Re: Subversion upgrade problem

2012-10-23 Thread Parrish Knight
On Mon, Oct 22, 2012 at 4:32 PM, Bob Archer wrote: > Are you upgrading the client or the server? The client. We think we may have located the problem. The user also had Tortoise installed, and it was an older version. We're trying to determine whether upgrading will resolve. -- Parrish S. Kn

RE: Subversion upgrade problem

2012-10-22 Thread Bob Archer
> On Mon, Oct 22, 2012 at 9:47 AM, Stefan Sperling wrote: > > If he can reproduce this problem even with patches applied, please ask > > him to report this as a new security issue with a reproduction recipe > > included. Please see > > http://subversion.apache.org/docs/community-guide/issues.html#

Re: Subversion upgrade problem

2012-10-22 Thread Parrish Knight
On Mon, Oct 22, 2012 at 10:13 AM, Stefan Sperling wrote: > You could check if you can still see a libsvn_delta-1.dll (or similarly > named file) left over from the old installation. The only "libsvn" files I find on search are in the Subversion 1.7.7 directory, so that doesn't appear to be the pr

Re: Subversion upgrade problem

2012-10-22 Thread Stefan Sperling
On Mon, Oct 22, 2012 at 09:55:33AM -0400, Parrish Knight wrote: > > Are you sure the Subversion upgrade was done properly? > > I used Control Panel to uninstall the previous version, then I > downloaded and unZIPped the most current version. Is there anythin I > may have overlooked? That sounds

Re: Subversion upgrade problem

2012-10-22 Thread Parrish Knight
On Mon, Oct 22, 2012 at 9:47 AM, Stefan Sperling wrote: > If he can reproduce this problem even with patches applied, please > ask him to report this as a new security issue with a reproduction > recipe included. Please see > http://subversion.apache.org/docs/community-guide/issues.html#security >

Re: Subversion upgrade problem

2012-10-22 Thread Stefan Sperling
On Mon, Oct 22, 2012 at 08:58:49AM -0400, Parrish Knight wrote: > The reported problem is with earlier versions of Subversion, but our > security officer reports that the problem persists even after an > upgrade. > > "Multiple integer overflows in the libsvn_delta library in Subversion > before 1.5

Re: Subversion upgrade problem

2012-10-22 Thread Thorsten Schöning
Guten Tag Parrish Knight, am Montag, 22. Oktober 2012 um 14:43 schrieben Sie: > Any assistance that anyone might be able to give would be much > appreciated. Could you please mention the exact problem you have or did I just oversee it? What vulnerability or problem are you talking about? Mit fre

Re: Subversion upgrade problem

2012-10-22 Thread Parrish Knight
On Mon, Oct 22, 2012 at 8:54 AM, Stefan Sperling wrote: > On Mon, Oct 22, 2012 at 08:43:16AM -0400, Parrish Knight wrote: >> Good morning: >> >> I am the Help Desk Lead at the National Geodetic Survey, an agency of >> NOAA, the National Oceanic and Atmospheric Administration. Currently, >> I am i

Re: Subversion upgrade problem

2012-10-22 Thread Stefan Sperling
On Mon, Oct 22, 2012 at 08:43:16AM -0400, Parrish Knight wrote: > Good morning: > > I am the Help Desk Lead at the National Geodetic Survey, an agency of > NOAA, the National Oceanic and Atmospheric Administration. Currently, > I am in the process of migrating one of our developers from a rather