linux/poky.git/meta/recipes-devtools/subversion, branch krogoth

subversion: Upgrade 1.9.2 -> 1.9.3

2016-01-15T11:54:47+00:00

(From OE-Core rev: 7423386923a37bca21aef99eea8dddf572d51a13) Signed-off-by: Richard Purdie

subversion: update to 1.9.2

2015-12-12T23:42:54+00:00

Drop backported CVE fix patches libtool2.patch has been rebased and renamed to 0001-Fix-libtool-name-in-configure.ac.patch LICENSE checksum has been updated because more 3rd party attributions have been added to it, it's otherwise still Apache 2. (From OE-Core rev: b57f57ea092f93bd7e1268b04c7d3c4af2149a77) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

subversion: fix CVE-2015-3187

2015-12-01T21:32:05+00:00

The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path. Patch is from: http://subversion.apache.org/security/CVE-2015-3187-advisory.txt (From OE-Core rev: 6da25614edcad30fdb4bea8ff47b81ff81cdaed2) Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

subversion: fix CVE-2015-3184

2015-12-01T21:32:05+00:00

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name. Patch is from: http://subversion.apache.org/security/CVE-2015-3184-advisory.txt (From OE-Core rev: 29eb921ed074d86fa8d5b205a313eb3177473a63) Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

subversion: add explicit dependency on file-replacement-native for native builds

2015-10-27T07:24:30+00:00

Signed-off-by: Richard Purdie

subversion_1.8.13.bb: Upstream-Status updated to Accepted

2015-07-20T09:40:40+00:00

Upstream-Status changed to Accepted due to [1] [1] http://svn.apache.org/viewvc/subversion/trunk/build/ac-macros/serf.m4?r1=1594156&r2=1689824 (From OE-Core rev: 7785c496df839bd811cb33aef4b54158e81aa2c5) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

subversion_1.8.13.bb: Regex modified to allow '-D' in paths

2015-07-07T23:01:23+00:00

Modified the regex sed in serf.m4 to allow the use of '-D' characters in project folder names without having compilation error from subversion-native. [YOCTO #7874] (From OE-Core rev: 04554b128c358e3c10f6581fd4506764a65240b8) Signed-off-by: Jose Lamego Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

subversion: Fix subversion-native on Fedora22

2015-06-27T21:42:56+00:00

Similarly to: http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=9b19d6548a345009a6de79a6820c07a72054d961 we also need to fix the subversion-native case with gcc5 by using the same fix to the BUILD_CPPFLAGS. (From OE-Core rev: a5e7a1e597e7bbe3bbc547f43a89d00a8a9a9924) Signed-off-by: Richard Purdie

subversion: remove 1.6.X recipes

2015-04-30T22:04:17+00:00

Removing the 1.6.X recipes, since there is a new version 1.8.X recipes, and hope that all projects already upgraded their premirror caches to use new format (From OE-Core rev: 65c4dcbefbe118eb1b04335d7d6171236a1315c2) Signed-off-by: Roy Li Signed-off-by: Richard Purdie

subversion: upgrade it from 1.8.11 to 1.8.13

2015-04-28T06:56:55+00:00

upgrade to fix two CVE defects: CVE-2015-0248 and CVE-2015-0251 (From OE-Core rev: cb00b9e0330970b5c768aae9ddd4703a7172acbe) Signed-off-by: Roy Li Signed-off-by: Richard Purdie