Return-Path: X-Original-To: apmail-subversion-announce-archive@minotaur.apache.org Delivered-To: apmail-subversion-announce-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 10104F3DF for ; Fri, 31 May 2013 21:01:05 +0000 (UTC) Received: (qmail 51466 invoked by uid 500); 31 May 2013 21:01:03 -0000 Delivered-To: apmail-subversion-announce-archive@subversion.apache.org Received: (qmail 51419 invoked by uid 500); 31 May 2013 21:01:02 -0000 Mailing-List: contact announce-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list announce@subversion.apache.org Delivered-To: moderator for announce@subversion.apache.org Received: (qmail 81392 invoked by uid 99); 31 May 2013 20:36:33 -0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_HELO_PASS X-Spam-Check-By: apache.org Received-SPF: error (athena.apache.org: local policy) X-Virus-Scanned: Debian amavisd-new at fornix.brain.org X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=qtQfeI4IH4mhsW3dfbQ2Truw81D1mrx1D7rTfE5svjQ=; b=JQEOMiUBV0K6xB0gnXP3xGD264zLXv4614amhP6/BeL4UIMvdmy5pQy+4FbcEPm5Cv g1BB8LYbyL3lA999x280oQ3XexxE40sKPMV1E8h4Ln+Mbv5AQM6r2FWXJ8LyNMy0iCOF 5k1CucXZjNQizVj4SxeYnYDEAPNzhNEwm6uO1WhbXcaxzTa7xRYxKKqwH0iHug4mCJot w5KdrWqx2GwhFIYIyaswhJifThau0o8xPGyQohCFKjXzI6VdBcp2nflUfRIqNA/V+L/P 4qVJW8qis+SQjfpwASU4doojUhFAyJtus60U5Pot9ZVeaq8pbH/5faIHC2ncu+/KXyAj wFxQ== MIME-Version: 1.0 X-Received: by 10.60.136.234 with SMTP id qd10mr6734487oeb.15.1370032540955; Fri, 31 May 2013 13:35:40 -0700 (PDT) Date: Fri, 31 May 2013 13:35:40 -0700 Message-ID: Subject: Apache Subversion 1.7.10 released From: Ben Reser To: announce@subversion.apache.org, announce@apache.org, users@subversion.apache.org, Subversion Development Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org I'm happy to announce the release of Apache Subversion 1.7.10. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download/#recommended-release This release addresses three security issues: CVE-2013-1968: fsfs repository corruption caused by newline characters in filenames CVE-2013-2088: contrib hook-scripts can allow arbitrary code execution CVE-2013-2112: svnserve remotely triggerable DoS. More information on these vulnerabilities, including the relevent advisories and potential attack vectors and workarounds, can be found on the Subversion security website: http://subversion.apache.org/security/ The SHA1 checksums are: 3c7b9e7e1842d54f658477db325d5859f26a40a5 subversion-1.7.10.tar.gz e19bfee30a7b88c238c554558ed0074b2c03218d subversion-1.7.10.zip a4f3de0a13b034b0eab4d35512c6c91a4abcf4f5 subversion-1.7.10.tar.bz2 PGP Signatures are available at: http://www.apache.org/dist/subversion/subversion-1.7.10.tar.bz2.asc http://www.apache.org/dist/subversion/subversion-1.7.10.tar.gz.asc http://www.apache.org/dist/subversion/subversion-1.7.10.zip.asc For this release, the following people have provided PGP signatures: Ben Reser [4096R/16A0DE01] with fingerprint: 19BB CAEF 7B19 B280 A0E2 175E 62D4 8FAD 16A0 DE01 C. Michael Pilato [4096R/FE681333] with fingerprint: 753B 2F9D F717 FA23 A43E E7C3 F5E0 F001 FE68 1333 Ivan Zhakov [4096R/F6AD8147] with fingerprint: 4829 8F0F E47F 4B8A 43FD 6525 919F 6F61 F6AD 8147 Julian Foad [4096R/4EECC493] with fingerprint: 6011 63CF 9D49 9FD7 18CF 582D 1FB0 64B8 4EEC C493 Paul T. Burba [4096R/56F3D7BC] with fingerprint: 1A0F E7C6 B3C5 F8D4 D0C4 A20B 64DD C071 56F3 D7BC Philip Martin [2048R/ED1A599C] with fingerprint: A844 790F B574 3606 EE95 9207 76D7 88E1 ED1A 599C Stefan Sperling [2048R/9A59B973] with fingerprint: 8BC4 DAE0 C5A4 D65F 4044 0107 4F7D BAA9 9A59 B973 Release notes for the 1.7.x release series may be found at: http://subversion.apache.org/docs/release-notes/1.7.html You can find the list of changes between 1.7.10 and earlier versions at: http://svn.apache.org/repos/asf/subversion/tags/1.7.10/CHANGES Questions, comments, and bug reports to users@subversion.apache.org. Thanks, - The Subversion Team