Change log for subversion package in Debian

subversion (1.8.9-2) unstable; urgency=medium


  * Use Perl's $Config{vendorarch} to determine where libsvn-perl's files were
    installed.  This enables being built against a Multi-Archified Perl.
    (Closes: #752816)

 -- James McCoy <email address hidden>  Wed, 16 Jul 2014 08:46:24 -0400

subversion (1.8.9-1) unstable; urgency=medium


  * New upstream release
  * Merge changes from Ubuntu:
    - Add DEB-8 test for Apache functionality
    - debian/rules: Create pot file on build.
    - debian/rules: Ensure the doxygen output directory exists
    - Move svn2cl to subversion-tools' Suggests on Ubuntu.

 -- James McCoy <email address hidden>  Tue, 20 May 2014 22:45:32 -0400

subversion (1.6.17dfsg-4+deb7u6) wheezy; urgency=medium


  * Fix “undefined symbol: dav_svn__new_error” regression in previous upload.
    (Closes: #741314)

 -- James McCoy <email address hidden>  Tue, 11 Mar 2014 21:06:58 -0400

subversion (1.8.8-2) unstable; urgency=medium


  * Fix builds with ruby 2.x.  (Closes: #739772)

 -- James McCoy <email address hidden>  Sun, 30 Mar 2014 22:46:58 -0400

subversion (1.8.8-1) unstable; urgency=medium


  * New upstream release.  Refresh patches.
    - Remove backported patches sqlite_3.8.x_workaround & swig-pl_build_fix
    - Fix integer overflows with 32-bit svnserv, which could cause an infinite
      loop (Closes: #738840) or inaccurate statistics (Closes: #738841)
    - Work around SQLite not honoring umask when creating rep-cache.db.
      (Closes: #735446)
    - Includes security fix:
      + CVE-2014-0032: mod_dav_svn crash when handling certain requests with
        SVNListParentPath on  (Closes: #737815)
  * Add a subversion-dbg package.  (Closes: #508147)
  * Bump libdb5.1-dev → libdb5.3-dev  (Closes: #738650)

 -- James McCoy <email address hidden>  Thu, 20 Feb 2014 20:38:10 -0500

subversion (1.8.5-2) unstable; urgency=medium


  * rules: Move comment out of multi-line variable definition so configure is
    run with the correct flags.  (Closes: #735609)
  * control: Remove libsvn-ruby1.8 Provides from ruby-svn.
  * Add patches/swig-pl_build_fix, from upstream, to fix a build failure when
    configure is run with --enable-sqlite-compatibility.

 -- James McCoy <email address hidden>  Fri, 17 Jan 2014 20:05:25 -0500

subversion (1.8.5-1) unstable; urgency=low


  [ Peter Samuelson ]
  * New upstream release.  (Closes: #725787) Rediff patches:
    - Remove apr-abi1 (applied upstream), rename apr-abi2 to apr-abi
    - Remove loosen-sqlite-version-check (shouldn't be needed)
    - Remove java-osgi-metadata (applied upstream)
    - svnmucc prompts for a changelog if none is provided. (Closes: #507430)
    - Remove fix-bdb-version-detection, upstream uses "apu-config --dbm-libs"
    - Remove ruby-test-wc (applied upstream)
    - Fix “svn diff -r N file” when file has svn:mime-type set.
      (Closes: #734163)
    - Support specifying an encoding for mod_dav_svn's environment in which
      hooks are run.  (Closes: #601544)
    - Fix ordering of “svnadmin dump” paths with certain APR versions.
      (Closes: #687291)
    - Provide a better error message when authentication fails with an
      svn+ssh:// URL.  (Closes: #273874)
    - Updated Polish translations.  (Closes: #690815)

  [ James McCoy ]
  * Remove all traces of libneon, replaced by libserf.
  * patches/sqlite_3.8.x_workaround: Upstream fix for wc-queries-test test
    failurse.
  * Run configure with --with-apache-libexecdir, which allows removing part of
    patches/rpath.
  * Re-enable auth-test as upstream has fixed the problem of picking up
    libraries from the environment rather than the build tree.
    (Closes: #654172)
  * Point LD_LIBRARY_PATH at the built auth libraries when running the svn
    command during the build.  (Closes: #678224)
  * Add a NEWS entry describing how to configure mod_dav_svn to understand
    UTF-8.  (Closes: #566148)
  * Remove ancient transitional package, libsvn-ruby.
  * Enable compatibility with Sqlite3 versions back to Wheezy.
  * Enable hardening flags.  (Closes: #734918)
  * patches/build-fixes: Enable verbose build logs.
  * Build against the default ruby version.  (Closes: #722393)

 -- James McCoy <email address hidden>  Sun, 12 Jan 2014 19:48:33 -0500

subversion (1.7.14-1) unstable; urgency=medium


  * New upstream version.
    - mod_dav_svn: Prevent crashes with some 3rd party modules.  (Closes:
      #728352)
    - Includes security fix:
      + CVE-2013-4505: mod_dontdothat restrictions bypassed by relative
        requests  (Closes: #730541)
      + CVE-2013-4558: mod_dav_svn assertion when SVNAutoversioning is
        enabled.
  * Bump compat to debhelper 8
  * Use shlibs.local to handle intrapackage dependencies on private libraries.
  * rules: Fix removal of libsvnjavahl-1.a/.la/.so from libsvn-dev.  (Closes:
    #711911)
  * Remove obsolete conffiles under /etc/svn2cl.  (Closes: #677990)

 -- James McCoy <email address hidden>  Fri, 27 Dec 2013 10:17:38 -0500

subversion (1.7.13-3) unstable; urgency=low


  * Remove architecture exclusions for libsvn-java.  (Closes: #710498)
  * Fix multi-arch Python include paths.  (Closes: #698443)
  * Add strict Depends on libsvn1 to libapach2-mod-svn since the latter
    leverages some internal APIs and therefore must be upgraded in lock step.
    (Closes: #705464)
  * Standards-Version 3.9.5 (no change needed).
  * Add strict minimum Depends on libsqlite3-0 to work around lack of build
    time dependency information.  (Closes: #721878)

 -- James McCoy <email address hidden>  Sat, 16 Nov 2013 11:33:37 -0500

subversion (1.6.12dfsg-7) squeeze-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Add CVE-2013-1968.patch patch.
    CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline
    characters in filenames. (Closes: #711033)
  * Add CVE-2013-2112.patch patch.
    CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033)

 -- Salvatore Bonaccorso <email address hidden>  Thu, 06 Jun 2013 09:06:48 +0200

subversion (1.7.13-2) unstable; urgency=low


  * Remove unnecessary libapache2-svn.prem.  (Closes: #726717)

 -- James McCoy <email address hidden>  Fri, 18 Oct 2013 23:23:06 -0400

subversion (1.7.13-1) unstable; urgency=low


  [ Peter Samuelson ]
  * New upstream version.  (Closes: #719476)
    - patches/CVE-2013-1968.patch, patches/CVE-2013-2112.patch: remove,
      obsoleted
    - Includes security fixes:
      + CVE-2013-4131: Remotely triggered crash in mod_dav_svn (Closes:
        #717794)
      + CVE-2013-4277: Local privilege escalation vulnerability via symlink
        attack (Closes: #721542)

  [ James McCoy ]
  * Add myself to uploaders.
  * Acknowledge NMUs.
  * Canonicalize the Vcs-* URLs.  Thanks, Lintian.
  * Remove Guilherme de S. Pastore from Uploaders. (Closes: #698270)
  * Add Breaks: svnmailer (<< 1.0.9) to python-subversion.  (Closes: #726491)
  * Remove obsolete conffile /etc/emacs/site-start.d/50psvn.el.  (Closes:
    #705033)

 -- James McCoy <email address hidden>  Wed, 16 Oct 2013 20:53:11 -0400

subversion (1.6.17dfsg-4+deb7u4) wheezy; urgency=low


  * Non-maintainer upload.
  * patches/python-swig205: Backport upstream patch to fix Python bindings
    when built against swig 2.0.5+.  (Closes: #683188)
  * Remove patches/chunksize-integer.patch

 -- James McCoy <email address hidden>  Wed, 02 Oct 2013 21:40:37 -0400

subversion (1.7.9-1+nmu6) unstable; urgency=low


  * Add Breaks/Replaces: libapache2-svn to libapach2-mod-svn.

