Your message dated Sun, 21 Dec 2014 21:53:21 +0000
with message-id <e1y2orf-0006tx...@franck.debian.org>
and subject line Bug#773263: fixed in subversion 1.6.12dfsg-7+deb6u1
has caused the Debian Bug report #773263,
regarding subversion: CVE-2014-3580
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
773263: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773263
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: subversion
Version: 1.5.1dfsg1-5
Severity: grave
Tags: security
Hi,
please see
http://subversion.apache.org/security/CVE-2014-3580-advisory.txt for
further information.
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: subversion
Source-Version: 1.6.12dfsg-7+deb6u1
We believe that the bug you reported is fixed in the latest version of
subversion, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 773...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Holger Levsen <hol...@debian.org> (supplier of updated subversion package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 21 Dec 2014 21:27:53 +0100
Source: subversion
Binary: subversion libsvn1 libsvn-dev libsvn-doc libapache2-svn
python-subversion subversion-tools libsvn-java libsvn-perl libsvn-ruby1.8
libsvn-ruby
Architecture: source all i386
Version: 1.6.12dfsg-7+deb6u1
Distribution: squeeze-lts
Urgency: medium
Maintainer: Peter Samuelson <pe...@p12n.org>
Changed-By: Holger Levsen <hol...@debian.org>
Description:
libapache2-svn - Subversion server modules for Apache
libsvn-dev - Development files for Subversion libraries
libsvn-doc - Developer documentation for libsvn
libsvn-java - Java bindings for Subversion
libsvn-perl - Perl bindings for Subversion
libsvn-ruby - Ruby bindings for Subversion (dummy package)
libsvn-ruby1.8 - Ruby bindings for Subversion
libsvn1 - Shared libraries used by Subversion
python-subversion - Python bindings for Subversion
subversion - Advanced version control system
subversion-tools - Assorted tools related to Subversion
Closes: 773263
Changes:
subversion (1.6.12dfsg-7+deb6u1) squeeze-lts; urgency=medium
.
* Non-maintainer upload by the Squeeze LTS Team.
* Add patches/CVE-2014-3580 to fix mod_dav_svn DoS vulnerability with invalid
REPORT requests. (Closes: #773263)
Checksums-Sha1:
7421cfbe18690c43de68c6161adf19b03bc3bf28 2611
subversion_1.6.12dfsg-7+deb6u1.dsc
2b107ad4f7c6ce6ea480037946032c064c27f527 109829
subversion_1.6.12dfsg-7+deb6u1.diff.gz
f6faac885997db9704bf68dcfac75060eda823ca 1960674
libsvn-doc_1.6.12dfsg-7+deb6u1_all.deb
75f9807d65487a692b281e5ce461fb38a320d13f 219934
subversion-tools_1.6.12dfsg-7+deb6u1_all.deb
5c91c88105eac6311bc43561811352ec62f89662 766
libsvn-ruby_1.6.12dfsg-7+deb6u1_all.deb
17ace90f94e4888dda8de66ca23e1988eb11862c 1297398
subversion_1.6.12dfsg-7+deb6u1_i386.deb
d1d1fab0f9bbe168453bba113fd5c4ffcab7d189 907366
libsvn1_1.6.12dfsg-7+deb6u1_i386.deb
efb9cb783645e9b552dfbeebfb2ce0735ea9623b 1202802
libsvn-dev_1.6.12dfsg-7+deb6u1_i386.deb
919ba6e5aebb55a1d569fc2113e35180bbd7f15f 163136
libapache2-svn_1.6.12dfsg-7+deb6u1_i386.deb
16e18bfdcc0c3d524e8daec07e14d187ff2445be 1119130
python-subversion_1.6.12dfsg-7+deb6u1_i386.deb
