linux/poky.git/meta/recipes-devtools/subversion/subversion_1.8.9.bb, branch sumoMirror of git.yoctoproject.org/pokyhttps://git.enea.com/cgit/linux/poky.git/atom?h=sumo2014-11-06T16:45:18+00:00subversion: 1.8.9 -> 1.8.102014-11-06T16:45:18+00:00Richard Purdierichard.purdie@linuxfoundation.org2014-11-04T07:17:24+00:00urn:sha1:e20a85dab9d548cf809101133908ba945fb8c554
(From OE-Core rev: aa3aa6fff5b5e5b36b76665846e8b7f0408f7e81)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
subversion: Security Advisory - subversion - CVE-2014-35282014-11-04T10:27:08+00:00Yue TaoYue.Tao@windriver.com2014-10-22T07:37:29+00:00urn:sha1:a64e37ac0e3eeb5af9c20273e9ff4cc25e873a4c
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before
1.8.10 uses an MD5 hash of the URL and authentication realm to store
cached credentials, which makes it easier for remote servers to obtain
the credentials via a crafted authentication realm.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528
(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
subversion: Security Advisory - subversion - CVE-2014-35222014-11-04T10:27:07+00:00Yue TaoYue.Tao@windriver.com2014-10-22T07:37:28+00:00urn:sha1:514a91df49b0d358c26818c40e9e281a98fba8db
The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18
and 1.8.x before 1.8.10 does not properly handle wildcards in the Common
Name (CN) or subjectAltName field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof servers via a crafted
certificate.<a href=http://cwe.mitre.org/data/definitions/297.html
target=_blank>CWE-297: Improper Validation of Certificate with Host
Mismatch</a>
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3522
(From OE-Core rev: 06a33cd00ea11abec1ebe9d5883e44778075ccc6)
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
subversion: Disable make install parallelism2014-07-18T23:08:58+00:00Richard Purdierichard.purdie@linuxfoundation.org2014-07-18T12:40:31+00:00urn:sha1:449c53535d16db2a2228409f3b91fcd46ef9d38c
The Makefile generation for subversion is horrible, I can't figure out
where the dependencies are missing, it looks like they might be missing
everywhere. Give up and disable parallel make install.
(From OE-Core rev: f5569d30b98418b201766ad07b177aac5fae4a41)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
subversion: neon support was dropped, switch to serf2014-07-17T22:13:59+00:00Richard Purdierichard.purdie@linuxfoundation.org2014-07-17T20:37:38+00:00urn:sha1:1f45232dc008599501e138c5327c7f8a901dbf55
(From OE-Core rev: 1838153de3a68ac391bdec139446e496ad093763)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
subversion: Upgrade 1.7.7 -> 1.8.92014-07-17T11:28:50+00:00Richard Purdierichard.purdie@linuxfoundation.org2014-07-16T12:31:59+00:00urn:sha1:76f75e91ce1ad51a2c669d2b4d2fbddf1a113428
Dropped neon patches as neon support was dropped.
Dropped CVE patches as applied in later version
Added patch to avoid OS-X check which doesn't cross compile
Add PACKAGECONFIG for gnome-keyring
Addition to license:
For the file subversion/libsvn_subr/utf_width.c
* Markus Kuhn -- 2007-05-26 (Unicode 5.0)
*
* Permission to use, copy, modify, and distribute this software
* for any purpose and without fee is hereby granted. The author
* disclaims all warranties with regard to this software.
(From OE-Core rev: 99c3225cfe39f8de89555df5bd3f1e93cd731269)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>