 -- James McCoy <email address hidden>  Tue, 01 Oct 2013 00:28:55 -0400

subversion (1.7.9-1+nmu4) unstable; urgency=low


  * Non-maintainer upload.
  * patches/ruby-test-wc: New patch from upstream to fix a stray case of a
    testsuite failure due to APR 1.4 hash randomization.  Thanks to
    Michael Gilbert for digging this up.  (Closes: #705364)
  * Use --disable-neon-version-check to build libsvn_ra_neon against libneon27
    0.30.0.
  * Add handling of directory to symlink conversions for
    /usr/share/doc/libsvn-{dev,java,ruby,ruby1.8}.  (Closes: #690155)

 -- James McCoy <email address hidden>  Mon, 02 Sep 2013 21:11:08 -0400

subversion (1.6.17dfsg-4.1) jessie; urgency=low


  * Non-maintainer upload.
  * Stop building libapache2-svn (closes: #712004, #666794).

 -- Julien Cristau <email address hidden>  Tue, 16 Jul 2013 19:51:34 +0200

subversion (1.7.9-1+nmu3) unstable; urgency=high


  * Non-maintainer upload.
  * Disable libapache2-svn build (closes: #712004, #666794)

 -- Julien Cristau <email address hidden>  Tue, 09 Jul 2013 19:56:11 +0200

subversion (1.6.17dfsg-4+deb7u3) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Add CVE-2013-1968.patch patch.
    CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline
    characters in filenames. (Closes: #711033)
  * Add CVE-2013-2112.patch patch.
    CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 05 Jun 2013 23:12:33 +0200

subversion (1.7.9-1+nmu2) unstable; urgency=high


  * Non-maintainer upload.
  * Add CVE-2013-1968.patch patch.
    CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline
    characters in filenames. (Closes: #711033)
  * Add CVE-2013-2112.patch patch.
    CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033)

 -- Salvatore Bonaccorso <email address hidden>  Thu, 06 Jun 2013 13:14:52 +0200

subversion (1.6.17dfsg-4+deb7u2) wheezy; urgency=low


  * Non-maintainer upload.
  * Include following security fixes (Closes: #704940):
    - CVE-2013-1845: Remotely triggered memory exhaustion in mod_dav_svn
    - CVE-2013-1846: Remotely triggered crash in mod_dav_svn
    - CVE-2013-1847: Remotely triggered crash in mod_dav_svn
    - CVE-2013-1849: Remotely triggered crash in mod_dav_svn
  * Convert SVN_STREAM_CHUNK_SIZE to an integer in svn/core.py
    (Closes: #683188).

 -- Thomas Preud'homme <email address hidden>  Tue, 16 Apr 2013 14:36:14 +0200

subversion (1.7.9-1+nmu1) unstable; urgency=medium


  * Non-maintainer upload.
  * Convert SVN_STREAM_CHUNK_SIZE to an integer in svn/core.py (closes: #683188).

 -- Michael Gilbert <email address hidden>  Fri, 12 Apr 2013 00:58:01 +0000

subversion (1.7.9-1) unstable; urgency=medium


  * New upstream version.  Some DOS fixes in mod_dav_svn:
    - CVE-2013-1845: mod_dav_svn excessive memory usage from property changes
    - CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs
    - CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant
      URLs
    - CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity
      URLs
    - CVE-2013-1884: mod_dav_svn crashes on out of range limit in log REPORT
      request
  * patches/python-swig205, patches/g++47: Remove as obsolete.
  * Don't make python-subversion 'Depends: subversion'.  It is quite
    usable on its own.
  * Move libsvn1 to section 'libs'.  (Ref: #700145)
  * Update watch file.  (Closes: #672157)

 -- Peter Samuelson <email address hidden>  Sat, 06 Apr 2013 16:16:37 -0500

subversion (1.6.17dfsg-4+deb7u1) wheezy; urgency=low


  * Non-maintainer upload.
  * No-change rebuild against swig 2.0.7 (closes: #683188)

 -- Julien Cristau <email address hidden>  Fri, 22 Mar 2013 16:29:41 +0100

subversion (1.7.5-1) unstable; urgency=low


  [ Peter Samuelson ]
  * New upstream version.
    - Refresh patches; remove obsolete no-dbus-spam, kwallet-wid,
      perl-warning, perl-compiler-flags, po, swig2-compat,
      disable-failing-tests, python-exception-syntax
    - Split patches/apr-abi into apr-abi1 (to be submitted) and
      apr-abi2 (Debian-specific).
    - Disable patches/ruby-test-info ... for now.
    - Requires serf 1.0 or higher.
  * Upstream no longer ships contrib in tarball:
    - Remove contrib-license-audit
    - subversion-tools now Recommends: svn2cl
    - Ship svn-clean, svn-fast-backup, svn_apply_autoprops,
      svn_load_dirs, commit-email.pl in debian/contrib
    - Don't ship svnmerge.py, it has outlived its usefulness
    - Delete patches/{svn2cl-*,svn-clean-ignore,commit-email}
    - Overhaul debian/copyright
  * rules: Specify that we want our own libtool.  Otherwise it finds the
    one from /usr/share/apr-1.0/build, which doesn't support C++.
  * patches/entropy: Remove as obsolete.  It was a workaround for apr
    using /dev/random, but apr switched to /dev/urandom in 1.3.
  * Move emacs plugins from subversion to subversion-tools.
  * patches/java-osgi-metadata: Add OSGi metadata to the libsvn-java
    jarfile.  Thanks Jakub Adam.  (Closes: #644438)
  * Switch from python-support to dh_python2.
  * patches/python-swig205: New patch: Adjust for swig 2.0.5+ handling of
    Python ints vs. longs.

  [ Michael Diers ]
  * More contrib adjustments:
    - Provide debian/contrib/emacs from upstream VCS contrib/client-side/emacs
    - Add svn_1.6_releasenotes.html, svn_1.7_releasenotes.html
    - subversion.docs, subversion.install
    - subversion-tools.docs, subversion-tools.manpages

 -- Peter Samuelson <email address hidden>  Sat, 16 Jun 2012 23:56:38 -0500

subversion (1.6.18dfsg-1) experimental; urgency=low


  * New upstream version.
    - patches/sasl-mem-handling: delete obsolete patch.
  * Add Conflicts and Replaces: libsvn-jni.  (Closes: #675987)
  * Rename libsvn-ruby1.8 to ruby-svn, per Ruby policy.
    Leave transition package behind for wheezy.

 -- Peter Samuelson <email address hidden>  Fri, 08 Jun 2012 00:04:19 -0500

subversion (1.6.17dfsg-4) unstable; urgency=medium


  * Ack NMU, thanks Ondrej.  Urgency medium because the NMU fixes RC bugs.
    - Revert libsvn-java split.  Instead, disable multiarch for libsvn-java.
      If anyone _needs_ multiarch for Java libraries, which I doubt, we
      should come up with a way to produce deterministic jar files.
    - Reintroduce specific db dependencies, so a random binNMU can't
      change the DB version without warning.
  * Disable serf support for now, as this release won't properly work with
    serf 1.0.
  * patches/g++47: New patch to build with g++ 4.7.
  * Policy 3.9.3 (no changes).
  * Move ruby files to /usr/lib/ruby/vendor_ruby per ruby policy.

