[ANNOUNCE][SECURITY] Apache Subversion 1.9.4 released

2016-04-28 Thread Evgeny Kotkov
I'm happy to announce the release of Apache Subversion 1.9.4. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download/#recommended-release This release fixes two security issues: CVE-2016-2167: svnserve/sasl may authenticate users using the wrong re

[ANNOUNCE][SECURITY] Apache Subversion 1.8.16 released

2016-04-28 Thread Evgeny Kotkov
I'm happy to announce the release of Apache Subversion 1.8.16. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download/#supported-releases This release fixes two security issues: CVE-2016-2167: svnserve/sasl may authenticate users using the wrong re

Re: pgp keys for signing releases

2016-04-28 Thread Stefan Hett
Hi, Not entirely sure, but I think you should still publish your pgp key to the major key stores. Once you put your fingerprint on id.apache.org, it knows how to fetch your key from there. Yep did that and it seems to have worked. So I take it I'm all fine here. :-) *From: *Stefan