subversion-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From phi...@apache.org
Subject svn commit: r1615179 - /subversion/branches/1.7.x/STATUS
Date Fri, 01 Aug 2014 17:45:31 GMT
Author: philip
Date: Fri Aug  1 17:45:30 2014
New Revision: 1615179

URL: http://svn.apache.org/r1615179
Log:
* STATUS: Vote/approve MD5 collision fix.

Modified:
    subversion/branches/1.7.x/STATUS

Modified: subversion/branches/1.7.x/STATUS
URL: http://svn.apache.org/viewvc/subversion/branches/1.7.x/STATUS?rev=1615179&r1=1615178&r2=1615179&view=diff
==============================================================================
--- subversion/branches/1.7.x/STATUS (original)
+++ subversion/branches/1.7.x/STATUS Fri Aug  1 17:45:30 2014
@@ -137,19 +137,6 @@ Candidate changes:
    Votes:
      +1: rhuijben
 
- * r1550691, r1550772, r1600909
-   Guard against MD5 hash collisions when finding cached credentials.
-   Justification:
-     MD5 collision attacks exist and could be used to trick a client into
-     sending cached credentials to a server other than what they were
-     cached for.
-   Notes:
-     Branch is required due to svn_hash_gets() not being available in 1.7.x
-   Branch:
-     ^/subversion/branches/1.7.x-md5-collision
-   Votes:
-     +1: breser, stefan2
-
  * r1565531, r1566503, r1568349
    Ignore the CommonName in SSL certs when there are Subject Alt Names.
    Justification:
@@ -182,3 +169,16 @@ Veto-blocked changes:
 
 Approved changes:
 =================
+
+ * r1550691, r1550772, r1600909
+   Guard against MD5 hash collisions when finding cached credentials.
+   Justification:
+     MD5 collision attacks exist and could be used to trick a client into
+     sending cached credentials to a server other than what they were
+     cached for.
+   Notes:
+     Branch is required due to svn_hash_gets() not being available in 1.7.x
+   Branch:
+     ^/subversion/branches/1.7.x-md5-collision
+   Votes:
+     +1: breser, stefan2, philip



Mime
View raw message