svn commit: r1922382 - in /subversion/site/publish: ./ doap.rdf docs/release-notes/release-history.html download.html index.html news.html security/CVE-2024-46901-advisory.txt security/CVE-2024-46901-advisory.txt.asc security/index.html

[email protected]
Newsgroups gmane.comp.version-control.subversion.svn
Message-ID <[email protected]>
Author: dsahlberg
Date: Sun Dec  8 23:38:03 2024
New Revision: 1922382

URL: http://svn.apache.org/viewvc?rev=1922382&view=rev
Log:
In site/publish:

Announce 1.14.5, merge 1922381 from staging.

* doap.rdf,
  docs/release-notes/release-history.html,
  download.html,
  index.html,
  news.html: Update for the 1.14.5 release

* security/CVE-2024-46901-advisory.txt,
  staging/security/CVE-2024-46901-advisory.txt.asc: New

* staging/security/index.html: Add CVE-2024-46901


Added:
    subversion/site/publish/security/CVE-2024-46901-advisory.txt
      - copied unchanged from r1922381, subversion/site/staging/security/CVE-2024-46901-advisory.txt
    subversion/site/publish/security/CVE-2024-46901-advisory.txt.asc
      - copied unchanged from r1922381, subversion/site/staging/security/CVE-2024-46901-advisory.txt.asc
Modified:
    subversion/site/publish/   (props changed)
    subversion/site/publish/doap.rdf
    subversion/site/publish/docs/release-notes/release-history.html
    subversion/site/publish/download.html
    subversion/site/publish/index.html   (contents, props changed)
    subversion/site/publish/news.html   (contents, props changed)
    subversion/site/publish/security/index.html

Propchange: subversion/site/publish/
------------------------------------------------------------------------------
  Merged /subversion/site/staging:r1922381

Modified: subversion/site/publish/doap.rdf
URL: http://svn.apache.org/viewvc/subversion/site/publish/doap.rdf?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/doap.rdf (original)
+++ subversion/site/publish/doap.rdf Sun Dec  8 23:38:03 2024
@@ -37,8 +37,8 @@
     <release>
       <Version>
         <name>Current 1.14 LTS release</name>
-        <created>2024-10-08</created>
-        <revision>1.14.4</revision>
+        <created>2024-12-08</created>
+        <revision>1.14.5</revision>
       </Version>
     </release>
     <repository>

Modified: subversion/site/publish/docs/release-notes/release-history.html
URL: http://svn.apache.org/viewvc/subversion/site/publish/docs/release-notes/release-history.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/docs/release-notes/release-history.html (original)
+++ subversion/site/publish/docs/release-notes/release-history.html Sun Dec  8 23:38:03 2024
@@ -32,6 +32,9 @@ Subversion 2.0.</p>
 
 <ul>
   <li>
+    <b>Subversion 1.14.5</b> (Sunday, 8 December 2024): Bugfix/security release.
+  </li>
+  <li>
     <b>Subversion 1.14.4</b> (Tuesday, 8 October 2024): Bugfix/security release.
   </li>
   <li>

Modified: subversion/site/publish/download.html
URL: http://svn.apache.org/viewvc/subversion/site/publish/download.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/download.html (original)
+++ subversion/site/publish/download.html Sun Dec  8 23:38:03 2024
@@ -95,7 +95,7 @@ Other mirrors:
     title="Link to this section">&para;</a>
 </h3>
 
-<p style="font-size: 150%; text-align: center;">Apache Subversion 1.14.4 LTS</p>
+<p style="font-size: 150%; text-align: center;">Apache Subversion 1.14.5 LTS</p>
 <table class="centered">
 <tr>
   <th>File</th>
@@ -104,20 +104,20 @@ Other mirrors:
   <th>PGP Public Keys</th>
 </tr>
 <tr>
-  <td><a href="[preferred]subversion/subversion-1.14.4.tar.bz2">subversion-1.14.4.tar.bz2</a></td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.bz2.sha512">SHA-512</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.bz2.asc">PGP signatures</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS">PGP keyring</a>]</td>
+  <td><a href="[preferred]subversion/subversion-1.14.5.tar.bz2">subversion-1.14.5.tar.bz2</a></td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.bz2.sha512">SHA-512</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.bz2.asc">PGP signatures</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS">PGP keyring</a>]</td>
 </tr><tr>
-  <td><a href="[preferred]subversion/subversion-1.14.4.tar.gz">subversion-1.14.4.tar.gz</a></td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.gz.sha512">SHA-512</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.tar.gz.asc">PGP signatures</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS">PGP keyring</a>]</td>
+  <td><a href="[preferred]subversion/subversion-1.14.5.tar.gz">subversion-1.14.5.tar.gz</a></td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.gz.sha512">SHA-512</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.tar.gz.asc">PGP signatures</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS">PGP keyring</a>]</td>
 </tr><tr>
-  <td><a href="[preferred]subversion/subversion-1.14.4.zip">subversion-1.14.4.zip</a></td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.zip.sha512">SHA-512</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.zip.asc">PGP signatures</a>]</td>
-  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.4.KEYS">PGP keyring</a>]</td>
+  <td><a href="[preferred]subversion/subversion-1.14.5.zip">subversion-1.14.5.zip</a></td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.zip.sha512">SHA-512</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.zip.asc">PGP signatures</a>]</td>
+  <td>[<a href="https://www.apache.org/dist/subversion/subversion-1.14.5.KEYS">PGP keyring</a>]</td>
 </tr>
 </table>
 

