On Tuesday, December 28, 2021 at 10:07:50 PM UTC+1 [email protected] wrote:
> tisdag 28 december 2021 kl. 16:16:09 UTC+1 skrev Stefan: > >> maybe look at this list? This has been asked before. > > > Actually, these are not the log4j vulnerabilities but new ones affecting > Apache HTTP Server. Anyway, TortoiseSVN doesn't contain Apache HTTP so it > shouldn't affect TortoiseSVN. > > It may affect the SVN server, but that question should be asked to the > server vendor/distribution. > > And not just on this list - I'm getting at least 4 emails to my private >> account every day, which is getting really, really annoying. Why can't >> people just look at this list? Or do a search on this list? >> > > I'm not sure it would help but what about putting up a news entry on the > website? We tried on subversion.apache.org and we havn't received any > questions since. At least any requests could be answered with just the link > to the news item. > Since as you mentioned this is for yet another CVE, I don't think this will work well: I can't deny all CVE's that exist on the website. I mean since when do we have to deny vulnerabilities and not acknowledge them if they affect us? Once we start listing CVE's that don't affect us on the website it will never end... -- You received this message because you are subscribed to the Google Groups "TortoiseSVN" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/tortoisesvn/cdd4ebe8-bf52-428d-856e-71c0636e03een%40googlegroups.com.
