[ANNOUNCE][SECURITY] Apache Subversion 1.9.4 released

2016-04-28 Thread Evgeny Kotkov
I'm happy to announce the release of Apache Subversion 1.9.4. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download/#recommended-release This release fixes two security issues: CVE-2016-2167: svnserve/sasl may authenticate users using the wrong re

[ANNOUNCE][SECURITY] Apache Subversion 1.8.16 released

2016-04-28 Thread Evgeny Kotkov
I'm happy to announce the release of Apache Subversion 1.8.16. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download/#supported-releases This release fixes two security issues: CVE-2016-2167: svnserve/sasl may authenticate users using the wrong re

RE: 1.9.4 fix

2016-04-28 Thread Terry Dooher
From: Johan Corveleyn [mailto:jcor...@gmail.com] Sent: 28 April 2016 08:36 > Op 27-apr.-2016 16:17 schreef "Terry Dooher" : > > > > I’m on 1.9.2 now. Should I wait for 1.9.4 to do this? > > > I would use at least 1.9.3 for the process running 'svnadmin dump', because > of this fix in 1.9.3: >

Re: 1.9.4 fix

2016-04-28 Thread Johan Corveleyn
Op 27-apr.-2016 16:17 schreef "Terry Dooher" : > > Hi all, > > > > I’m in the process of dump/loading our repositories to take advantage of FSFS format 7. Looking at the change list for 1.9.4 (out tomorrow), it shows: > >fsfs: fix a rare source of incomplete dump files and reports (r1717876