 -- Peter Samuelson <email address hidden>  Sun, 03 Jun 2012 17:54:15 -0500

subversion (1.6.17dfsg-3.1) unstable; urgency=low


  * Non-maintainer upload
  * Disable test-suite which was broken by apr 1.4.6 update (Closes: #669494)
  * Also rescue on Errno::EINVAL (Closes: #624810, #629952)
  * Split libsvn-java to libsvn-java and libsvn-jni (Closes: #670034)
  * Depend on generic libdb-dev and db-util (Closes: #621460)
  * Install java files prior to dh_install -i call
  * Declare proper relationships between -jni and -java packages

 -- Ondřej Surý <email address hidden>  Tue, 29 May 2012 15:49:32 +0200

subversion (1.5.1dfsg1-7) oldstable-security; urgency=high


  [ Michael Diers ]
  * patches/cve-2011-1752: New patch for CVE-2011-1752, fixing a remotely
    triggered crash in mod_dav_svn, delivering baselined WebDAV resources.
  * patches/cve-2011-1783: New patch for CVE-2011-1783 and CVE-2011-1921,
    fixing remotely triggered memory exhaustion and a content leak of
    files that are meant to be unreadable.

 -- Peter Samuelson <email address hidden>  Tue, 31 May 2011 11:00:32 -0500

subversion (1.6.12dfsg-6) stable-security; urgency=high


  [ Michael Diers ]
  * patches/cve-2011-1752: New patch for CVE-2011-1752, fixing a remotely
    triggered crash in mod_dav_svn, delivering baselined WebDAV resources.
  * patches/cve-2011-1783: New patch for CVE-2011-1783 and CVE-2011-1921,
    fixing remotely triggered memory exhaustion and a content leak of
    files that are meant to be unreadable.

 -- Peter Samuelson <email address hidden>  Tue, 31 May 2011 11:00:32 -0500

subversion (1.6.17dfsg-3) unstable; urgency=medium


  * libapache2.preinst: Fix upgrade case from before 1.6.17dfsg-2.
  * libapache2.prerm: 'a2dismod' modules in reverse dependency order.
  * patches/apache_module_dependency: New patch to allow mod_authz_svn to
    load before mod_dav_svn and still use its functions.
    All these together, Closes: #642250.
  * Remove a bit more autofoo in 'clean' target.

 -- Peter Samuelson <email address hidden>  Sat, 19 Nov 2011 18:56:28 -0600

subversion (1.5.1dfsg1-6) oldstable-security; urgency=high


  * patches/cve-2011-0715: New patch for CVE-2011-0715, fixing a remotely
    triggered crash in mod_dav_svn involving lock tokens.

 -- Peter Samuelson <email address hidden>  Tue, 01 Mar 2011 10:26:16 -0600

subversion (1.6.17dfsg-2) unstable; urgency=low


  * Standards-Version: 3.9.2.  Also, multiarch.
  * Move to debhelper level 7.
  * patches/perl-warning: New patch to suppress a bogus Perl undef warning.
    (Closes: #422699)
  * patches/swig2-compat: New patch from upstream to build with swig 2.x.
    (Closes: #634049)
  * patches/perl-compiler-flags: New patch from upstream to address an
    issue brought to light by Perl 5.14.  (Closes: #628507)
  * patches/sasl-mem-handling: New patch from upstream to fix a crash with
    svn:// URLs and SASL authentication.  (Closes: #631765)
  * patches/svn2cl-upstream: Use --non-interactive in svn2cl to avoid
    hanging on, e.g., password prompts.  (Closes: #443860)
  * patches/python-exception-syntax: New patch: Fix a couple instances of
    literal string exceptions in Python, which don't work in 2.6+.
    (Closes: #585358)
  * Remove some preinst/postinst magic that hasn't been needed in years.
  * Split authz_svn.load away from dav_svn.load, since most users do not
    need both.  New installs will enable only dav_svn by default.
  * Restart apache in libapache2-svn postinst.  (Closes: #610236, #628990)
  * Improve symbols file with (regex)__ catchall for private symbols not
    otherwise accounted for.  (Closes: #607544)  I'm also including a
    workaround for rapidsvn, to be removed when 0.14 is released.
  * Add ${misc:Depends} everywhere.  Drop libsvn-java dependency on a jre.
    Thanks, Lintian.
  * Remove the extra copy of jquery supplied by doxygen, from libsvn-doc.
    Doesn't seem to even be used.  Thanks, Lintian.
  * patches/po: New patch from Laurent Bigonville to fix minor issues in
    fr.po and ja.po.  (Closes: #607381)
  * Move to dh_lintian, and fix up the overrides a bit.

