Summary: | dev-util/subversion 1.0.6 released. SECURITY FIX | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Tom Hosiawa <tomek32> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | major | CC: | condordes, pauldv, ppc, stuart |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | C4 [glsa] jaervosz | ||
Package list: | Runtime testing required: | --- |
Description
Tom Hosiawa
2004-07-20 09:45:07 UTC
Paul will look into this and provide an ebuild? Please also remove old vulnerable and uneeded versions. Stuart -- mind tending to this while Paul is enjoying his vacation? Okay, I'm looking at it now. Right, dev-util/subversion-1.0.6 and net-misc/neon-0.24.7 are now in the tree, and marked as ~arch. I'll get started on testing on x86. If you can start getting the other arches testing and marking stable, that'll be great. Best regards, Stu Arch maintainers please test subversion-1.0.6 and mark stable. Target keywords: alpha amd64 hppa ~ppc sparc x86 Also remember to mark net-misc/neon-0.24.7 stable as subversion depends on it. Stable on x86. subversion 1.0.6, now with sparc goodness. coming soon to an rsync mirror near you! Warning: may eat excessive amounts of disk space and RAM. Your data is at risk if you do not keep up repayments on the bribe money required for the db not to corrupt itself. XML has been known to cause cancer in lab rats. Stable on alpha. ppc,amd64,hppa: please mark neon-0.24.7 stable amd64,hppa: please mark subversion-1.0.6 stable I can draft this, hopefully sometime this weekend. stable on amd64 Stable on hppa. Since subversion is ~ on the PPC platform, I think it's not necessary to wait for ppc to mark neon-0.24.7 stable to release the GLSA. People running suversion as ~ on ppc will probably know they need to have neon ~ too to resolve the dependency. ppc : feel free to mark neon-0.24.7 stable if you disagree. GLSA 200407-20. |