[Arx-users] ArX-1.0.19 SECURITY UPGRADE

[Walter Landry]

Greetings,

I have made a new release of ArX.  You can find it in the usual place:

  http://superbeast.ucsd.edu/~landry/ArX/ArX-1.0.19.tar.gz

I have attached the release notes below.  Note that this is a security
update, so everyone is urged to upgrade.

There was a format string vulnerability in libneon.  This version
replaces all of the networking code with gnome-vfs.

This version has a substantial number of improvements and
modifications over the previous version.  A variety of commands have
been renamed or collapsed into single commands.  Almost all of the
commands have now been reimplemented in C++.  One effect of that is
that the test suite takes seconds to complete instead of minutes.

Enjoy,
Walter


ArX-1.0.19 2004-Apr-19

This is an security release bundled with a whole lot of new features.
The version of libneon bundled with ArX has a format string
vulnerability.  That has been fixed by completely replacing all
networking functionality with gnome-vfs.  So hackerlab, file-utils,
and ftp-utils are no longer part of ArX.

The archive format has been slightly changed.  If you have any
mirrors, you will have to unregister them, and then make them with
make-archive --mirror.  This can be done in-place with no ill effects.

"commit" has been rewritten in C++, speeding it up considerably.  In
the course of this, there have been some minor changes to the log
formats.  In particular, control files longer show up in
the log files (though they are still in the patch).  Also, new
projects created with the new "commit" can not be retrieved by old
clients unless there are cached revisions.

"star-merge" and "update" have been folded into a new command "merge".
"replay" has been reimplemented, and has a slightly different syntax.
When doing an in-place update, ArX no longer saves a copy of the
directory in ++saves-...  Also, "merge" is much more intelligent
about finding common ancestors.

"create-branch" has been renamed to "fork".  The functionality of
"create-version" has been replaced with "init-tree" and "fork".

"delete-branch" and "delete-category" have been reimplemented in
C++.

"tag" is reimplemented in C++, and a bug when tagging a base revision
is fixed.

A bug in "tree-version" was fixed, where it was not including the
archive when setting a project tree's default version.

"what-changed" has been changed to "diff", and no longer by default
prints out what changes occured to control files.

"join-branch" has been removed.  Use "replay" on the continuation
revision instead.

The functionality in "remove-history" and "make-sync-tree" has been
folded into "history".

The functionality in "whereis-archive" has been folded into "archives".

"config-history" and "cat-library-file" are temporarily broken.