You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@subversion.apache.org by hw...@apache.org on 2010/10/01 20:08:53 UTC

svn commit: r1003603 - /subversion/trunk/CHANGES

Author: hwright
Date: Fri Oct  1 18:08:53 2010
New Revision: 1003603

URL: http://svn.apache.org/viewvc?rev=1003603&view=rev
Log:
* CHANGES
  (1.6.13): Add note about CVE-2010-3315.

Modified:
    subversion/trunk/CHANGES

Modified: subversion/trunk/CHANGES
URL: http://svn.apache.org/viewvc/subversion/trunk/CHANGES?rev=1003603&r1=1003602&r2=1003603&view=diff
==============================================================================
--- subversion/trunk/CHANGES (original)
+++ subversion/trunk/CHANGES Fri Oct  1 18:08:53 2010
@@ -19,6 +19,8 @@ http://svn.apache.org/repos/asf/subversi
    * fix error transmission problems in svnserve (r997457, -66)
    * fixed: record-only merges create self-referential mergeinfo (issue #3646)
    * fixed: 'SVNPathAuthz short_circuit' unsolicited read access (issue #3695)
+            See CVE-2010-3315, and descriptive advisory at
+            http://subversion.apache.org/security/CVE-2010-3315-advisory.txt
    * make 'svnmucc propset' handle existing and non-existing URLs (r1000607)
    * add new 'propsetf' subcommand to svnmucc (r1000612)
    * warn about copied dirs during 'svn ci' with limited depth (r1002094)