd89bd257c0fb67d522736ab9bd76320091a99 subversion-deps-1.6.9.tar.bz2 d5a09c11267b945d6e5a7006772f5abb19de850f subversion-deps-1.6.9.tar.gz baa71c23620b05b998c6870b9a58e0fbe907a072 subversion-deps-1.6.9.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.9.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.9.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.9.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Jeremy Whitlock [1024D/4DF18BE2] with fingerprint: 49CC 326D FE86 76B3 EBED 8E82 8D5D 1E06 4DF1 8BE2 Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.9 and earlier versions at: http://svn.apache.org/repos/asf/subversion/tags/1.6.9/CHANGES [Less]

I'm happy to announce Subversion 1.6.9, available from: http://subversion.tigris.org/downloads/subversion-1.6.9.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.9.tar.gz http://subversion.tigris.org/downloads/subversion-1.6.9.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.9.zip (Please note that Subversion 1.6.7 and 1.6.8 were never publicly released.) The MD5 checksums are: 9c30a47b1d48664e7afef68bb4834c53 subversion-1.6.9.tar.bz2 facaa0ee78c8f24b9af12c74662bbd24 subversion-1.6.9.tar.gz bb0fe4ccfdd4645ea4581933c6a666b3 subversion-1.6.9.zip c480173d939a5a6d0c71c717ab71e392 subversion-deps-1.6.9.tar.bz2 75d2383c82b698f3aeab5bea6e95019b subversion-deps-1.6.9.tar.gz 09f3287d3c4d35dfe8a543e70aefd916 subversion-deps-1.6.9.zip The SHA1 checksums are: 477aa89e60de7974ac0aa921cc369b4c2907693c subversion-1.6.9.tar.bz2 679284ad9bd13bff9e09a6a8e5985ca1e62a822d subversion-1.6.9.tar.gz bb5807ca8c2095cdb7d8944365f653e2e08c4d8e subversion-1.6.9.zip 76dd89bd257c0fb67d522736ab9bd76320091a99 subversion-deps-1.6.9.tar.bz2 d5a09c11267b945d6e5a7006772f5abb19de850f subversion-deps-1.6.9.tar.gz baa71c23620b05b998c6870b9a58e0fbe907a072 subversion-deps-1.6.9.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.9.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.9.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.9.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.9.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Jeremy Whitlock [1024D/4DF18BE2] with fingerprint: 49CC 326D FE86 76B3 EBED 8E82 8D5D 1E06 4DF1 8BE2 Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.9 and earlier versions at: http://svn.apache.org/repos/asf/subversion/tags/1.6.9/CHANGES [Less]

I'm happy to announce Subversion 1.6.6, available from: http://subversion.tigris.org/downloads/subversion-1.6.6.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.6.tar.gz http://subversion.tigris.org/downloads/subversion-1.6.6.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.6.zip The MD5 checksums are: e5109da756d74c7d98f683f004a539af subversion-1.6.6.tar.bz2 0ab0f26f6eb056add1b9d3059a3f4247 subversion-1.6.6.tar.gz a6939e209bb42038fc7b7e1a5f8ea7fd subversion-1.6.6.zip 8ec2a0daea27f86a75939d3ed09618a0 subversion-deps-1.6.6.tar.bz2 2665b35dbf1f0a33c3f3b460b0bf7dd3 subversion-deps-1.6.6.tar.gz bec1ddc026df3998fafc3cfb39c13401 subversion-deps-1.6.6.zip The SHA1 checksums are: 01b03d04660fa5d1f76c742b0f8a38bf1ca1a507 subversion-1.6.6.tar.bz2 7a307a9be882e5ec488bf5a26b46e7831a725d29 subversion-1.6.6.tar.gz b7e24889501d62957b493f1009c5c90effe639b2 subversion-1.6.6.zip 164999e9063a88aa0fcee818eeb36cd5b6c94904 subversion-deps-1.6.6.tar.bz2 e51d465169f37a6d3c67af74a861c1f41c31b994 subversion-deps-1.6.6.tar.gz 7fc7b89ec37bed4e0580e0171826880a77b6cf37 subversion-deps-1.6.6.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.6.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.6.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.6.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.6 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.6/CHANGES [Less]

