linux/poky.git/meta/recipes-devtools/subversion, branch kirkstone

subversion: ignore CVE-2024-45720

2025-02-24T15:00:53+00:00

Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-45720 This CVE is relevant only for subversion running on Windows. (From OE-Core rev: 52cbf6b96952896b16dad34d9eb215fcab88ded2) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman Reviewed-by: Sofiane Hamam Signed-off-by: Steve Sakoman

subversion: fix CVE-2024-46901

2024-12-20T14:01:45+00:00

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue. Repositories served via other access methods are not affected. References: https://nvd.nist.gov/vuln/detail/CVE-2024-46901 Upstream patches: https://subversion.apache.org/security/CVE-2024-46901-advisory.txt (From OE-Core rev: 2082038de00090e4b10a151068876f83c83f94c7) Signed-off-by: Jiaying Song Signed-off-by: Steve Sakoman

subversion: upgrade to 1.14.2

2022-05-04T12:07:33+00:00

This release is primarily to fix two CVEs: - CVE-2021-28544 - CVE-2022-24070 It also rewrites the macOS autoconf macros to be cross-compile friendly, so we don't need to delete them anymore. (From OE-Core rev: 76a74a8f22021e60326c001ccdd9b6ca200cd28e) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit ecfbc2ef45a76ab96d215954ca0a109545e6ff02) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

subversion: remove obsolete support for renamed libtool

2021-12-12T18:10:22+00:00

libtool is now longer renamed to ${host}-libtool, so remove the changes to support this. (From OE-Core rev: 0610df3e56e350493731d49fe67261b62d346573) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION

2021-02-26T15:21:21+00:00

Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: bb05814335e7101bfd8df0a11dc18a044e867bed) Signed-off-by: Dorinda Bassey Signed-off-by: Richard Purdie

subversion: upgrade 1.14.0 -> 1.14.1

2021-02-17T11:01:17+00:00

(From OE-Core rev: ee8414fa2bef13a64e71e941c3df8e7a0cd9e2d3) Signed-off-by: Richard Purdie

subversion: extend for nativesdk

2020-07-12T11:21:48+00:00

For SDK environments where people still use subversion, let it easily being added to buildtools-tarball to invite more developers relying on Yocto based SDKs without much requirement to setup anything on the development workplace. (From OE-Core rev: 586a15b76f879f49c5224116cbf506b7ccf96cd2) Signed-off-by: Jens Rehsack Signed-off-by: Richard Purdie

subversion: upgrade 1.13.0 -> 1.14.0

2020-06-09T12:14:00+00:00

Add python3native, as configure probes into python configuration. (From OE-Core rev: e57a7d0fb2e12bfd8179e6859a7fc28183b15d76) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie