Update to 1.6.21 Changelog: Version 1.6.21 (04 Apr 2013, from /branches/1.6.x) http://svn.apache.org/repos/asf/subversion/tags/1.6.21 User-visible changes - Server-side bugfixes: * mod_dav_svn will omit some property values for activity urls (r1453780) * improve memory usage when committing properties in mod_dav_svn (r1443929) * fix mod_dav_svn runs pre-revprop-change twice (issue #3085) * fixed: post-revprop-change errors cancel commit (issue #2990) * improved logic in mod_dav_svn's implementation of lock. (r1455352) Developer-visible changes: - General: * fix a compatibility issue with g++ 4.7 (r1345740) This release addesses four security issues: CVE-2013-1845: mod_dav_svn excessive memory usage from property changes CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLsdiff -r1.1 -r1.2 pkgsrc/devel/subversion16/Makefile.common
(ryoon)
@@ -1,21 +1,16 @@ | @@ -1,21 +1,16 @@ | |||
1 | # $NetBSD: Makefile.common,v 1.1 2013/02/09 13:27:27 ryoon Exp $ | 1 | # $NetBSD: Makefile.common,v 1.2 2013/04/13 13:02:02 ryoon Exp $ | |
2 | # used by devel/java-subversion16/Makefile | |||
3 | # used by devel/p5-subversion16/Makefile | |||
4 | # used by devel/py-subversion16/Makefile | |||
5 | # used by devel/ruby-subversion16/Makefile | |||
6 | # used by devel/subversion-base16/Makefile | 2 | # used by devel/subversion-base16/Makefile | |
7 | # used by devel/subversion16/Makefile | 3 | # used by devel/subversion16/Makefile | |
8 | # used by www/ap2-subversion16/Makefile | |||
9 | 4 | |||
10 | DISTNAME= subversion-${SVNVER} | 5 | DISTNAME= subversion-${SVNVER} | |
11 | CATEGORIES= devel scm | 6 | CATEGORIES= devel scm | |
12 | MASTER_SITES= http://subversion.tigris.org/downloads/ | 7 | MASTER_SITES= http://subversion.tigris.org/downloads/ | |
13 | 8 | |||
14 | MAINTAINER= pkgsrc-users@NetBSD.org | 9 | MAINTAINER= pkgsrc-users@NetBSD.org | |
15 | HOMEPAGE= http://subversion.apache.org/ | 10 | HOMEPAGE= http://subversion.apache.org/ | |
16 | LICENSE= apache-1.1 | 11 | LICENSE= apache-1.1 | |
17 | 12 | |||
18 | # People who might update Makefile.version may not be set up to test | 13 | # People who might update Makefile.version may not be set up to test | |
19 | # ruby/python/perl and java bindings, and testing ap2-subversion16 is | 14 | # ruby/python/perl and java bindings, and testing ap2-subversion16 is | |
20 | # awkward. If you object to updates without these tests, please | 15 | # awkward. If you object to updates without these tests, please | |
21 | # volunteer to test patches and your email address can be recorded | 16 | # volunteer to test patches and your email address can be recorded |
@@ -1,11 +1,11 @@ | @@ -1,11 +1,11 @@ | |||
1 | # $NetBSD: Makefile.version,v 1.1 2013/02/09 13:27:27 ryoon Exp $ | 1 | # $NetBSD: Makefile.version,v 1.2 2013/04/13 13:02:02 ryoon Exp $ | |
2 | 2 | |||