I'm happy to announce Subversion 1.6.6, available from: http://subversion.tigris.org/downloads/subversion-1.6.6.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.6.tar.gz ... [More] http://subversion.tigris.org/downloads/subversion-1.6.6.zip http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.6.zip The MD5 checksums are: e5109da756d74c7d98f683f004a539af subversion-1.6.6.tar.bz2 0ab0f26f6eb056add1b9d3059a3f4247 subversion-1.6.6.tar.gz a6939e209bb42038fc7b7e1a5f8ea7fd subversion-1.6.6.zip 8ec2a0daea27f86a75939d3ed09618a0 subversion-deps-1.6.6.tar.bz2 2665b35dbf1f0a33c3f3b460b0bf7dd3 subversion-deps-1.6.6.tar.gz bec1ddc026df3998fafc3cfb39c13401 subversion-deps-1.6.6.zip The SHA1 checksums are: 01b03d04660fa5d1f76c742b0f8a38bf1ca1a507 subversion-1.6.6.tar.bz2 7a307a9be882e5ec488bf5a26b46e7831a725d29 subversion-1.6.6.tar.gz b7e24889501d62957b493f1009c5c90effe639b2 subversion-1.6.6.zip 164999e9063a88aa0fcee818eeb36cd5b6c94904 subversion-deps-1.6.6.tar.bz2 e51d465169f37a6d3c67af74a861c1f41c31b994 subversion-deps-1.6.6.tar.gz 7fc7b89ec37bed4e0580e0171826880a77b6cf37 subversion-deps-1.6.6.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.6.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.6.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.6.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.6.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.6 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.6/CHANGES [Less]

I'm happy to announce Subversion 1.6.5, available from: http://subversion.tigris.org/downloads/subversion-1.6.5.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.5.tar.gz http://subversion.tigris.org/downloads/subversion-1.6.5.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.5.zip There are two test failures when running 'make check-swig-rb' on the ruby swig bindings. These failures are due to a known defect in the tests. The patch applied to Subversion's trunk in r38886 can be applied to 1.6.5 to make the tests pass again. The MD5 checksums are: 1a53a0e72bee0bf814f4da83a9b6a636 subversion-1.6.5.tar.bz2 1aa6819d0834fad6f5970e25f79e6731 subversion-1.6.5.tar.gz e447511cd01b0417a283e0647335fec9 subversion-1.6.5.zip 8272316e1670d4d2bea451411e438bde subversion-deps-1.6.5.tar.bz2 988d6c1535c30c72ffa57b80360afcb1 subversion-deps-1.6.5.tar.gz 0758f11f958091e1e740747156d7de6c subversion-deps-1.6.5.zip The SHA1 checksums are: c575c5facf972e501049ad47a9be05c5cf228388 subversion-1.6.5.tar.bz2 ea3a18443f4afcb84e66b48c0ba2af16ada4d25a subversion-1.6.5.tar.gz 442b93e31fef876c678cf2e4f3d66a80670ee330 subversion-1.6.5.zip 8a0a6f225118f94bd27aa17e30bf9ac5bd75e3cf subversion-deps-1.6.5.tar.bz2 27162103785e12ee2be88544bcec0695829c922d subversion-deps-1.6.5.tar.gz 4f8c2bb4770b30b927fdd1c29f06fd2c4620bfe5 subversion-deps-1.6.5.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.5.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.5.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.5.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Blair Zajac [1024D/DA561D91] with fingerprint: 3FAE C7E1 ADE8 572F 613C F086 C572 2326 DA56 1D91 Arfrever Frehtes Taifersar Arahesis [1024D/E06AFE3E] with fingerprint: 17D9 DFDA EC0F E896 428A D821 2041 9549 E06A FE3E Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.5 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.5/CHANGES [Less]