Modified: subversion/site/publish/index.html
URL: http://svn.apache.org/viewvc/subversion/site/publish/index.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/index.html (original)
+++ subversion/site/publish/index.html Sun Dec  8 23:38:03 2024
@@ -70,6 +70,31 @@
 
 <!-- In general, we'll keep only the most recent 3 or 4 news items here. -->
 
+<div class="h3" id="news-20241208"> 
+<h3>2024-12-08 &mdash; Apache Subversion 1.14.5 Released
+ <a class="sectionlink" href="#news-20241208"
+ title="Link to this section">&para;</a> 
+</h3> 
+ 
+<p>We are pleased to announce the release of Apache Subversion 1.14.5.</p>
+<p>
+This release contains a fix for a security issue:
+ <a href="/security/CVE-2024-46901-advisory.txt">CVE-2024-46901</a>
+</p>
+<p>
+ This is the most complete Subversion release to date, and we encourage
+ users of Subversion to upgrade as soon as reasonable.
+ Please see the
+<!-- until release announcement e-mail  <a href="https://lists.apache.org/thread/glvmq598wv71thrd9vmbm0q5w6n3124w"
+ >release announcement</a> and the -->
+ <a href="/docs/release-notes/1.14"
+ >release notes</a> for more information about this release.</p> 
+ 
+<p>To get this release from the nearest mirror, please visit our
+ <a href="/download.cgi#recommended-release">download page</a>.</p> 
+ 
+</div> <!-- #news-20241208 --> 
+
 <div class="h3" id="news-20241008"> 
 <h3>2024-10-08 &mdash; Apache Subversion 1.14.4 Released
  <a class="sectionlink" href="#news-20241008"
@@ -115,24 +140,6 @@ This release contains a fix for a securi
  
 </div> <!-- #news-20231228-1.14.3 --> 
 
-<div class="h3" id="news-20230924">
-<h3>2023-09-24 &mdash; Apache Subversion 1.10.x end of life
-  <a class="sectionlink" href="#news-20230924"
-    title="Link to this section">&para;</a>
-</h3>
-
-<p>The Subversion 1.10.x line is end of life (<abbr title="End Of Life">EOL</abbr>).
-It was released on 2018-04-13 and was supported for the last four years
-according to the LTS release life-cycle (see <a
-href="/roadmap.html#release-planning">How we plan
-releases</a>). We recommend everyone to update to the current LTS release <a
-href="/download.cgi#recommended-release">1.14.2</a> as soon as practically
-possible since we've stopped accepting bug reports against 1.10.x and will not
-make any more 1.10.x releases. The last 1.10.x release (1.10.8) was made
-on 2022-04-12 and is available to anyone who can't update to 1.14.</p>
-
-</div>  <!-- news-20230924 -->
-
 <p style="font-style: italic; text-align:
    right;">[Click <a href="/news.html">here</a> to see all News
    items.]</p>

Propchange: subversion/site/publish/index.html
------------------------------------------------------------------------------
  Merged /subversion/site/staging/index.html:r1922381

Modified: subversion/site/publish/news.html
URL: http://svn.apache.org/viewvc/subversion/site/publish/news.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/news.html (original)
+++ subversion/site/publish/news.html Sun Dec  8 23:38:03 2024
@@ -26,6 +26,31 @@
 <!-- Maybe we could insert H2's to split up the news items by  -->
 <!-- calendar year if we felt the need to do so.               -->
 
+<div class="h3" id="news-20241208"> 
+<h3>2024-12-08 &mdash; Apache Subversion 1.14.5 Released
+ <a class="sectionlink" href="#news-20241208"
+ title="Link to this section">&para;</a> 
+</h3> 
+ 
+<p>We are pleased to announce the release of Apache Subversion 1.14.5.</p>
+<p>
+This release contains a fix for a security issue:
+ <a href="/security/CVE-2024-46901-advisory.txt">CVE-2024-46901</a>
+</p>
+<p>
+ This is the most complete Subversion release to date, and we encourage
+ users of Subversion to upgrade as soon as reasonable.
+ Please see the
+<!-- until e-mail <a href="https://lists.apache.org/thread/glvmq598wv71thrd9vmbm0q5w6n3124w"
+ >release announcement</a> and the -->
+ <a href="/docs/release-notes/1.14"
+ >release notes</a> for more information about this release.</p> 
+ 
+<p>To get this release from the nearest mirror, please visit our
+ <a href="/download.cgi#recommended-release">download page</a>.</p> 
+ 
+</div> <!-- #news-20241208 --> 
+
 <div class="h3" id="news-20241008"> 
 <h3>2024-10-08 &mdash; Apache Subversion 1.14.4 Released
  <a class="sectionlink" href="#news-20241008"

Propchange: subversion/site/publish/news.html
------------------------------------------------------------------------------
  Merged /subversion/site/staging/news.html:r1922381

Modified: subversion/site/publish/security/index.html
URL: http://svn.apache.org/viewvc/subversion/site/publish/security/index.html?rev=1922382&r1=1922381&r2=1922382&view=diff
==============================================================================
--- subversion/site/publish/security/index.html (original)
+++ subversion/site/publish/security/index.html Sun Dec  8 23:38:03 2024
@@ -339,6 +339,13 @@ clients using http(s)://</td>
   <td>Subversion command line argument injection on Windows platforms</td>
 </tr>
   
+<tr>
+  <td><a href="CVE-2024-46901-advisory.txt">CVE-2024-46901-advisory.txt</a>
+  [<a href="CVE-2024-46901-advisory.txt.asc">PGP</a>]</td>
+  <td>1.0.0-1.14.4</td>
+  <td>mod_dav_svn denial-of-service via control characters in paths</td>
+</tr>
+  
 </tbody>
 </table>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.