You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@subversion.apache.org by David Glasser <gl...@davidglasser.net> on 2009/08/06 20:32:24 UTC

Patch to 1.4.x branch for CVE-2009-2411

The security holes in CVE-2009-2411 predate Subversion 1.0

1.5.x and 1.6.x are our only actively supported lines of development,
but there are many users stuck on 1.4.x or earlier.  While upgrading
to supported lines of development would be ideal, here is a FAR LESS
TESTED THAN 1.5.7/1.6.4, though fundamentally equivalent patch for
1.4.x.

--dave

-- 
glasser@davidglasser.net | langtonlabs.org | flickr.com/photos/glasser/

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=462&dsMessageId=2381058