You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@subversion.apache.org by st...@apache.org on 2017/07/03 10:24:23 UTC

svn commit: r1800619 - /subversion/trunk/CHANGES

Author: stsp
Date: Mon Jul  3 10:24:22 2017
New Revision: 1800619

URL: http://svn.apache.org/viewvc?rev=1800619&view=rev
Log:
* CHANGES: Document changes for 1.8.18.

Modified:
    subversion/trunk/CHANGES

Modified: subversion/trunk/CHANGES
URL: http://svn.apache.org/viewvc/subversion/trunk/CHANGES?rev=1800619&r1=1800618&r2=1800619&view=diff
==============================================================================
--- subversion/trunk/CHANGES (original)
+++ subversion/trunk/CHANGES Mon Jul  3 10:24:22 2017
@@ -1179,6 +1179,27 @@ http://svn.apache.org/repos/asf/subversi
     * javahl: allow compiling with a C++11 compiler (r1684412)
 
 
+Version 1.8.18
+(10 Jul 2017, from /branches/1.8.x)
+http://svn.apache.org/repos/asf/subversion/tags/1.8.18
+
+ User-visible changes:
+  - Server-side bugfixes:
+    * fsfs: never attempt to share directory representations (r1785053)
+    * fsfs: make consistency independent of hash algorithms (r1785737 et al)
+	This change makes Subversion resilient to collision attacks, including
+	SHA-1 collision attacks such as <http://shattered.io/>.  See also our
+	documentation at <https://subversion.apache.org/faq#shattered-sha1> and
+	<https://subversion.apache.org/docs/release-notes/1.8#shattered-sha1>.
+
+  - Client-side and server-side bugfixes:
+    * work around an APR bug related to file truncation (r1759116)
+
+ Developer-visible changes:
+  - General:
+    * update serf download URI in build scripts (r1700130 et al)
+
+
 Version 1.8.17
 (29 Nov 2016, from /branches/1.8.x)
 http://svn.apache.org/repos/asf/subversion/tags/1.8.17