 -- Peter Samuelson <email address hidden>  Thu, 15 Sep 2011 12:02:03 -0500

subversion (1.6.17dfsg-1) unstable; urgency=high
  * New upstream version.  Includes security fixes:    - CVE-2011-1752: Remotely triggered crash in mod_dav_svn    - CVE-2011-1783: Remotely triggered memory exhaustion in mod_dav_svn    - CVE-2011-1921: Content leak of certain files marked unreadable  * svn-bisect: Support $SVN environment variable, requested by Daniel    Shahaf upstream.  * Update Lintian overrides to account for python through 2.9,    in case that ever comes to be. -- Peter Samuelson <email address hidden>  Wed, 01 Jun 2011 17:07:33 -0500

subversion (1.6.16dfsg-1) unstable; urgency=high
  * New upstream version.    - Fixes CVE-2011-0715: Remotely crash mod_dav_svn anonymously via a      lock token.  * patches/change-range: New patch to support -cA-B syntax on command line.  * Stop using svn-make-config.c; we can do the same just by running svn    itself in a controlled home directory.  Delete debian/tools/. -- Peter Samuelson <email address hidden>  Thu, 03 Mar 2011 10:55:42 -0600

subversion (1.6.12dfsg-4) unstable; urgency=high
  * patches/loosen-sqlite-version-check: New patch: Relax the SQLite    version check, to match the Debian sqlite3 packaging.    (Closes: #608925)  * patches/cve-2010-4539: New patch for CVE-2010-4539, fixing a remotely    triggered crash in mod_dav_svn involving use of the SVNParentPath    feature.  (Closes: #608989) -- Peter Samuelson <email address hidden>  Wed, 05 Jan 2011 10:43:01 -0600

subversion (1.6.12dfsg-3) unstable; urgency=medium
  * Apply two patches from upstream 1.6.15:    - patches/server-memleak: New patch: fix some server-side memory leaks.    - patches/no-wc1.7-check: New patch: Stop checking for being inside a      1.7 working copy.  The value is too low and the performance penalty      too high. -- Peter Samuelson <email address hidden>  Wed, 22 Dec 2010 20:38:17 -0600

subversion (1.5.1dfsg1-5) stable-security; urgency=medium
  * Fix CVE-2010-3315: mod_dav_svn can give authorized users higher    privileges than they are configured for, in rare configurations. -- Peter Samuelson <email address hidden>  Thu, 07 Oct 2010 00:56:45 -0500

subversion (1.6.12dfsg-2) unstable; urgency=medium


  * patches/cve-2010-3315: New patch for CVE-2010-3315, whereby, in rare
    configurations, mod_dav_svn could give too much access to authorized
    users.
  * control: Update Vcs-* fields, Homepage, Policy to 3.9.1 (no changes),
    tweak python version declaration (Closes: #587853).

 -- Peter Samuelson <email address hidden>  Fri, 01 Oct 2010 12:11:10 -0500

subversion (1.6.12dfsg-1) unstable; urgency=medium


  * Urgency medium, as it (probably) fixes some FTBFS.
  * New upstream version.
    - Fixes some or all cases of inappropriate need for read access to the
      root of the repository.  (Closes: #510883)
  * Disable parallel mode for 'make check', which appears to have made
    some build daemons sad.
  * svn-bisect: use pegs to support bisecting in deleted branches.
    Thanks Nikita Borodikhin.  (Closes: #582344)
  * patches/ruby-test-info: expand for more failures nobody can figure
    out.  Sigh.
  * Upgrade from source format 1.0 to 1.0.

