Your message dated Sat, 09 Jun 2007 01:32:05 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#419348: fixed in subversion 1.4.4dfsg1-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: subversion
Version: 1.0.0-1
Severity: grave
Justification: remote DoS (data corruption)
A race condition was recently discovered in subversion whereby two
commits overlapping in time could interact very badly, in certain
circumstances. You can not only lose the effect of one of the commits,
but with the BDB backend, you can possibly corrupt the whole repository
in a fairly spectacular way. (It _does_ require commit access to a
repository.) For details, see the upstream report at
http://subversion.tigris.org/issues/show_bug.cgi?id=2751.
This affects all releases at least as far back as 1.0.0, and will be
fixed upstream in 1.4.4. Upstream has produced patches (including a
regression test) for all release branches. As soon as I find the time
to build and test on sarge and etch, I intend to upload fixed packages
to sid, p-u and oldstable-p-u.
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: subversion
Source-Version: 1.4.4dfsg1-1
We believe that the bug you reported is fixed in the latest version of
subversion, which is due to be installed in the Debian FTP archive:
libapache2-svn_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libapache2-svn_1.4.4dfsg1-1_i386.deb
libsvn-dev_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libsvn-dev_1.4.4dfsg1-1_i386.deb
libsvn-doc_1.4.4dfsg1-1_all.deb
to pool/main/s/subversion/libsvn-doc_1.4.4dfsg1-1_all.deb
libsvn-java_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libsvn-java_1.4.4dfsg1-1_i386.deb
libsvn-javahl_1.4.4dfsg1-1_all.deb
to pool/main/s/subversion/libsvn-javahl_1.4.4dfsg1-1_all.deb
libsvn-perl_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libsvn-perl_1.4.4dfsg1-1_i386.deb
libsvn-ruby1.8_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libsvn-ruby1.8_1.4.4dfsg1-1_i386.deb
libsvn-ruby_1.4.4dfsg1-1_all.deb
to pool/main/s/subversion/libsvn-ruby_1.4.4dfsg1-1_all.deb
libsvn1_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/libsvn1_1.4.4dfsg1-1_i386.deb
python-subversion_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/python-subversion_1.4.4dfsg1-1_i386.deb
subversion-tools_1.4.4dfsg1-1_all.deb
to pool/main/s/subversion/subversion-tools_1.4.4dfsg1-1_all.deb
subversion_1.4.4dfsg1-1.diff.gz
to pool/main/s/subversion/subversion_1.4.4dfsg1-1.diff.gz
subversion_1.4.4dfsg1-1.dsc
to pool/main/s/subversion/subversion_1.4.4dfsg1-1.dsc
subversion_1.4.4dfsg1-1_i386.deb
to pool/main/s/subversion/subversion_1.4.4dfsg1-1_i386.deb
subversion_1.4.4dfsg1.orig.tar.gz
to pool/main/s/subversion/subversion_1.4.4dfsg1.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Samuelson <[EMAIL PROTECTED]> (supplier of updated subversion package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 07 Jun 2007 00:57:11 -0500
Source: subversion
Binary: libsvn-javahl libsvn1 libsvn-perl libsvn-doc libsvn-dev libsvn-ruby
libapache2-svn libsvn-ruby1.8 libsvn-java python-subversion subversion-tools
subversion
Architecture: source all i386
Version: 1.4.4dfsg1-1
Distribution: unstable
Urgency: low
Maintainer: Peter Samuelson <[EMAIL PROTECTED]>
Changed-By: Peter Samuelson <[EMAIL PROTECTED]>
Description:
libapache2-svn - Subversion server modules for Apache
libsvn-dev - Development files for Subversion libraries
libsvn-doc - Developer documentation for libsvn
libsvn-java - Java bindings for Subversion
libsvn-javahl - Java bindings for Subversion (dummy package)
libsvn-perl - Perl bindings for Subversion
libsvn-ruby - Ruby bindings for Subversion (dummy package)
libsvn-ruby1.8 - Ruby bindings for Subversion
libsvn1 - Shared libraries used by Subversion
python-subversion - Python bindings for Subversion
subversion - Advanced version control system
subversion-tools - Assorted tools related to Subversion
Closes: 416582 419348
Changes:
subversion (1.4.4dfsg1-1) unstable; urgency=low
.
* New upstream version.
- Fixes rare case of data loss / repository corruption. (Closes: #419348)
* Fix note in README.Debian about how to download vc-svn.el.
Thanks to Michael Richters. (Closes: #416582)
* rules: configure --disable-neon-version-check, to allow use of neon 0.26.3.
* rules: replace $(PWD) with $(CURDIR) to appease lintian.
Our use of PWD was safe, this is just a cleanup.
* rules: ship a shlibs file only for libsvn1; nobody should ever link to
the libraries in other packages. (Thanks again to lintian.)
- lintian-overrides: inform lintian that it's ok not to have shlibs
files in the swig-based packages
Files:
aa313c15bc6312ee714c8330cd183a92 1239 devel optional
subversion_1.4.4dfsg1-1.dsc
5b47bc3439cd5bd009a1262255df66ef 6457862 devel optional
subversion_1.4.4dfsg1.orig.tar.gz
b5e305515a5ab81e76a1a6f72d3aba3e 76758 devel optional
subversion_1.4.4dfsg1-1.diff.gz
5d1d0d706f3f30ca6c0c239623cfe440 1122700 doc extra
libsvn-doc_1.4.4dfsg1-1_all.deb
25e25af195449c09c89396be55275730 168306 admin extra
subversion-tools_1.4.4dfsg1-1_all.deb
99e99d3f7a0ddc8db9cda2e82ed3d9ba 774 devel optional
libsvn-javahl_1.4.4dfsg1-1_all.deb
54bae93b1a7ba55ec71f5f1a783e9a2b 744 devel optional
libsvn-ruby_1.4.4dfsg1-1_all.deb
352e596ab3936ba2d3d2223b3e1f91d3 1052272 devel optional
subversion_1.4.4dfsg1-1_i386.deb
4fafaa5615a14ded8e3d919281845cb1 595214 libs optional
libsvn1_1.4.4dfsg1-1_i386.deb
6906420e21417057d90f7c6c33584ace 815804 libdevel extra
libsvn-dev_1.4.4dfsg1-1_i386.deb
d0ab3f2e1db039c32fd09ef5abeb6b1b 133726 net optional
libapache2-svn_1.4.4dfsg1-1_i386.deb
d36bcc7e36f15fd3c31d2ebcc85b73ea 512074 python optional
python-subversion_1.4.4dfsg1-1_i386.deb
af08207dd7cfa41919569b686c0196f7 214674 devel optional
libsvn-java_1.4.4dfsg1-1_i386.deb
66bef2bb7b04785c8f0a25555e8365bb 805346 perl optional
libsvn-perl_1.4.4dfsg1-1_i386.deb
d5fb7ae54ed6d4b465b29b0e0db92c01 382174 devel optional
libsvn-ruby1.8_1.4.4dfsg1-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGagG5QOr9C+GfGI4RAsY3AKDCBP177FSugLggDFE7AkxlH1r+KACfTdEW
VN48pq5yf/8BV600+37JpoU=
=Xj6j
-----END PGP SIGNATURE-----
--- End Message ---
