<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/subversion, branch yocto-2.2.3</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-2.2.3</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-2.2.3'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2017-01-11T17:21:44+00:00</updated>
<entry>
<title>subversion: Fix issues in LDFLAGS sed manipulation</title>
<updated>2017-01-11T17:21:44+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2016-12-07T13:54:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=3c6b603bc71f265afa94926e30f87f2eb67a2a20'/>
<id>urn:sha1:3c6b603bc71f265afa94926e30f87f2eb67a2a20</id>
<content type='text'>
The existing sed expression can match expressions like
--sysroot=/some/path/xxx-linux/ which clearly isn't intended and
injects incorrect paths into LDFLAGS.

Fix this in the same way we address the problem in CFLAGS. This fixes corrupt
build paths and incorrect paths in .la files amongst other issues.

(From OE-Core rev: 9a8382422ddbb0972dc25b752204f4908bb9857c)

(From OE-Core rev: 980140fc0735df66592c09acda9686386711f2b5)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: fix "svnadmin create" fail on x86</title>
<updated>2016-11-16T10:37:58+00:00</updated>
<author>
<name>Dengke Du</name>
<email>dengke.du@windriver.com</email>
</author>
<published>2016-11-02T07:12:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d16356eb268cbd40a9977da88806da4649fb1071'/>
<id>urn:sha1:d16356eb268cbd40a9977da88806da4649fb1071</id>
<content type='text'>
When run the following command on x86:

        svnadmin create /var/test_repo

It cause segmentation fault error like the following:

        [16499.751837] svnadmin[21117]: segfault at 83 ip 00000000f74bf7f6 sp 00000000ffdd9b34 error 4 in libc-2.24.so[f7441000+1af000]
        Segmentation fault (core dumped)

This is because in source code ./subversion/libsvn_fs_fs/low_level.c,
function svn_fs_fs__unparse_footer, when:

        target arch:    x86
        apr_off_t:      4 bytes

if the "APR_OFF_T_FMT" is "lld", it still use type "apr_off_t" to pass
data to apr, but in apr source code file apr_snprintf.c the function
apr_vformatter meet "lld", it would use the:

        i_quad = va_arg(ap, apr_int64_t);

It uses the apr_int64_t to deal data, it read 8 bytes, so the follow-up
data may be error.

(From OE-Core rev: 7ea7e3db7801b58495b89a95ec2751d618d3a29f)

(From OE-Core rev: 81b9ac05bdb3dc89c6fd17acbfff7cc4f4685108)

Signed-off-by: Dengke Du &lt;dengke.du@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: 1.9.3 -&gt; 1.9.4</title>
<updated>2016-08-25T22:03:45+00:00</updated>
<author>
<name>Robert Yang</name>
<email>liezhi.yang@windriver.com</email>
</author>
<published>2016-08-23T00:39:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5a35913b86173fe7136ff8c0a24a6c6660875ba2'/>
<id>urn:sha1:5a35913b86173fe7136ff8c0a24a6c6660875ba2</id>
<content type='text'>
(From OE-Core rev: 8620d13f8cf18be13429b0015d11e4efefe75b20)

Signed-off-by: Robert Yang &lt;liezhi.yang@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: remove unnecessary python dependency</title>
<updated>2016-06-01T11:38:42+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alexander.kanavin@linux.intel.com</email>
</author>
<published>2016-05-06T15:47:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=79797a8b9b384cd3fa978764f5d2e57e8104ebca'/>
<id>urn:sha1:79797a8b9b384cd3fa978764f5d2e57e8104ebca</id>
<content type='text'>
It would be useful if swig was enabled, but it isn't.

