Re: Apache Subversion 1.7.13 released
Ben Reser <[email protected]> Fri, 30 Aug 2013 08:59:27 -0700
| Newsgroups | gmane.comp.version-control.subversion.announce,gmane.comp.apache.incubator.bigtop.devel |
|---|---|
| Message-ID | <5220C15F.5000001__28020.1968890198$1377878485$gmane$org@apache.org> |
On 8/30/13 8:34 AM, Ben Reser wrote:
> I'm happy to announce the release of Apache Subversion 1.7.13.
>
> Please note that Subversion 1.7.13 is the next release after Subversion 1.7.11.
> The 1.7.12 release was not published publicly, due to issues found
> during testing.
>
> Please choose the mirror closest to you by visiting:
>
> http://subversion.apache.org/download/#recommended-release
>
> This release addresses one security issue:
> CVE-2013-4246: svnserve: symlink attack against pid file
>
> More information on this vulnerability, including the relevant
> advisory and potential attack vectors and workarounds, can be found
> on the Subversion security website:
> http://subversion.apache.org/security/
CVE-2013-4246 was incorrectly used in this announcement. The correct list of
security issues follows:
CVE-2013-4277: svnserve: symlink attack against pid file