I'm happy to announce Subversion 1.6.5, available from: http://subversion.tigris.org/downloads/subversion-1.6.5.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.5.tar.gz ... [More] http://subversion.tigris.org/downloads/subversion-1.6.5.zip http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.5.zip There are two test failures when running 'make check-swig-rb' on the ruby swig bindings. These failures are due to a known defect in the tests. The patch applied to Subversion's trunk in r38886 can be applied to 1.6.5 to make the tests pass again. The MD5 checksums are: 1a53a0e72bee0bf814f4da83a9b6a636 subversion-1.6.5.tar.bz2 1aa6819d0834fad6f5970e25f79e6731 subversion-1.6.5.tar.gz e447511cd01b0417a283e0647335fec9 subversion-1.6.5.zip 8272316e1670d4d2bea451411e438bde subversion-deps-1.6.5.tar.bz2 988d6c1535c30c72ffa57b80360afcb1 subversion-deps-1.6.5.tar.gz 0758f11f958091e1e740747156d7de6c subversion-deps-1.6.5.zip The SHA1 checksums are: c575c5facf972e501049ad47a9be05c5cf228388 subversion-1.6.5.tar.bz2 ea3a18443f4afcb84e66b48c0ba2af16ada4d25a subversion-1.6.5.tar.gz 442b93e31fef876c678cf2e4f3d66a80670ee330 subversion-1.6.5.zip 8a0a6f225118f94bd27aa17e30bf9ac5bd75e3cf subversion-deps-1.6.5.tar.bz2 27162103785e12ee2be88544bcec0695829c922d subversion-deps-1.6.5.tar.gz 4f8c2bb4770b30b927fdd1c29f06fd2c4620bfe5 subversion-deps-1.6.5.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.5.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.5.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.5.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.5.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Julian Foad [1024D/353E25BC] with fingerprint: 6604 5A4B 43BC F994 7777 5728 351F 33E4 353E 25BC Blair Zajac [1024D/DA561D91] with fingerprint: 3FAE C7E1 ADE8 572F 613C F086 C572 2326 DA56 1D91 Arfrever Frehtes Taifersar Arahesis [1024D/E06AFE3E] with fingerprint: 17D9 DFDA EC0F E896 428A D821 2041 9549 E06A FE3E Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Mark Phippard [1024D/035A96A9] with fingerprint: D315 89DB E1C1 E9BA D218 39FD 265D F8A0 035A 96A9 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.5 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.5/CHANGES [Less]

Subversion 1.6.4 has been released, available from: http://subversion.tigris.org/downloads/subversion-1.6.4.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.4.tar.gz http://subversion.tigris.org/downloads/subversion-1.6.4.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.4.zip THIS IS A SECURITY RELEASE, addressing the issue described at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-2411 The CVE page may not be public yet when you read this, but will be soon. The full text of the advisory is available at: http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt This security issue affects both clients and servers. Clients with commit access to a vulnerable server can cause a remote heap overflow. Servers can cause a heap overflow on vulnerable clients that try to do a checkout or update. Subversion 1.6.4 differs from 1.6.3 only in the fix for this issue. Upgrading to Subversion 1.6.4 (or Subversion 1.5.7, released simultaneously) is therefore strongly recommended for Subversion client and server installations on all platforms. The MD5 checksums are: 11e3fa838c9a558cadc378f2807572e2 subversion-1.6.4.tar.bz2 9649be6c47b7d915dce75a1198900c25 subversion-1.6.4.tar.gz 7bedf685657c8a23d63760b60c58483e subversion-1.6.4.zip 026b5f5bd548d17368cd3dfd2965e0d3 subversion-deps-1.6.4.tar.bz2 a64c7979a7d9cd30f2a5159b5f5a5e6e subversion-deps-1.6.4.tar.gz 73453a5c0bf1c7d4369c0bef29eddb69 subversion-deps-1.6.4.zip The SHA1 checksums are: d043afc479ad985b23abe80e940729b99d4eb3c4 subversion-1.6.4.tar.bz2 0380c01229e5faa2f77236d0316abda292822303 subversion-1.6.4.tar.gz 3abec05e69ca092f0e608cf304aaf8ae2c7383a7 subversion-1.6.4.zip 2f3e30b0c7e1f735aee6f37dc15fbabfad5815db subversion-deps-1.6.4.tar.bz2 71afc9e85f3d7f26a896662f5ca85adf046855d3 subversion-deps-1.6.4.tar.gz 4c7880a69c21c964200646808994ae0bd9e03040 subversion-deps-1.6.4.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.4.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.4.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.4.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Ivan Zhakov [1024D/C4F3A281] with fingerprint: 9D3C 5860 6A64 74BF 591D F3A1 F60D 1980 C4F3 A281 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.4 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES [Less]

