Version 2.5.9 (April 04, 2013) [Download]
- Updated to Apache Subversion 1.7.9 with fixes for the following vulnerabilities:
CVE-2013-1845,
CVE-2013-1846,
CVE-2013-1847,
CVE-2013-1849,
CVE-2013-1884.
For further details please see http://svn.apache.org/repos/asf/subversion/tags/1.7.9/CHANGES - Updated to OpenSSL 0.9.8y with fixes for the following vulnerabilities: CVE-2013-0169, CVE-2012-2686, CVE-2013-0166.
- Fixed: mod_log_visualsvn module may crash if Access Logging is enabled.
Version 2.5.8 (December 25, 2012) [Download]
- Updated to Apache Subversion 1.7.8. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.8/CHANGES
Version 2.5.7 (October 30, 2012) [Download]
- Updated to Apache Subversion 1.7.7. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.7/CHANGES - Updated to Serf 1.1.1.
- Fixed: unbounded server side memory usage is possible under some circumstances.
- Fixed: WMI provider may crash when server is managed by multiple clients.
Version 2.5.6 (August 24, 2012) [Download]
- Updated to Apache Subversion 1.7.6. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.6/CHANGES
Version 2.5.5 (May 18, 2012) [Download]
- Updated to Apache Subversion 1.7.5. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.5/CHANGES - Updated to OpenSSL 0.9.8x.
Version 2.5.4 (March 12, 2012) [Download]
- Updated to Apache Subversion 1.7.4. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.4/CHANGES - Properly restart Apache HTTP Server child process if it gets aborted.
- Log appropriate error messages when Apache HTTP Server child process gets aborted.
- Remove inode from ETag HTTP header (to prevent false positive detection by security screening tools).
Version 2.5.3 (February 15, 2012) [Download]
- Updated to Apache Subversion 1.7.3. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.3/CHANGES - Updated to Apache HTTP Server 2.2.22
- Updated to OpenSSL 0.9.8t.
- Add CreateGnuTLSCompatibleCertificate registry option to create GnuTLS compatible self-signed certificates. See the KB56 article for details.
Version 2.5.2 (December 06, 2011) [Download]
- Updated to Apache Subversion 1.7.2. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.2/CHANGES
Version 2.5.1 (October 24, 2011) [Download]
- Updated to Apache Subversion 1.7.1. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.7.1/CHANGES
Version 2.5.0 (October 11, 2011) [Release Notes] [Download]
Major changes
- Updated to Apache Subversion 1.7.0 For further details please see Apache Subversion 1.7 Release Notes.
- Enable SVNPathAuthz short_circuit option to improve performance on authorization intensive operations (e.g. svn log).
- Add support for IPv6 protocol: VisualSVN Server now may be configured to listen on IPv6 interfaces.
- VisualSVN Server Manager now attempts to use delegation impersonation level when connecting to a remote server.
- Being installed for the first time, VisualSVN Server makes the pre-configured self-signed server certificate trusted on a local machine.
- Never trigger Subversion hooks when managing repositories in VisualSVN Server Manager.
- Adjust Apache HTTP Server settings for better compatibility with Subversion 1.7 clients.
VisualSVN Server Manager improvements
- Restart VisualSVN Server service gracefully when applying new configurations settings.
- Allow to configure repository access permissions for accounts from trusted Active Directory domains.
- New self-signed server certificates are generated to be valid for 10 years.
- New self-signed server certificates are generated to be valid for server authentication only.
- Add option to view current server certificate details.
- Several performance and usablity improvements.
- Fixed: unable to import certificate with expiration date later than 2049 year.
Other changes
- Rename authentication realm to "VisualSVN Server".
- Move server.pid file to a local temporary directory.
- Set default maximum size of VisualSVN Server log to 20mb.
- Fixed: unable to create or remove folder in VisualSVN Server Manager if commit log message contains line breaks.
- Fixed: web browsers do not invalidate cache and manual page refresh is required to view recent repository changes.
- Fixed: VisualSVN Server service doesn't gracefully handle system shutdown/reboot events.
Version 2.1.13 (April 04, 2013) [Download]
- Updated to Apache Subversion 1.6.21 with fixes for the following vulnerabilities:
CVE-2013-1845,
CVE-2013-1846,
CVE-2013-1847,
CVE-2013-1849.