f49c0f103f481f1aa1693a311e9c191c9c1a14d1 302436
libsvn-java_1.6.12dfsg-7+deb6u1_i386.deb
9e0046f0daafc4ed2422689e8e8eea13eb540739 1126764
libsvn-perl_1.6.12dfsg-7+deb6u1_i386.deb
c2eff450170315125136c8bbef4def350ff7a8e1 525780
libsvn-ruby1.8_1.6.12dfsg-7+deb6u1_i386.deb
Checksums-Sha256:
fb002a2b1c582570b1dbefbc168954f8b8366d12b8453a703131898a6d977a73 2611
subversion_1.6.12dfsg-7+deb6u1.dsc
fb8b3d263d77ed52b7d705807e57d6dcfc5543c039a31a282c1bc7efe2717cb3 109829
subversion_1.6.12dfsg-7+deb6u1.diff.gz
dd0559cc35c0abc0e989dccd02667f1f2c351d7660813094b864741226e462bc 1960674
libsvn-doc_1.6.12dfsg-7+deb6u1_all.deb
87f7049abe7c02eb813855486d289524e2fbcf78d9e8bf4719254b95f42036e0 219934
subversion-tools_1.6.12dfsg-7+deb6u1_all.deb
5a2db1b61e8fdab7ebe32d1a3dcac4c445da821ed90ca6a3659314442fde0383 766
libsvn-ruby_1.6.12dfsg-7+deb6u1_all.deb
c291bb58044fc38455f65a50de0fcbb3a0355cd9e6f08330055bc7e9e425e485 1297398
subversion_1.6.12dfsg-7+deb6u1_i386.deb
df20d4de24d2374ed3e164b55b6010251943493ba35e7a3deed5dcfdf641decb 907366
libsvn1_1.6.12dfsg-7+deb6u1_i386.deb
d3440be0dbe754bf6215df23ac5c33a3c6e12e5f882cdc2dd6424be9ce5333a4 1202802
libsvn-dev_1.6.12dfsg-7+deb6u1_i386.deb
28aaa2b6ea8b49eb4b693331a29cb9d712dbc36411b6ba82d53e8caf2dc2a493 163136
libapache2-svn_1.6.12dfsg-7+deb6u1_i386.deb
97d88d7dc8a49776845f58b87f3bb25fdb0f7c8a6f73338a57bc6d573dfebc82 1119130
python-subversion_1.6.12dfsg-7+deb6u1_i386.deb
bbc1ea1c15d51a75dd77e0a6a022c10f8bca7925b8ef552d7f0a67355cb8f34f 302436
libsvn-java_1.6.12dfsg-7+deb6u1_i386.deb
3e21b34c060e2e797ce4af6551fabace98b4993aeec721eafecfc8efe49f4ce4 1126764
libsvn-perl_1.6.12dfsg-7+deb6u1_i386.deb
a31aa264425f47dae8e74223fcf5dca0c0e150f09f53e969221593851a529954 525780
libsvn-ruby1.8_1.6.12dfsg-7+deb6u1_i386.deb
Files:
78200cb8d279dc5fec98a28009188e38 2611 vcs optional
subversion_1.6.12dfsg-7+deb6u1.dsc
aefbfa8735584963fc04f5da269874f4 109829 vcs optional
subversion_1.6.12dfsg-7+deb6u1.diff.gz
2652df391b6f354f2b92eba1bfce36c9 1960674 doc extra
libsvn-doc_1.6.12dfsg-7+deb6u1_all.deb
463628a1b66f3173d4dc68af59042d0c 219934 vcs extra
subversion-tools_1.6.12dfsg-7+deb6u1_all.deb
92205945cf2a8bb22b005a6fe3b7db89 766 ruby optional
libsvn-ruby_1.6.12dfsg-7+deb6u1_all.deb
b7aa6081a68b99d76a6bd82a4b279591 1297398 vcs optional
subversion_1.6.12dfsg-7+deb6u1_i386.deb
0ff80544e79435edd47c7571dc1fef9f 907366 vcs optional
libsvn1_1.6.12dfsg-7+deb6u1_i386.deb
0b0a24ead89cfcde12a191663f0d7c24 1202802 vcs extra
libsvn-dev_1.6.12dfsg-7+deb6u1_i386.deb
b7a4cb839391d2aabcd6673a494a8b35 163136 httpd optional
libapache2-svn_1.6.12dfsg-7+deb6u1_i386.deb
b44ed30a02c010930d00fc8855b80263 1119130 python optional
python-subversion_1.6.12dfsg-7+deb6u1_i386.deb
db1966489d53b0ce03d04e5d3dfdf1d1 302436 java optional
libsvn-java_1.6.12dfsg-7+deb6u1_i386.deb
a69de290fce44daee381b46ed23b0eb9 1126764 perl optional
libsvn-perl_1.6.12dfsg-7+deb6u1_i386.deb
cc88c73d74982e5dfdde87738a886d71 525780 ruby optional
libsvn-ruby1.8_1.6.12dfsg-7+deb6u1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=f/8/
-----END PGP SIGNATURE-----
--- End Message ---