Subversion 1.6.4 has been released, available from: http://subversion.tigris.org/downloads/subversion-1.6.4.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.6.4.tar.gz http://subversion.tigris.org/downloads/subversion-1.6.4.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.6.4.zip THIS IS A SECURITY RELEASE, addressing the issue described at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-2411 The CVE page may not be public yet when you read this, but will be soon. The full text of the advisory is available at: http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt This security issue affects both clients and servers. Clients with commit access to a vulnerable server can cause a remote heap overflow. Servers can cause a heap overflow on vulnerable clients that try to do a checkout or update. Subversion 1.6.4 differs from 1.6.3 only in the fix for this issue. Upgrading to Subversion 1.6.4 (or Subversion 1.5.7, released simultaneously) is therefore strongly recommended for Subversion client and server installations on all platforms. The MD5 checksums are: 11e3fa838c9a558cadc378f2807572e2 subversion-1.6.4.tar.bz2 9649be6c47b7d915dce75a1198900c25 subversion-1.6.4.tar.gz 7bedf685657c8a23d63760b60c58483e subversion-1.6.4.zip 026b5f5bd548d17368cd3dfd2965e0d3 subversion-deps-1.6.4.tar.bz2 a64c7979a7d9cd30f2a5159b5f5a5e6e subversion-deps-1.6.4.tar.gz 73453a5c0bf1c7d4369c0bef29eddb69 subversion-deps-1.6.4.zip The SHA1 checksums are: d043afc479ad985b23abe80e940729b99d4eb3c4 subversion-1.6.4.tar.bz2 0380c01229e5faa2f77236d0316abda292822303 subversion-1.6.4.tar.gz 3abec05e69ca092f0e608cf304aaf8ae2c7383a7 subversion-1.6.4.zip 2f3e30b0c7e1f735aee6f37dc15fbabfad5815db subversion-deps-1.6.4.tar.bz2 71afc9e85f3d7f26a896662f5ca85adf046855d3 subversion-deps-1.6.4.tar.gz 4c7880a69c21c964200646808994ae0bd9e03040 subversion-deps-1.6.4.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.6.4.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.6.4.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.6.4.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.6.4.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 C. Michael Pilato [1024D/1706FD6E] with fingerprint: 20BF 14DC F02F 2730 7EA4 C7BB A241 06A9 1706 FD6E Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Ivan Zhakov [1024D/C4F3A281] with fingerprint: 9D3C 5860 6A64 74BF 591D F3A1 F60D 1980 C4F3 A281 Release notes for the 1.6.x release series may be found at: http://subversion.tigris.org/svn_1.6_releasenotes.html You can find the list of changes between 1.6.4 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES [Less]

Subversion 1.5.7 has been released, available from: http://subversion.tigris.org/downloads/subversion-1.5.7.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.5.7.tar.gz http://subversion.tigris.org/downloads/subversion-1.5.7.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.5.7.zip THIS IS A SECURITY RELEASE, addressing the issue described at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-2411 The CVE page may not be public yet when you read this, but will be soon. The full text of the advisory is available at: http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt This security issue affects both clients and servers. Clients with commit access to a vulnerable server can cause a remote heap overflow. Servers can cause a heap overflow on vulnerable clients that try to do a checkout or update. Subversion 1.5.7 differs from 1.5.6 only in the fix for this issue. Upgrading to Subversion 1.5.7 (or Subversion 1.6.4, released simultaneously) is therefore strongly recommended for Subversion client and server installations on all platforms. The MD5 checksums are: abb42850da71f34d566e78733b597cca subversion-1.5.7.tar.bz2 43b0df7bce8b060e7b424ac17cf6c43c subversion-1.5.7.tar.gz 6db7a462a6ae796d863befa63ab6f7b2 subversion-1.5.7.zip 639c3954e5f4267e027ee468e93ffe04 subversion-deps-1.5.7.tar.bz2 216ed06fdae91bba05b3bdb9496b5e92 subversion-deps-1.5.7.tar.gz ebe4d31e1000b6ba0afa5efd89f7cf2f subversion-deps-1.5.7.zip The SHA1 checksums are: 1fecff77387a48f0d48fd87c59fe5deb87407f16 subversion-1.5.7.tar.bz2 7d4d9752e360fa8903b10e5c9b4a018fab7d1c02 subversion-1.5.7.tar.gz 267419e8796ddd806ff7610e19fdc7df2686053a subversion-1.5.7.zip 2989653a404f9d718fced2ba1fe24eb3a034769a subversion-deps-1.5.7.tar.bz2 d05cb5faaf85fec0a0f4e30af39a62dbf8e0425a subversion-deps-1.5.7.tar.gz 54d626492ce6b9b31123e16a4bc328c08db2967b subversion-deps-1.5.7.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.5.7.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.5.7.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.5.7.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Daniel Shahaf [1024D/C0903C70] with fingerprint: A41B 0B40 5E2D 66A8 066F 0F4F 4780 436C C090 3C70 Release notes for the 1.5.x release series may be found at: http://subversion.tigris.org/svn_1.5_releasenotes.html You can find the list of changes between 1.5.7 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES [Less]