For further details please see http://svn.apache.org/repos/asf/subversion/tags/1.6.21/CHANGES - Updated to OpenSSL 0.9.8y with fixes for the following vulnerabilities: CVE-2013-0169, CVE-2012-2686, CVE-2013-0166.
Version 2.1.12 (Not released)
Version 2.1.11 (September 16, 2011) [Download]
- Updated to Apache HTTP Server 2.2.21 with fix for CVE-2011-3348 critical vulnerability and further fixes for CVE-2011-3192.
Version 2.1.10 (September 01, 2011) [Download]
- Updated to Apache HTTP Server 2.2.20 with fix for the critical vulnerability: CVE-2011-3192.
- Negotiate authentication method is disabled for Subversion clients built against Neon (reverting the corresponding change from the version 2.1.9).
Version 2.1.9 (June 01, 2011) [Download]
- Updated to Subversion 1.6.17 with fixes for the following vulnerabilities: CVE-2011-1752, CVE-2011-1783, CVE-2011-1921.
- Updated to Apache HTTP Server 2.2.19
- Updated to Neon 0.29.6.
- Negotiate authentication method is enabled for Subversion clients built against Neon 0.29.5 (and newer).
- Fixed: an attempt to change repository root settings fails with the "The remote procedure call failed. (0x800706be)" error message.
- Fixed: upgrade fails with the "Custom action CreateInitialAuthFilesExecute failed" error message when repositories are stored on network share.
Version 2.1.8 (Not released)
Version 2.1.7 (March 24, 2011) [Download]
- Updated to OpenSSL 0.9.8r with fixes for following vulnerabilities: CVE-2010-4180, CVE-2010-4252, CVE-2011-0014.
Version 2.1.6 (March 03, 2011) [Download]
- Updated to Subversion 1.6.16 with fix for critical vulnerability: CVE-2011-0715.
Version 2.1.5 (December 01, 2010) [Download]
- Updated to Subversion 1.6.15. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES - Updated to Apache 2.2.17
- Updated to OpenSSL 0.9.8p
- Updated to Neon 0.29.5
- mod_headers Apache module is included into the installation package.
Version 2.1.4 (October 11, 2010) [Download]
- Updated to Subversion 1.6.13. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.13/CHANGES
Version 2.1.3 (July 13, 2010) [Download]
- Updated to Subversion 1.6.12. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.12/CHANGES - Updated to Serf 0.3.1.
- Allow to grant access rights for a domain computer account.
- Prohibit to grant access rights for a domain distribution group (since Active Directory distribution groups are not intended to manage permissions).
- Fixed: installation package behaves incorrectly when AlwaysInstallElevated policy is enabled.
- Fixed: VisualSVNServerHooks.exe does not work if VisualSVN Server service account doesn't have access permissions to all parents of the repositories folder.
- Fixed: non-ASCII characters are incorrectly logged to Access and Operational logs.
- Fixed: unable to install if computer name contains underscore characters.
- mod_deflate Apache module is not loaded anymore.
Version 2.1.2 (April 26, 2010) [Download]
- Updated to Subversion 1.6.11. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.11/CHANGES - Disallow installation on servers with non-ASCII hostnames.
- Generate Apache config in the UTF-8 encoding.
Version 2.1.1 (February 15, 2010) [Download]
- Updated to Subversion 1.6.9. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.9/CHANGES - Being installed for the first time, VisualSVN Server pre-generates 2048 bits long private key for SSL certificates.
Version 2.1 (January 19, 2010) [Release Notes] [Download]
- New feature: Integrated Windows Authentication. With Integrated Windows Authentication users gain access to VisualSVN Server without being prompted for username and password. Available in Enterprise Edition only.
- Fixed: access permissions settings can be interpreted incorrectly when Windows Authentication is used.
- Favicon is added to web pages produced by VisualSVN Server.
- Updated to Neon 0.29.3.
- Updated to OpenSSL 0.9.8l with fix for critical vulnerability: CVE-2009-3555.
Version 2.0.18 (September 16, 2011) [Download]
- Updated to Apache HTTP Server 2.2.21 with fix for CVE-2011-3348 critical vulnerability and further fixes for CVE-2011-3192.
Version 2.0.17 (September 01, 2011) [Download]
- Updated to Apache HTTP Server 2.2.20 with fix for the critical vulnerability: CVE-2011-3192.
Version 2.0.16 (June 01, 2011) [Download]
- Updated to Subversion 1.6.17 with fixes for following vulnerabilities: CVE-2011-1752, CVE-2011-1783, CVE-2011-1921.
