[jsword-devel] [Fwd: CVS Repositories]

[DM Smith]

I have no experience w/ it.

I rely on the merge/diff capabilities w/in Eclipse to understand other's 
changes.

I am not sure I understand the security risk. You seem to say that the 
client software has a fault that allows it to exploit permissions on the 
server. If that is the case, that is very bad.

I have sent a patch earlier regarding the build that probably should be 
applied first. I also have a few other pending changes relating to 
limbo. I have found that we are building limbo into the jars and that a 
couple of packages have classes actually being used. This may need to be 
fixed.

If we do go there, I would like a practical comparision between it and 
CVS w/in Eclipse.

Joe Walker wrote:
> 
> Hi,
> 
> Troy wants to move crosswire to SVN in place of CVS. I think this could 
> be a hassle for eclipse users in the short term although doing it now 
> probably makes sense as Troy is migrating everything to a new server.
> 
> My biggest concern is, from 
> http://subversion.tigris.org/project_packages.html
> *Subversion versions up to and including 1.0.5 have a vulnerability 
> allowing mod_authz_svn read restrictions to be evaded. 
> <http://subversion.tigris.org/security/mod_authz_svn-copy-advisory.txt>. 
> All users are advised to upgrade to 1.0.6 or 1.1.0-rc1.*
> 
> But from http://subclipse.tigris.org/
> Subclipse 0.9.3.1 is linked against Subversion 1.0.5 (Windows only for now)
> 
> I'm hoping that that subclipse 0.9.3.1 linked to svn client 1.0.5 will 
> talk to svn server (whatever version we are using) and not leave us open 
> to attack.
> 
> So I think we might be stuck with command line or TortoiseSVN. Does 
> anyone have experience of working with SVN and Eclipse, or SVN and Java 
> in general?
> 
> Joe.
> 
> -------- Original Message --------
> Subject:     CVS Repositories
> Date:     Thu, 29 Jul 2004 18:33:10 -0700 (MST)
> From:     Troy A. Griffitts <scribe777 at crosswire.org>
> To:     crosswire-private at crosswire.org, Joe Walker <joe at eireneh.com>, 
> William Thimbleby <wjt100 at york.ac.uk>, Johan Gorter 
> <j.gorter at student.utwente.nl>, Terry Biggs <terry470 at alltel.net>
> 
> 
> 
> PUBLIC SERVICE ANNOUNCEMENT:
> 
> crosswire.org CVS repositories will be closing down for conversion on
> Friday, July 30th at 7am MST (MST+7)(2pm UTC).
> 
> Please have all your stuff checked in, or let your voice be heard that 
> you need another day.
> 
> New SubVersion repositories should be available from the new server
> address by days end, Monday August 2nd.  Details to follow.
> 
> Anyone wanting an SVN repository on CrossWire who doesn't currently have
> an active CVS repository, please make your request known and we'd be happy
> to facilitate.  Now's the time!
> 
> 
> Read up!
> 
> http://svnbook.red-bean.com/svnbook/book.pdf
> 
> 
>     -Troy.
> 
> 
> _______________________________________________
> jsword-devel mailing list
> jsword-devel at crosswire.org
> http://www.crosswire.org/mailman/listinfo/jsword-devel
>