Re: svn commit: r1921180 - in /subversion/tags/1.14.4: ./ subversion/include/private/ subversion/libsvn_subr/ subversion/svn/ subversion/svnadmin/ subversion/svnbench/ subversion/svndumpfilter/ subver

2024-10-08 Thread Stefan Sperling
On Tue, Oct 08, 2024 at 11:41:53AM +0200, Evgeny Kotkov wrote: > Stefan Sperling writes: > > > tagging Subversion 1.14.4 > > > > Equivalent to 1.14.x@1920901 with the patch for CVE-2024-45720 applied. > It looks like the tag was created without the updates to `svn_version.h`, > unless I am missi

Re: svn commit: r1921180 - in /subversion/tags/1.14.4: ./ subversion/include/private/ subversion/libsvn_subr/ subversion/svn/ subversion/svnadmin/ subversion/svnbench/ subversion/svndumpfilter/ subver

2024-10-08 Thread Evgeny Kotkov via dev
Stefan Sperling writes: > tagging Subversion 1.14.4 > > Equivalent to 1.14.x@1920901 with the patch for CVE-2024-45720 applied. > > Added: > subversion/tags/1.14.4/ (props changed) > - copied from r1920901, subversion/branches/1.14.x/ > Modified: > subversion/tags/1.14.4/CHANGES >

[SECURITY][ANNOUNCE] Apache Subversion 1.14.4 released

2024-10-08 Thread Stefan Sperling
I am happy to announce the release of Apache Subversion 1.14.4. This is a stable bugfix and security release of the Apache Subversion open source version control system. Among regular bug fixes, this release fixes CVE-2024-45720: Subversion command line argument injection on Windows platforms