Your message dated Wed, 16 Dec 2015 04:29:03 +0000 with message-id <e1a93i3-0006sg...@franck.debian.org> and subject line Bug#803725: fixed in subversion 1.9.3-1 has caused the Debian Bug report #803725, regarding subversion: dump-load of a repository modifies verbose log output: M line lost to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 803725: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803725 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: subversion Version: 1.9.2-2 Severity: critical Justification: causes serious data loss I've posted the following to the Subversion-dev mailing-list: http://svn.haxx.se/dev/archive-2015-11/0001.shtml With the MPFR repository: I currently have: zira:~> TZ=UTC svn log -r 1984 -v file:///home/vinc17/private/svn-mpfr ------------------------------------------------------------------------ r1984 | vlefevre | 2002-07-23 16:22:08 +0000 (Tue, 23 Jul 2002) | 2 lines Changed paths: M /trunk/mul.c Fixed permissions. ------------------------------------------------------------------------ But after a dump-load: zira:~> TZ=UTC svn log -r 1984 -v file:///home/vinc17/private/test-svn-mpfr ------------------------------------------------------------------------ r1984 | vlefevre | 2002-07-23 16:22:08 +0000 (Tue, 23 Jul 2002) | 2 lines Fixed permissions. ------------------------------------------------------------------------ The "M /trunk/mul.c" line has been lost! FYI, this came from the CVS conversion, where the permissions of mul.c were changed, but with no effect in the SVN repository. I don't know whether this is due to a buggy change in the format of the dump, or a bug in the load. The dump of this revision changed in the following way for this revision: Node-path: trunk/mul.c Node-kind: file Node-action: change -Text-delta: true -Text-delta-base-md5: a79ede6a595f7bad6a4549c23ef9cd2b -Text-delta-base-sha1: a9ce78ba643c727019f926d957f37414cfc1a050 -Text-content-length: 15 -Text-content-md5: a79ede6a595f7bad6a4549c23ef9cd2b -Text-content-sha1: a9ce78ba643c727019f926d957f37414cfc1a050 -Content-length: 15 -[Contents] This might be related to: http://subversion.tigris.org/issues/show_bug.cgi?id=4598 -- System Information: Debian Release: stretch/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages subversion depends on: ii libapr1 1.5.2-3 ii libaprutil1 1.5.4-1 ii libc6 2.19-22 ii libldap-2.4-2 2.4.42+dfsg-2 ii libsasl2-2 2.1.26.dfsg1-14 ii libsvn1 1.9.2-2 subversion recommends no packages. Versions of packages subversion suggests: pn db5.3-util <none> ii patch 2.7.5-1 ii subversion-tools 1.9.2-2 -- no debconf information
--- End Message ---
--- Begin Message ---Source: subversion Source-Version: 1.9.3-1 We believe that the bug you reported is fixed in the latest version of subversion, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 803...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. James McCoy <james...@debian.org> (supplier of updated subversion package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 15 Dec 2015 20:26:57 -0500 Source: subversion Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8 Architecture: source Version: 1.9.3-1 Distribution: unstable Urgency: high Maintainer: Peter Samuelson <pe...@p12n.org> Changed-By: James McCoy <james...@debian.org> Closes: 796781 797216 802156 802611 803725 Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package) libsvn1 - Shared libraries used by Apache Subversion libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package) python-subversion - Python bindings for Apache Subversion ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-dbg - Debug symbols for Apache Subversion subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.9.3-1) unstable; urgency=high . * New upstream release. + Security fixes - CVE-2015-5259: Heap overflow and out-of-bounds read in svn:// protocol parser - CVE-2015-5343: Heap overflow and out-of-bounds read in mod_dav_svn + Fix dumps of no-op changes with “svnadmin dump”. (Closes: #803725) + Fix segfault when performing a diff when repository is on server root. (Closes: #802611) + Fix translations of commit notifications. (Closes: #802156) + Fix authz with mod_auth_ntlm/mod_auth_kerb. (Closes: #797216) + Restore reporting (un)lock errors as failures. (Closes: #796781) Checksums-Sha1: 5a0d5f3f9c29930bac5668f20555b0096f8f8c6b 3200 subversion_1.9.3-1.dsc b0cf8a64b1c244fcf2fa282d59ba34d7a57c3751 10600934 subversion_1.9.3.orig.tar.gz 0dd28123ebf9cce9f894443bf46eb3fc4d47d295 2420957 subversion_1.9.3-1.diff.gz Checksums-Sha256: 895cce2b81a1822ace4ee189bda8b09731a38ba7d0fc7940866ce4212cf42069 3200 subversion_1.9.3-1.dsc 74cd21d2f8a2a54e4dbd2389fe1605a19dbda8ba88ffc4bb0edc9a66e143cc93 10600934 subversion_1.9.3.orig.tar.gz 72c829b4713587cdadba1652bf62d651e62ad2878b7a740c8aa6ddc90636d4ec 2420957 subversion_1.9.3-1.diff.gz Files: 172b373be0b06240e1d243d8a06f9c80 3200 vcs optional subversion_1.9.3-1.dsc a92bcfaec4e5038f82c74a7b5bbd2f46 10600934 vcs optional subversion_1.9.3.orig.tar.gz 39034914bf5b9523077f4efe026fb647 2420957 vcs optional subversion_1.9.3-1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJWcMjgXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5MUJGQkY0RDY5NTZCRDVERjdCNzJEMjNE RkU2OTFBRTMzMUJBM0RCAAoJEN/mka4zG6Pbt+QQAKFVHYtvYTmJK/iDhN2GKxSI WFie3OJFS56nApBsumi7fIQ/Zx3ePQCYMphfADSnXDff1Pe1bkrl+FWGwsYuBe0e 4/axIO/LUrxMdYMb0RJgQ4kYJlROyqOG+VH8fwloNBwlIdegN6TXK/CSi4ylaS7B AAWNuEUlqKKYUTFyh7uR9Y7YTJUvamDUq8FJdGfSkGcNVswYSVR3WDBa+oP4upHP xZQEminu3BuMn3iWAQzFGN5UlEdBDzIwjPe4x0mvHBaH9Ota7LDN/fTGsGOUcn9+ fuoY4zefAL771AwsVDSOqiNmF8UuD7xHHQFPdKjDqvSXOjp099RAJ+fO4RAwGzEt SN5qEp/tFnww0W9Vmll7bmPs1kKkrRKxsejIdjivRJIiui/6SuaHWb0AIAWKBcVg vFnJ10C5tFkODdSJKG3/tjFv1iOq2uqR6gY6pWLsbki2SU5KpDPabJcDh/XaAnL1 3h/yIyJa4+pR0hvMf3ZYW1Lzg92qyFC3cobYYdo/FYSIe6MgT4k0AqUsNKyOWSwP XWs59RYCbKkCad+0pM6VK2+v4Z7jrFok0JVK7BBzt/k7r7ajJeO5Td3/jFR0wIlD uiGsGINFYtlu3IKyosreo8HB904fG2dIzZAFM2zgp9di05xWa8v9lxY+sIZQVWab c1cvbCyl9hHTwMF4/3fr =4M4u -----END PGP SIGNATURE-----
--- End Message ---
