This update includes the latest stable release of Apache Subversion, version 1.14.1. This release includes the fix for CVE-2020-17525, a remote unauthenticated denial-of-service in Subversion mod_authz_svn.

The full upstream security advisory for CVE-2020-17525 is available at: https://subversion.apache.org/security/CVE-2020-17525-advisory.txt

User-visible changes:

Client-side improvements and bugfixes:

• Fix non-deterministic generation of mergeinfo (issue SVN-4862)
• Fix merge removing a folder with non-inheritable mergeinfo (issue SVN-4859)
• Do not suggest --help -v for commands which do not support -v
• Fix invalid SQL quoting in working copy upgrade system
• Fix problems in human-readable file size formatting
• Improve an error message from svnmucc
• Fix 'svn info --xml' gives wrong 'source-right' of conflict (issue SVN-4869)
• Convert filename for editor from UTF-8 to the locale's encoding

Server-side improvements and bugfixes:

• Fix authz doesn't combine global and repository rules (issue SVN-4762)
• Make the hot-backup.py script work with Python 3
• Fix an uninitialized read in FSFS
• Make mailer.py work properly with Python 3
• Fix a potential NULL dereference in the config file parser