Re: CVS Feature Version 1.12.13 Released! * Security Update *

[Derek Price]

For the last few releases, the NEWS file has been split into "BUG FIXES"
and "NEW FEATURES" sections.  "BUG FIXES" are applied to both branches
and "NEW FEATURES" are present only in the feature release series.  To
figure out which release a security change went into, you may need to
consult/diff both NEWS files.

At ChangeLog granularity level, the best you could probably do is diff
the ChangeLogs distributed with the stable and feature releases.

Regards,

Derek


Peter Connolly wrote:

> Is there any list that shows the feature changes of JUST the 1.12.x
> branch. I'm constantly asked why we should upgrade to 1.12 but the
> changelog shows 1.12 and 1.11 updates, not just 1.12 updates, so it's
> difficult to pull out all the relevant 1.12 changes.
>
> pc
>
> On 10/3/05, *Derek Robert Price* <derek@ximbiot.com
> <mailto:derek@ximbiot.com>> wrote:
>
>
>     Feature CVS 1.12.13 has been released.  Feature releases contain
>     new features
>     as well as all the bug fixes from the stable releases.  This
>     version fixes
>     two security vulnerabilities in the zlib compression libraries
>     (see CERT
>       vulnerabilities advisories
>     [http://www.kb.cert.org/vuls/id/238678 #238678]
>     &
>     [http://www.kb.cert.org/vuls/id/680620
>     <http://www.kb.cert.org/vuls/id/680620> #680620] for more info),
>     several
>     issues involving potential data-loss on heavily loaded systems,
>     some minor
>     potential crashes, hangs, and several minor annoyances in CVS
>     client and
>     server behavior.
>
>     This release also adds a handful of new features, mostly providing
>     expanded
>     server configurability, but including repair of a major Windows
>     client issue
>     that has prevented the Windows client from accessing remote
>     repositories for
>     several feature releases and fixes for some minor cvs watch bugs.
>
>     We recommend this upgrade for all CVS clients and servers already
>     running the
>     feature release and for those who simply like to stay on the
>     cutting edge!
>
>     Please take a look at the
>     [
>     
> http://savannah.nongnu.org/cgi-bin/viewcvs/cvs/ccvs/NEWS?rev=1.341&content-type=text/vnd.viewcvs-markup
>     
> <http://savannah.nongnu.org/cgi-bin/viewcvs/cvs/ccvs/NEWS?rev=1.341&content-type=text/vnd.viewcvs-markup>
>     NEWS file] from the CVS source distribution for more information
>     about the
>     changes contained in this release.
>
>     CVS can be downloaded from [http://ftp.gnu.org/non-gnu/cvs/ GNU
>     download
>     server] within four hours of this announcement or one of the
>     [ http://www.gnu.org/prep/ftp.html mirrors] after 24 hours or so
>     (make sure to
>     check the '''non-gnu''' directory on the mirrors).  (This release
>     may be
>     obtained from [ http://savannah.nongnu.org/download/cvs/ Savannah
>     download
>     server] prior to appearing on the GNU download server, but please
>     don't use
>     the already heavily loaded Savannah download server unless you
>     have to.)  For
>     other ways to obtain CVS, please read
>     [http://www.gnu.org/software/software.html#HowToGetSoftware How to
>     get GNU
>     Software].
>
>     _______________________________________________
>       Message sent via/by Savannah
>       http://savannah.nongnu.org/
>
>
>
>     _______________________________________________
>     Info-cvs mailing list
>     Info-cvs@nongnu.org <mailto:Info-cvs@nongnu.org>
>     http://lists.nongnu.org/mailman/listinfo/info-cvs
>
>


-- 
Derek R. Price
CVS Solutions Architect
Ximbiot <http://ximbiot.com>
v: +1 717.579.6168
f: +1 717.234.3125
<mailto:derek@ximbiot.com>