- Updated to Apache HTTP Server 2.2.19
- Updated to Neon 0.29.6
Version 2.0.15 (March 24, 2011) [Download]
- Updated to OpenSSL 0.9.8r with fixes for following vulnerabilities: CVE-2010-4180, CVE-2010-4252, CVE-2011-0014.
Version 2.0.14 (March 03, 2010) [Download]
- Updated to Subversion 1.6.16 with fix for critical vulnerability: CVE-2011-0715.
Version 2.0.13 (December 01, 2010) [Download]
- Updated to Subversion 1.6.15. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES - Updated to Apache 2.2.17
- Updated to OpenSSL 0.9.8p.
Version 2.0.12 (October 11, 2010) [Download]
- Updated to Subversion 1.6.13. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.13/CHANGES
Version 2.0.11 (July 13, 2010) [Download]
- Updated to Subversion 1.6.12. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.12/CHANGES - Updated to Serf 0.3.1.
Version 2.0.10 (April 26, 2010) [Download]
- Updated to Subversion 1.6.11. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.11/CHANGES
Version 2.0.9 (February 15, 2010) [Download]
- Updated to Subversion 1.6.9. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.9/CHANGES - Fixed: access permissions settings can be interpreted incorrectly when Windows Authentication is used.
- Favicon is added to web pages produced by VisualSVN Server.
- Updated to OpenSSL 0.9.8l with fix for critical vulnerability: CVE-2009-3555.
Version 2.0.8 (October 28, 2009) [Download]
- Updated to Subversion 1.6.6. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.6/CHANGES - NetworkService account receives explicit access permission to the installation folder (as a workaround for the situations when it does not have such permissions implicitly)
- Fixed: WMI provider may be not reloaded after the server upgrade.
- Fixed: VisualSVN Server may crash if Windows permissions settings file contains invalid data.
Version 2.0.7 (September 11, 2009) [Download]
- Fixed: commits sometimes fail with the "SSL negotiation failed.." error message.
Version 2.0.6 (August 28, 2009) [Download]
- Updated to Subversion 1.6.5. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.5/CHANGES - Updated to Apache 2.2.13 with fix for critical vulnerability: CVE-2009-2412.
Version 2.0.5 (August 06, 2009) [Download]
- Updated to Subversion 1.6.4 with fix for critical vulnerability: CVE-2009-2411.
- Updated to Apache 2.2.12 with fixes for critical vulnerabilities: CVE-2009-1891, CVE-2009-1195, CVE-2009-1890, CVE-2009-1191, CVE-2009-0023, CVE-2009-1955, CVE-2009-1956.
Version 2.0.4 (July 31, 2009) [Download]
- GZip compression is disabled because of potential memory leaks.
Version 2.0.3 (July 29, 2009) [Download]
- Fixed: installation process terminates in some environments with the "Cannot get effective rights from ACL: Access is denied" error messsage.
- Fixed: WMI permissions are not configured properly on Windows Server 2003/XP.
Version 2.0.2 (July 22, 2009) [Download]
- Fixed: adjusting permissions can be performed very slowly during the installation process.
Version 2.0.1 (July 19, 2009) [Download]
- Fixed: installation fails on German versions of Windows.
Version 2.0 (July 18, 2009) [Release Notes] [Download]
Enhanced Security
- New VisualSVN Server Admins group: a new group "VisualSVN Server Admins" has been added and has all of the necessary permissions to manage VisualSVN Server.
- The VisualSVN service now runs under the built-in Network Service account, which has minimal privileges for better security.
- TraceEnable Apache option is turned off to increase server security by blocking diagnostic traces that can be initiated remotely.
- Fine-grained access permissions are configured for the repositories root folder by default.
- The SSL certificate is stored in the dedicated folder "certs" with restricted access permissions, for better default security.
Enhanced Logging
- New Dedicated Event Log: a new event log named "VisualSVN Server" is used to store all server related log messages.
- Complete logging: access and operational logging is added. logs all Subversion activity in terms of raw HTTP transactions or logical Subversion requests (Enterprise Edition only).
- System error code and description added to error messages.
Enhanced Management console
- Remote server administration provides a familiar, highly usable, transparent user interface to remote server instances (Enterprise Edition only).
- Import of SSL certificate bundled with private key now supported.
- New context menu command named New / Project Structure that automates the creation of trunk, branches and tags folders that most developers use in their work.