 -- Peter Samuelson <email address hidden>  Mon, 21 Jun 2010 11:53:14 -0500

subversion (1.6.11dfsg-1) unstable; urgency=low


  * New upstream version.  Rediff a patch or two.
    - Mergeinfo queries no longer require access to repository root.
      (Ref: #510883)
    - Ignores errors reading .svn/ in parent directories.  (Closes: #570271)
  * rules: Run 'check' target in parallel mode.

 -- Peter Samuelson <email address hidden>  Mon, 19 Apr 2010 23:22:07 -0500

subversion (1.6.9dfsg-1) unstable; urgency=low


  * New upstream release.
    - patches/16x-po, patches/ruby-test-core: remove, applied upstream.
  * patches/java-build: Update for gcj 4.4.  Update the build dependency
    too, as this version of the patch will not work on gcj 4.3.
    Thanks to Nobuhiro Iwamatsu.  (Closes: #561516)
  * patches/build-fixes: Fix parallelism in 'doc-api' target.  Again.
    (Closes: #537297)
  * patches/ruby-test-info: Disable the two failing ruby tests that
    nobody can reproduce except on the buildds.  (Closes: #545372)

 -- Peter Samuelson <email address hidden>  Wed, 27 Jan 2010 01:57:47 -0600

subversion (1.6.6dfsg-2) unstable; urgency=low


  * Update svn-bisect (Closes: #535234), fix bugs, add features,
    and write a manpage.  Also mention it in the subversion-tools
    Description.  (Closes: #535187)
  * Move from db4.7 to db4.8, tracking apr-util.  (Closes: #557457)
  * Move the example XSL and CSS files for mod_dav_svn to
    /usr/share/doc/libapache2-svn/examples/.  (Closes: #553535)
  * patches/ruby-test-info: New patch to maybe address a FTBFS.  (#545372)
    Thanks Michael Diers, Joe Swatosh and Stefan Sperling.  I expect that
    this is not the only fix needed, but we shall see.
  * patches/16x-po: New patch: a couple translation updates from 1.6.7.
  * libsvn-java: depend on ${shlibs:Depends}, thanks Lintian.
  * python-subversion: Update an outdated Lintian override.
  * libsvn1: Add a handful of Lintian overrides.

 -- Peter Samuelson <email address hidden>  Sun, 22 Nov 2009 17:53:45 -0600

subversion (1.6.6dfsg-1) unstable; urgency=low


  * New upstream release.
    - Reintroduce svn_load_dirs.pl: Dolby has agreed to an explicit free
      software license.  Thanks Blair Zajac for following up on this.
    - patches/ruby-test-core: New patch from upstream to fix a new failure
      in the ruby testsuite.
  * Standards-Version 3.8.3 (no changes).
  * control: Some housecleaning: remove some Conflicts/Replaces/Provides
    that haven't been needed since etch.
  * patches/build-fixes: add a small fix for parallel builds.
    (Closes: #543110)
  * patches/svn2cl-upstream: New patch to fix the XSL to better comply
    with XML standards.  (Closes: #546990)
  * Enable kwallet support.  (Closes: #539564)
    - patches/kwallet-wid: New patch based very loosely on upstrema work, to
      let the kwallet library know your terminal's Window ID, if available.
    - patches/apr-abi, patches/rpath: Fix the LINK_CXX target, now that
      we're finally using it.
  * Set dependency_libs='' in all .la files, as per:
    http://lists.debian.org/debian-devel/2009/08/msg00783.html

 -- Peter Samuelson <email address hidden>  Thu, 22 Oct 2009 11:32:13 -0500

subversion (1.6.5dfsg-1) unstable; urgency=low


  * New upstream release.
    - Resolves symlinks in ~/.subversion. (Closes: #541202)
  * patches/ssh-no-controlmaster: Replace with the much simpler approach
    upstream demonstrates with 'ssh -q'.
  * patches/no-dbus-spam: New patch to shut up the gnome-keyring library
    when it can't initialize.  (Closes: #542403)
  * patches/ruby-test-tree-conflicts: New patch from upstream trunk, to
    fix two ruby test failures.