3 | # When updating subversion, all packages are updated at the same time | 3 | # When updating subversion, all packages are updated at the same time | |
4 | # to have a consistent set of packages. A particularly tricky aspect | 4 | # to have a consistent set of packages. A particularly tricky aspect | |
5 | # is our interaction with the svn build system. See the make target | 5 | # is our interaction with the svn build system. See the make target | |
6 | # "svn-build-outputs-hack" in devel/subversion-base/Makefile when | 6 | # "svn-build-outputs-hack" in devel/subversion-base/Makefile when | |
7 | # changing the version. | 7 | # changing the version. | |
8 | 8 | |||
9 | .if !defined(SVNVER) | 9 | .if !defined(SVNVER) | |
10 | SVNVER= 1.6.20 | 10 | SVNVER= 1.6.21 | |
11 | .endif | 11 | .endif |
@@ -1,9 +1,9 @@ | @@ -1,9 +1,9 @@ | |||
1 | $NetBSD: distinfo,v 1.1 2013/02/09 13:27:27 ryoon Exp $ | 1 | $NetBSD: distinfo,v 1.2 2013/04/13 13:02:02 ryoon Exp $ | |
2 | 2 | |||
3 | SHA1 (subversion-1.6.20.tar.gz) = 215083e6fc367b46fa76be82841115a32f0a5766 | 3 | SHA1 (subversion-1.6.21.tar.gz) = bb7c4692216adf0eab89cd3e5d58bbc5908b639c | |
4 | RMD160 (subversion-1.6.20.tar.gz) = 3857eab430a2f7ffec6cd839fdbd6f149746ec3e | 4 | RMD160 (subversion-1.6.21.tar.gz) = c392a873e633fa596dad876c20a34ca9c58da374 | |
5 | Size (subversion-1.6.20.tar.gz) = 7538241 bytes | 5 | Size (subversion-1.6.21.tar.gz) = 7538503 bytes | |
6 | SHA1 (patch-ad) = 16fd291b20c96879c065cdb53009bf50aa2b24e7 | 6 | SHA1 (patch-ad) = 16fd291b20c96879c065cdb53009bf50aa2b24e7 | |
7 | SHA1 (patch-ae) = 24282273e2a2e6f768b303fa787cdfb90ef67899 | 7 | SHA1 (patch-ae) = 24282273e2a2e6f768b303fa787cdfb90ef67899 | |
8 | SHA1 (patch-build_generator_gen__make.py) = 5da97616ce95c8dc9e4abc0740e3c6768dd166a2 | 8 | SHA1 (patch-build_generator_gen__make.py) = 5da97616ce95c8dc9e4abc0740e3c6768dd166a2 | |
9 | SHA1 (patch-configure) = 1896256fbd44a4969b98d27a52d3f700e2ea49f2 | 9 | SHA1 (patch-configure) = 3025e4955980f34e1b17f5eb8c977c085597f126 |
@@ -1,13 +1,13 @@ | @@ -1,13 +1,13 @@ | |||
1 | $NetBSD: patch-configure,v 1.1 2013/02/09 13:27:27 ryoon Exp $ | 1 | $NetBSD: patch-configure,v 1.2 2013/04/13 13:02:02 ryoon Exp $ | |
2 | 2 | |||
3 | --- configure.orig 2012-12-27 18:22:29.000000000 +0000 | 3 | --- configure.orig 2013-03-28 23:39:13.000000000 +0000 | |
4 | +++ configure | 4 | +++ configure | |
5 | @@ -701,7 +701,7 @@ MFLAGS= | 5 | @@ -701,7 +701,7 @@ MFLAGS= | |
6 | MAKEFLAGS= | 6 | MAKEFLAGS= | |
7 | 7 | |||
8 | # Identity of this package. | 8 | # Identity of this package. | |
9 | -PACKAGE_NAME='subversion' | 9 | -PACKAGE_NAME='subversion' | |
10 | +PACKAGE_NAME='subversion16' | 10 | +PACKAGE_NAME='subversion16' | |
11 | PACKAGE_TARNAME='subversion' | 11 | PACKAGE_TARNAME='subversion' | |
12 | PACKAGE_VERSION='1.6.20' | 12 | PACKAGE_VERSION='1.6.21' | |
13 | PACKAGE_STRING='subversion 1.6.20' | 13 | PACKAGE_STRING='subversion 1.6.21' |