请根据需要下载 

http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.gz
http://subversion.tigris.org/downloads/subversion-1.4.5.zip
http://subversion.tigris.org/downloads/subversion-deps-1.4.5.tar.bz2
http://subversion.tigris.org/downloads/subversion-deps-1.4.5.tar.gz
http://subversion.tigris.org/downloads/subversion-deps-1.4.5.zip

THIS IS A SECURITY RELEASE, addressing the issue described at:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-3846

The CVE page may not be public yet when you read this, but will be soon. The full text of the advisory is included at the end of this email.

This security issue affects Microsoft Windows clients only, and is considered a medium-level security problem, as write access to the repository is required to make use of the exploit. Subversion 1.4.5 differs from 1.4.4 only in the fix for this issue. Upgrading to Subversion 1.4.5 is therefore strongly recommended for Microsoft Windows client installations.

For full details of the security advisory, please refer to this announcement on the mailing list:

http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=69413

The MD5 checksums are:

   4c333a5fe827568c67d195cda7a5e154  subversion-1.4.5.tar.bz2    204a9577402db94cd52cc82bbb8e898e  subversion-1.4.5.tar.bz2.asc    3caf1d93e13ed09d76c42eff0f52dfaf  subversion-1.4.5.tar.gz    3bff2a953891d6d21b5937532a833dea  subversion-1.4.5.tar.gz.asc    ddbdd57d196e8f83695a912f48389653  subversion-1.4.5.zip    d5e0a186f8a5143a9c7f6291f432fecc  subversion-1.4.5.zip.asc    67cacdca12d4f648bbb005813d17f524  subversion-deps-1.4.5.tar.bz2    e02f66d50de7692328e1c336cc34ed31  subversion-deps-1.4.5.tar.bz2.asc    ac2ac4d8e50e229eb4cc37a6901b92c2  subversion-deps-1.4.5.tar.gz    9c69403da71f791b0b5f59ade9e36cb3  subversion-deps-1.4.5.tar.gz.asc    8eb5d7057b93799ace31fcf4508cca3a  subversion-deps-1.4.5.zip    e7d6309bba1c2c42903b236859b275ae  subversion-deps-1.4.5.zip.asc

The SHA1 checksums are:

   acc80381cb670736ad626fee1eb04f36ba7e5fc8  subversion-1.4.5.tar.bz2    3a1c58ce129a3b8f6ecd0c3849712a3d4caf5284  subversion-1.4.5.tar.bz2.asc    526e7fb92aae0e5b54f51d2f48818526f46f4bc0  subversion-1.4.5.tar.gz    5d6cd8d7276e3f4bf94b24437acce75a921077ab  subversion-1.4.5.tar.gz.asc    0d17de71f336e8eddadc7aaecb02102d0d911400  subversion-1.4.5.zip    290ce5763dbf8c93887884aa3d5e83b594a92543  subversion-1.4.5.zip.asc    646051d4c447d6c6e99f8f4bfdfc096712f0912a  subversion-deps-1.4.5.tar.bz2    7fe4af45ff9b7d953ebd31260d8c5e29412afde6  subversion-deps-1.4.5.tar.bz2.asc    aef7bb1cd394fb59f354769161aef90c06ff1f02  subversion-deps-1.4.5.tar.gz    6ff9711672e0f85e96f582becd53356ab5c858c1  subversion-deps-1.4.5.tar.gz.asc    bf3c5a1d2d23efd9701c4ca22b1155fac5344ddd  subversion-deps-1.4.5.zip    55987a8a09debed21a62743745521c6963a8caf1  subversion-deps-1.4.5.zip.asc

PGP Signatures are available at:

http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc
http://subversion.tigris.org/downloads/subversion-1.4.5.tar.bz2.asc

For this release, the following people have provided PGP signatures:

  C. Michael Pilato [1024D/1706FD6E] with fingerprint:    20BF 14DC F02F 2730 7EA4  C7BB A241 06A9 1706 FD6E   Paul T. Burba [1024D/53FCDC55] with fingerprint:    E630 CF54 792C F913 B13C  32C5 D916 8930 53FC DC55   Hyrum K. Wright [1024D/4E24517C] with fingerprint:    3324 80DA 0F8C A37D AEE6  D084 0B03 AE6E 4E24 517C   David Anderson [1024D/EE506461] with fingerprint:    21DF EE01 0E07 B970 CBD1  F75A 09BC 35E3 EE50 6461

The Windows binary packages are also available in the download area on the Subversion website.

Release notes for the 1.4.x release series may be found at:

http://subversion.tigris.org/svn_1.4_releasenotes.html

You can find list of changes between 1.4.5 and earlier versions at:

http://svn.collab.net/repos/svn/tags/1.4.5/CHANGES

Questions, comments, and bug reports to users@subversion.tigris.org.

Thanks, - The Subversion Team

Trackback This Post | Subscribe to the comments through RSS Feed