- VisualSVN Server cleans up permission references to Subversion users and group when users and groups are deleted, and cleans up permission references when repositories are deleted.
- VisualSVN Server version number is displayed on the dashboard.
- Help command for VisualSVN Server Manager in the console main menu now works properly.
- VisualSVN Server blocks the import of a repository if the source or destination folders are nested inside each other.
- The "Delete Repository" command removes repositories permanently and does not use the Recycle Bin.
Commit e-mail notification improvements
- Option to suppress file differences in email notifications: VisualSVNServerHooks now accepts the "--no-diffs" option to suppress files differences in emailed commit notifications.
- End-of-line markers are now handled correctly in the commit notifications.
Installation improvements
- Preserve service configuration settings during the upgrade.
- Standard HTTP and HTTPS ports are now defaults: VisualSVN Server suggests to use the standard 80 and 443 ports by default (instead of 8080 and 8443 ports as in previous versions).
- Windows Firewall configuration at install time is improved.
- Installation rollback corrected.
Other changes
- HTTP result 403 (forbidden error) now implemented fully: previously in versions 1.7.x and earlier, VisualSVN Server occasionally returned an HTTP 500 (server internal) error in response to a permission failure, which was misleading to the user. The correct 403 (forbidden) error is returned now.
- URL for VisualSVN Server access now permits no trailing backslash: users may now omit trailing slash in the server root URL and access the server.
- GZip compression is enabled by default for optimum network bandwidth usage.
Version 1.7.3 (June 29, 2009) [Download]
- Updated to Subversion 1.6.3. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.3/CHANGES - Updated to Apache 2.2.11. For further details please see
http://www.apache.org/dist/httpd/CHANGES_2.2.11
Version 1.7.2 (May 18, 2009) [Download]
- Updated to Subversion 1.6.2. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.2/CHANGES - Fixed: dots in repository names are not allowed.
- Fixed: "413 Request Entity Too Large" error when updating extremely large working copies.
- Fixed: installation fails with "Custom action GenerateSSLKey failed..." error message.
Version 1.7.1 (April 16, 2009) [Download]
- Updated to Subversion 1.6.1. For further details please see
http://svn.apache.org/repos/asf/subversion/tags/1.6.1/CHANGES - Significant performance improvement when Windows authentication is used.
- Fixed: redundant authorization event log records when Windows authentication is used.
- Updated to OpenSSL 0.9.8k.
- Updated to Neon 0.28.4.
- New icons and logo image.
Version 1.7 (March 24, 2009) [Release Notes] [Download]
- Updated to Subversion 1.6. For further details please see
Subversion 1.6 Release Notes. - Updated to OpenSSL 0.9.8j.
Version 1.6.4 (March 16, 2009) [Download]
- New VisualSVNServerHooks parameters: smtp-port, smtp-user, smtp-password and smtp-ssl are added.
- mod_log_config Apache module is included into the installation package.
-
Updated to Subversion 1.5.6. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.6/CHANGES
Version 1.6.3 (January 12, 2009) [Download]
- Updated to Subversion 1.5.5. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.5/CHANGES - Potentially insecure SSL 2.0 protocol is disabled.
- mod_alias and mod_proxy Apache modules are included into the installation package.
- Client IP address is included to error log messages
Version 1.6.2 (November 03, 2008) [Download]
- Updated to Subversion 1.5.4. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.4/CHANGES - Fixed: IP address configuration for server binding can be lost on upgrade.
- Do not check for occupied TCP port on upgrade if VisualSVN Server configured to listen on specific interfaces.
Version 1.6.1 (October 14, 2008) [Download]
- SVNPathAuthz short_circuit option is disabled (serious authorization problems are encountered).
- Fixed: installation doesn't recognize the folder where the previous version is installed.
Version 1.6 (October 13, 2008) [Release Notes] [Download]
- New: Certificate Management.
- New: Advanced server binding configuration.
- New: Simple email notifications hook.
- New: Subverison hook for checking filename case-sensitivity.
- New: Logging to the Event Log.
- New: Commands to create/delete folder in repository.
- New: Server name configuration.
- Updated to Subversion 1.5.3. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.3/CHANGES - mod_auth_digest Apache module is removed from installation.
- Fixed: VisualSVN Server crashes on folders with chinese characters.
- Maximize button is available in the hook edit window.
- Improved error message is logged when service has failed to start during installation.
- Installation process is continued even if firewall configuration is failed.
- Do not reset firewall settings on upgrade.