 -- Peter Samuelson <email address hidden>  Thu, 20 Aug 2009 12:16:39 -0500

subversion (1.5.1dfsg1-4) stable-security; urgency=high


  * Fix CVE-2009-2411, heap overflows in svndiff stream parsing.

 -- Peter Samuelson <email address hidden>  Wed, 05 Aug 2009 19:54:23 -0500

subversion (1.6.4dfsg-1) unstable; urgency=high


  * New upstream security release.
    - Fix CVE-2009-2411, heap overflows in svndiff stream parsing.

 -- Peter Samuelson <email address hidden>  Wed, 05 Aug 2009 20:12:07 -0500

subversion (1.6.3dfsg-1) unstable; urgency=low


  * New upstream release.
  * Update package sections corresponding to recent ftpmaster work.
  * Re-enable libsvn_ra_serf, now that serf 0.3.0-0.2 is available.
  * Add symbols file for libsvn1, for finer-grained dependencies.

 -- Peter Samuelson <email address hidden>  Tue, 14 Jul 2009 23:51:24 -0500

subversion (1.6.1dfsg-1) experimental; urgency=low


  * New upstream release.

 -- Peter Samuelson <email address hidden>  Thu, 09 Apr 2009 17:30:40 -0500

subversion (1.6.0dfsg-1) experimental; urgency=low


  * New upstream release.
    - patches/{commit-email2,out-of-tree-build-fixes,svn2cl-upstream,
               ssh-no-sigkill}: deleted, applied or obsoleted upstream.
      Other patches rediffed.
    - patches/build-fixes: New patch, mostly for out-of-tree build stuff.
    - Fixes typo in fr.po.  (Closes: #503266)
    - Fixes WC out-of-sync issue.  (Closes: #500665)
  * Build-depends: libsqlite3-dev, libgnome-keyring-dev, libdbus-1-dev.
    We _should_ give equal opportunity to KDE 4 KWallet support,
    but in terms of dependencies, that is a much heavier burden.
    - Disable 'auth-test' test.  It assumes the gnome-keyring service
      is available at test time - not likely, on a build daemon.
  * Remove serf backend support for now, as it requires 0.3.0.
  * Move to db4.7, tracking apr-util.

 -- Peter Samuelson <email address hidden>  Fri, 27 Mar 2009 15:54:25 -0500

subversion (1.5.6dfsg-1) unstable; urgency=low


  * New upstream release.
  * patches/commit-email2: New patch to fix mail header formatting in
    commit-email.pl hook.  (Closes: #508301)
  * Tweak 'site-packages' location for python 2.6, taken from the Ubuntu
    patch uploaded by Matthias Klose.
  * Build-Depends is back again to libdb4.6-dev.

 -- Peter Samuelson <email address hidden>  Wed, 25 Feb 2009 20:23:51 -0600

subversion (1.5.1dfsg1-2) unstable; urgency=low


  * patches/merge-revert-error: new patch to fix an error where some
    merges revert other bits of a working copy.  From upstream; thanks to
    Ben Hutchings for the backport and testing.  (Closes: #507764)

 -- Peter Samuelson <email address hidden>  Wed, 31 Dec 2008 00:18:36 -0600

subversion (1.5.1dfsg1-1) unstable; urgency=low


  * New upstream release.
    - Fixes some major corner cases in merge tracking.
    - Fixes several crash bugs and regressions from 1.4 -> 1.5.
    - patches/ruby-test-wc-normalize-compared-value: Remove, applied upstream.
  * Symlink libsvn_ra_dav-1.so.1 -> libsvn_ra_neon-1.so.1 to avoid
    breaking old packages that mistakenly linked to ra_dav.  This was not
    and is not supported, but at least one package did it.  (Closes: #490423)
  * Add a NEWS entry for 1.5.x in general.
  * debian/watch: Add dversionmangle setting, thanks to lintian.

 -- Peter Samuelson <email address hidden>  Thu, 24 Jul 2008 15:48:17 -0500