This update includes the latest stable release of Apache Subversion, version 1.8.14. This update fixes two security issues:

• CVE-2015-3184: Subversion's mod_authz_svn does not properly restrict anonymous access in some mixed anonymous/authenticated environments when using Apache httpd 2.4. http://subversion.apache.org/security/CVE-2015-3184-advisory.txt
• CVE-2015-3187: Subversion servers, both httpd and svnserve, will reveal some paths that should be hidden by path-based authz. http://subversion.apache.org/security/CVE-2015-3187-advisory.txt

User-visible changes:

Client-side bugfixes:

• document svn:autoprops
• cp: fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
• resolve: improve conflict prompts for binary files
• ls: improve performance of '-v' on tag directories
• improved Sqlite 3.8.9 query performance regression on externals
• fixed issue 4580: 'svn -v st' on file externals reports "?" instead of user and revision after 'svn up'

Server-side bugfixes:

• mod_dav_svn: do not ignore skel parsing errors
• detect invalid svndiff data earlier
• prevent possible repository corruption on power/disk failures
• fixed issue 4577: Read error with nodes whose DELTA chain starts with a PLAIN rep
• fixed issue 4531: server-side copy (over dav) is slow and uses too much memory

Developer-visible changes:

General:

• avoid failing some tests on versions of Python with a very old sqlite
• fix Ruby tests so they don't use the users real configuration

Bindings:

• swig-pl: fix some stack memory problems