Apache Subversion 1.9.5 发布,Subversion是一个版本控制系统,相对于的RCS、CVS,采用了分支管理系统,它的设计目标就是取代CVS。互联网上免费的版本控制服务多基于Subversion。更新内容如下:
本版本修复了一个安全问题:
CVE-2016-8734: Unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s)://
http://subversion.apache.org/security/CVE-2016-8734-advisory.txt
用户可见更新:
- 客户端 bugfixes:
-
fix accessing non-existent paths during reintegrate merge (r1766699 et al)
-
fix handling of newly secured subdirectories in working copy (r1724448)
-
info: remove trailing whitespace in --show-item=revision (issue #4660)
-
fix recording wrong revisions for tree conflicts (r1734106)
-
gpg-agent: improve discovery of gpg-agent sockets (r1766327)
-
gpg-agent: fix file descriptor leak (r1766323)
-
resolve: fix --accept=mine-full for binary files (issue #4647)
-
merge: fix possible crash (issue #4652)
-
resolve: fix possible crash (r1748514)
-
fix potential crash in Win32 crash reporter (r1663253 et al)
- 服务端 bugfixes:
-
fsfs: fix "offset too large" error during pack (issue #4657)
-
svnserve: enable hook script environments (r1769152)
-
fsfs: fix possible data reconstruction error (issue #4658)
-
fix source of spurious 'incoming edit' tree conflicts (r1760570)
-
fsfs: improve caching for large directories (r1721285)
-
fsfs: fix crash when encountering all-zero checksums (r1759686)
-
fsfs: fix potential source of repository corruptions (r1756266)
-
mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
(issue #3084)
-
mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
-
fsfs: fix unexpected "database is locked" errors (r1741096 et al)
-
fsfs: fix opening old repositories without db/format files (r1720015)
更多内容请看:发行说明