(From OE-Core rev: 54cbeb2975e2ea386386fce077146935afa0f719)

Signed-off-by: Alexander Kanavin &lt;alexander.kanavin@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: Upgrade 1.9.2 -&gt; 1.9.3</title>
<updated>2016-01-15T11:54:47+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2016-01-11T15:01:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b08dfb5d60607107a54db451b64cb65adaaeeb42'/>
<id>urn:sha1:b08dfb5d60607107a54db451b64cb65adaaeeb42</id>
<content type='text'>
(From OE-Core rev: 7423386923a37bca21aef99eea8dddf572d51a13)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: update to 1.9.2</title>
<updated>2015-12-12T23:42:54+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alexander.kanavin@linux.intel.com</email>
</author>
<published>2015-12-07T17:46:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=21e35df191a88635b6cb829ebed52f5b94d5542c'/>
<id>urn:sha1:21e35df191a88635b6cb829ebed52f5b94d5542c</id>
<content type='text'>
Drop backported CVE fix patches
libtool2.patch has been rebased and renamed to 0001-Fix-libtool-name-in-configure.ac.patch
LICENSE checksum has been updated because more 3rd party attributions have been added to it,
it's otherwise still Apache 2.

(From OE-Core rev: b57f57ea092f93bd7e1268b04c7d3c4af2149a77)

Signed-off-by: Alexander Kanavin &lt;alexander.kanavin@linux.intel.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: fix CVE-2015-3187</title>
<updated>2015-12-01T21:32:05+00:00</updated>
<author>
<name>Wenzong Fan</name>
<email>wenzong.fan@windriver.com</email>
</author>
<published>2015-11-17T05:38:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=04034e75e0a75d97416d0e22c0a7028d14af011f'/>
<id>urn:sha1:04034e75e0a75d97416d0e22c0a7028d14af011f</id>
<content type='text'>
The svn_repos_trace_node_locations function in Apache Subversion before
1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used,
allows remote authenticated users to obtain sensitive path information
by reading the history of a node that has been moved from a hidden path.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3187-advisory.txt

(From OE-Core rev: 6da25614edcad30fdb4bea8ff47b81ff81cdaed2)

Signed-off-by: Wenzong Fan &lt;wenzong.fan@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: fix CVE-2015-3184</title>
<updated>2015-12-01T21:32:05+00:00</updated>
<author>
<name>Wenzong Fan</name>
<email>wenzong.fan@windriver.com</email>
</author>
<published>2015-11-17T05:38:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f91aedfb56f121883f341958fe9228dc7e75cf2f'/>
<id>urn:sha1:f91aedfb56f121883f341958fe9228dc7e75cf2f</id>
<content type='text'>
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before
1.8.14, when using Apache httpd 2.4.x, does not properly restrict
anonymous access, which allows remote anonymous users to read hidden
files via the path name.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3184-advisory.txt

(From OE-Core rev: 29eb921ed074d86fa8d5b205a313eb3177473a63)

Signed-off-by: Wenzong Fan &lt;wenzong.fan@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion: add explicit dependency on file-replacement-native for native builds</title>
<updated>2015-10-27T07:24:30+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2015-10-19T21:48:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9336e1fd80a4f55f8b19b0120b0748c225f556e8'/>
<id>urn:sha1:9336e1fd80a4f55f8b19b0120b0748c225f556e8</id>
<content type='text'>
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>subversion_1.8.13.bb: Upstream-Status updated to Accepted</title>
<updated>2015-07-20T09:40:40+00:00</updated>
<author>
<name>Jose Lamego</name>
<email>jose.a.lamego@linux.intel.com</email>
</author>
<published>2015-07-14T09:01:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=873b8edd4100aa6a0d21e2bea20fbe7539de041a'/>
<id>urn:sha1:873b8edd4100aa6a0d21e2bea20fbe7539de041a</id>
<content type='text'>
Upstream-Status changed to Accepted due to [1]

[1] http://svn.apache.org/viewvc/subversion/trunk/build/ac-macros/serf.m4?r1=1594156&amp;r2=1689824

(From OE-Core rev: 7785c496df839bd811cb33aef4b54158e81aa2c5)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