- Firewall configuration is improved on Windows Vista and Windows Server 2008.
- Installation of an older version over the newer one is prohibited.
- Apache and Subversion package versions are displayed during the installation.
- Existing hooks are marked by bold lines in the Properties/Hooks window.
- VisualSVN Server properties dialog splited into separate pages
- SVNPathAuthz short_circuit option is enabled (improve performance on authorization intensive operations)
Version 1.5.3 (September 08, 2008) [Download]
- Updated to Subversion 1.5.2. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.2/CHANGES
Version 1.5.2 (July 30, 2008) [Download]
- Updated to Subversion 1.5.1. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.5.1/CHANGES - Fixed: empty folders have plus sign.
- Option to create default structure (trunk, branches, tags) replaced with a link to repository layout recommendations.
Version 1.5.1 (July 08, 2008) [Download]
- Updated to Apache 2.2.9. For further details please see:
http://www.apache.org/dist/httpd/CHANGES_2.2.9 - Context menu for repository node reorganized: "Manage Security" and "Manage Hooks" commands are added to "All Tasks" submenu. "Properties" top level context menu command is also added.
- Fixed: extra slash in vsvnvars.bat removed.
Version 1.5 (June 19, 2008) [Release Notes] [Download]
- Updated to Subversion 1.5. For further details please see
Subversion 1.5 Release Notes. - Windows authorization implemented with Windows groups support (authorization settings are stored in separate "authz-windows" file in format similar to Subversion authorization with SID instead of user name)
- UI for editing Subversion hooks implemented.
- New command for repository format upgrade. (it's necessary to use new 1.5 features)
- Authentication type (Subversion or Windows) can be selected during installation
- User name can be stored in UPN format (user@DOMAIN)
- VisualSVN Server recognizes user name in DOMAIN\user format.
- Command for starting command prompt added to root node.
- "Access denied" is returned for authentication errors only ("internal server error" is returned for other cases)
- mod_authn_windows renamed to mod_authnz_visualsvn.
- Warning about AcceptEx in EventViewer is removed
- apr-util is built without dependency on apr-iconv (it is not used neither by Apache nor by Subversion)
- Subversion is built in dll instead of static linking
- httpd.exe renamed to VisualSVNServer.exe
- Fixed: no sort order in "Select User/Group" dialog.
- Fixed: potential leak of token handles in mod_authn_windows
Version 1.1 (March 24, 2008) [Release Notes] [Download]
- Added support for authentication via Windows domain.
- Implemented VisualSVN Server dashboard.
- It is now possible to edit server configuration via management console, without reinstallation.
- Implemented "Import Existing Repository" command.
- New user-defined configuration file named httpd-custom.conf has been added.
- URL of the selected node is now displayed in the description bar.
- New toolbar for the "VisualSVN Server" node has been added.
- VisualSVN Server now will always use hostname as "server name".
- VisualSVN Server will now suggest to subscribe to our news channel during installation.
- "Copy URL" and "Browse" commands will now issue a warning if there are no users defined.
- Warn user if the port we use is occupied by another service.
- "Create Repository" command has been renamed to "Create New Repository".
- "Copy URL" command has been renamed to "Copy URL to Clipboard".
- Fix: File C:\.rnd was being created during installation.
- Fix: VisualSVN Server couldn't be installed if there was no "C:\" drive in the system.
Version 1.0.3 (March 04, 2008) [Download]
- "RESTRICTED USE DURING EVALUATION PERIOD" and "LICENSE FEES AND PAYMENTS" sections removed from VisualSVN Server license.
- Fixed: Newer files may be removed when installing older version of VisualSVN Server.
Version 1.0.2 (March 01, 2008) [Download]
- Fixed: Conflicts with some antivirus software. Win32DisableAcceptEx directive added to httpd.conf.
- Fixed: Memory leaks on high load with SSL enabled.
- Updated to Subversion 1.4.6. For further details please see:
http://svn.apache.org/repos/asf/subversion/tags/1.4.6/CHANGES - Updated to Apache 2.2.8. For further details please see:
http://www.apache.org/dist/httpd/CHANGES_2.2.8
Version 1.0.1 (November 30, 2007) [Download]
- Fixed: VisualSVN Server writes messages "Resolve Partial Assembly failed for Microsoft.VC80.CRT." to System Error Log on some configurations.
- Fixed: Modify option doesn't work in installer.
Version 1.0 (November 15, 2007) [Download]
Initial release.