Subversion 1.5.7 has been released, available from: http://subversion.tigris.org/downloads/subversion-1.5.7.tar.bz2 http://subversion.tigris.org/downloads/subversion-1.5.7.tar.gz http://subversion.tigris.org/downloads/subversion-1.5.7.zip ... [More] http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.bz2 http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.gz http://subversion.tigris.org/downloads/subversion-deps-1.5.7.zip THIS IS A SECURITY RELEASE, addressing the issue described at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-2411 The CVE page may not be public yet when you read this, but will be soon. The full text of the advisory is available at: http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt This security issue affects both clients and servers. Clients with commit access to a vulnerable server can cause a remote heap overflow. Servers can cause a heap overflow on vulnerable clients that try to do a checkout or update. Subversion 1.5.7 differs from 1.5.6 only in the fix for this issue. Upgrading to Subversion 1.5.7 (or Subversion 1.6.4, released simultaneously) is therefore strongly recommended for Subversion client and server installations on all platforms. The MD5 checksums are: abb42850da71f34d566e78733b597cca subversion-1.5.7.tar.bz2 43b0df7bce8b060e7b424ac17cf6c43c subversion-1.5.7.tar.gz 6db7a462a6ae796d863befa63ab6f7b2 subversion-1.5.7.zip 639c3954e5f4267e027ee468e93ffe04 subversion-deps-1.5.7.tar.bz2 216ed06fdae91bba05b3bdb9496b5e92 subversion-deps-1.5.7.tar.gz ebe4d31e1000b6ba0afa5efd89f7cf2f subversion-deps-1.5.7.zip The SHA1 checksums are: 1fecff77387a48f0d48fd87c59fe5deb87407f16 subversion-1.5.7.tar.bz2 7d4d9752e360fa8903b10e5c9b4a018fab7d1c02 subversion-1.5.7.tar.gz 267419e8796ddd806ff7610e19fdc7df2686053a subversion-1.5.7.zip 2989653a404f9d718fced2ba1fe24eb3a034769a subversion-deps-1.5.7.tar.bz2 d05cb5faaf85fec0a0f4e30af39a62dbf8e0425a subversion-deps-1.5.7.tar.gz 54d626492ce6b9b31123e16a4bc328c08db2967b subversion-deps-1.5.7.zip PGP Signatures are available at: http://subversion.tigris.org/downloads/subversion-1.5.7.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-1.5.7.tar.gz.asc http://subversion.tigris.org/downloads/subversion-1.5.7.zip.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.bz2.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.tar.gz.asc http://subversion.tigris.org/downloads/subversion-deps-1.5.7.zip.asc For this release, the following people have provided PGP signatures: Senthil Kumaran S [1024D/6CCD4038] with fingerprint: 8035 16A5 1D6E 50E2 1ECD DE56 F68D 46FB 6CCD 4038 Paul T. Burba [1024D/53FCDC55] with fingerprint: E630 CF54 792C F913 B13C 32C5 D916 8930 53FC DC55 Bert Huijben [1024D/9821F7B2] with fingerprint: 2017 F51A 2572 0E78 8827 5329 FCFD 6305 9821 F7B2 Hyrum K. Wright [1024D/4E24517C] with fingerprint: 3324 80DA 0F8C A37D AEE6 D084 0B03 AE6E 4E24 517C Stefan Sperling [1024D/F59D25F0] with fingerprint: B1CF 1060 A1E9 34D1 9E86 D6D6 E5D3 0273 F59D 25F0 Daniel Shahaf [1024D/C0903C70] with fingerprint: A41B 0B40 5E2D 66A8 066F 0F4F 4780 436C C090 3C70 Release notes for the 1.5.x release series may be found at: http://subversion.tigris.org/svn_1.5_releasenotes.html You can find the list of changes between 1.5.7 and earlier versions at: http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES [Less]