Format: 1.8 Date: Wed, 13 Aug 2014 10:28:59 -0400 Source: subversion Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion python-subversion-dbg subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8 Architecture: powerpc powerpc_translations Version: 1.8.8-1ubuntu3.1 Distribution: trusty Urgency: medium Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: libapache2-mod-svn - Apache Subversion server modules for Apache httpd libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package) libsvn-dev - Development files for Apache Subversion libraries libsvn-doc - Developer documentation for libsvn libsvn-java - Java bindings for Apache Subversion libsvn-perl - Perl bindings for Apache Subversion libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package) libsvn1 - Shared libraries used by Apache Subversion python-subversion - Python bindings for Apache Subversion python-subversion-dbg - Python bindings for Subversion (debug extension) ruby-svn - Ruby bindings for Apache Subversion subversion - Advanced version control system subversion-dbg - Debug symbols for Apache Subversion subversion-tools - Assorted tools related to Apache Subversion Changes: subversion (1.8.8-1ubuntu3.1) trusty-security; urgency=medium . * SECURITY UPDATE: incorrect ssl cert validation - debian/patches/CVE-2014-3522.patch: properly validate hostnames in subversion/include/private/svn_cert.h, subversion/libsvn_ra_serf/util.c, subversion/libsvn_subr/dirent_uri.c, added tests to subversion/tests/libsvn_subr/dirent_uri-test.c. - CVE-2014-3522 * SECURITY UPDATE: md5 collision authentication leak - debian/patches/CVE-2014-3528.patch: check if realm matches in subversion/libsvn_subr/config_auth.c. - CVE-2014-3528 Checksums-Sha1: 485afe4396d9ace2220d537e37abefa8814a3fb7 255594 subversion_1.8.8-1ubuntu3.1_powerpc.deb 7e30ec4fd0d90150544b9ff980bc1fabff150333 7704220 subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb 1ba7e8949523be0062b0d0f37b1edf670a827a2c 793886 libsvn1_1.8.8-1ubuntu3.1_powerpc.deb 5e9b00113ffa7048aa03a0de9ab09ed774dc89d5 1075090 libsvn-dev_1.8.8-1ubuntu3.1_powerpc.deb 26867ad7e4c3bd6a85f6f602344d422b7f3590a8 73146 libapache2-mod-svn_1.8.8-1ubuntu3.1_powerpc.deb 299bfe4c8736d31ea12a3fd0428b7b2d4526ce46 400816 python-subversion_1.8.8-1ubuntu3.1_powerpc.deb 9ff8869c6ecf8890514d87d208bcda05af652ca9 1498732 python-subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb f34cda43cf0f0e0149360d6bb0b3fb8fcbbb28ad 343254 libsvn-java_1.8.8-1ubuntu3.1_powerpc.deb 1318269e0c3f82569c1187db954bb482f83b996c 630860 libsvn-perl_1.8.8-1ubuntu3.1_powerpc.deb d1cc497ecb0fd6c3893b1eac439804bdd1ca0f4c 322916 ruby-svn_1.8.8-1ubuntu3.1_powerpc.deb fb5eb2e895f3b4ebad2ed9d2595ed5d37dd997d3 2496525 subversion_1.8.8-1ubuntu3.1_powerpc_translations.tar.gz Checksums-Sha256: 350dd0060e49598320a4a4b82f8b322f0dd20ddda7df60571de13814d5b444f8 255594 subversion_1.8.8-1ubuntu3.1_powerpc.deb 76c9bb5ddf0971e777178d936592ee0082cc5b72de393604ade72f2a78f78f28 7704220 subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb 893517bb41fbc93a024ef9405a5109454e73b8a19dcf40e47e48a5179f09039b 793886 libsvn1_1.8.8-1ubuntu3.1_powerpc.deb 16054355f6fdd40ce0a7d71503b5f4fe28f9ae0484d9af417edff70c19d453df 1075090 libsvn-dev_1.8.8-1ubuntu3.1_powerpc.deb 4dae29929241dfbc4e38f4809f7f16b9592cd12479dc631770f93f335a7ace5c 73146 libapache2-mod-svn_1.8.8-1ubuntu3.1_powerpc.deb d30942b416a90cffbf7378ad470a7df3fb125e2125b184d7dfa4c9471519463b 400816 python-subversion_1.8.8-1ubuntu3.1_powerpc.deb 4c2bdf9287d41e2a9f33e45ddf7ba9ccb8ab25f74b6a985dafef96877bad6844 1498732 python-subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb 30833d349805fcebb4cdae2bafa6894c7397541bbba16bff4e18f44af16e43de 343254 libsvn-java_1.8.8-1ubuntu3.1_powerpc.deb 08f772daa7abfcef13f1b2b8f1cef4f637f7e293567c4e278544bc44a2ac3f2c 630860 libsvn-perl_1.8.8-1ubuntu3.1_powerpc.deb 5fcb46940a978fbee031b732525cefc8bd104ca4a737f75c7e7bca867be97b2d 322916 ruby-svn_1.8.8-1ubuntu3.1_powerpc.deb cf51791dd262c161cf04ed12aa207b2a7b860dfc350c5e4c54149ce95d6ced7f 2496525 subversion_1.8.8-1ubuntu3.1_powerpc_translations.tar.gz Files: b777afc16d78910166b42b23b3324553 255594 vcs optional subversion_1.8.8-1ubuntu3.1_powerpc.deb 0134f05fa801289f4a8d30f98f574e7e 7704220 debug extra subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb f3ac246c3b4aae55a02a4187a71fa1dc 793886 libs optional libsvn1_1.8.8-1ubuntu3.1_powerpc.deb d82bd81c0d0b7b21accc221efc789fdc 1075090 libdevel extra libsvn-dev_1.8.8-1ubuntu3.1_powerpc.deb 43748568412b130d3129b1618061b908 73146 httpd optional libapache2-mod-svn_1.8.8-1ubuntu3.1_powerpc.deb 249016a1e6b6f6a7d4c1c7c55746db9e 400816 python optional python-subversion_1.8.8-1ubuntu3.1_powerpc.deb 85766b8d4366177899b0075e2a9b272c 1498732 python extra python-subversion-dbg_1.8.8-1ubuntu3.1_powerpc.deb 52c1f9362ceadf729fa1bd0f0c1c1a8f 343254 java optional libsvn-java_1.8.8-1ubuntu3.1_powerpc.deb 77a2ace510c8a471dc01129d360932a8 630860 perl optional libsvn-perl_1.8.8-1ubuntu3.1_powerpc.deb 4d1a335dd9f162eb171dbdac91ed1264 322916 ruby optional ruby-svn_1.8.8-1ubuntu3.1_powerpc.deb 3df27fd3b60534318bbf6dab9f064a32 2496525 raw-translations - subversion_1.8.8-1ubuntu3.1_powerpc_translations.tar.gz Original-Maintainer: Peter Samuelson