Re: ASF Subversion version

2021-12-12 Thread Luke Mauldin
That really is unfortunate to hear about the lack of funding. I see in the past few years there has been a lot of work done on the conflict resolver in version 10 and multiple stash implementations in versions 11+. Are those efforts being driven by people just working on it in their “spare time”

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Bo Berglund
On Sun, 12 Dec 2021 15:30:20 +0300, Pavel Lyalyakin wrote: >Apache Subversion and Apache HTTP Server are not Java applications. >Subversion does not depend on log4j. AFAIK, Apache HTTP Server does not >depend on log4j either. Sounds good. We are using VisualSVN on our main SVN server running on

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Mark Phippard
On Sun, Dec 12, 2021 at 7:31 AM Pavel Lyalyakin wrote: > > On Sun, Dec 12, 2021 at 5:34 AM surbhi khandelwal wrote: >> >> Hi >> >> I am using svn, version 1.6.11 (r934486) on rhel 1.6 could you kindly help >> me understand if this is vulnerable to the latest java vulnaribility >> >> >> Httpd v

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Pavel Lyalyakin
On Sun, Dec 12, 2021 at 5:34 AM surbhi khandelwal wrote: > Hi > > I am using svn, version 1.6.11 (r934486) on rhel 1.6 could you kindly > help me understand if this is vulnerable to the latest java vulnaribility > > > Httpd version im using is 2.2.15 > > Looking for your help > > > Apache Subve