From 17b723c2ce2db22d06babe1ecfbf15220a218c9e481ec44e9f85a3496a9a8c15 Mon Sep 17 00:00:00 2001 From: OBS User buildservice-autocommit Date: Fri, 14 Jan 2011 00:45:36 +0000 Subject: [PATCH 1/6] Updating link to change in openSUSE:Factory/subversion revision 73.0 OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=25117f9e9f85c6ae0da381de58f078ef --- subversion.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/subversion.spec b/subversion.spec index 06f92af..8e9ea81 100644 --- a/subversion.spec +++ b/subversion.spec @@ -1,7 +1,7 @@ # # spec file for package subversion (Version 1.6.15) # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2009-2010 Pascal Bleser # # All modifications and additions to the file contributed by third parties @@ -42,7 +42,7 @@ Name: subversion Version: 1.6.15 -Release: 1 +Release: 2 # in-tree SWIG version to use for the build: %define swig_version 1.3.36 %define sqlite_version 3.6.13 From 3b4f3a67c8f167996b250d51943154f91cba53a7fc95be312fe3265b475d311d Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Wed, 19 Jan 2011 08:59:21 +0000 Subject: [PATCH 2/6] - fix typo in readme (bnc#661584) OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=39 --- subversion.README.SuSE | 2 +- subversion.changes | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/subversion.README.SuSE b/subversion.README.SuSE index 9a16957..b62b171 100644 --- a/subversion.README.SuSE +++ b/subversion.README.SuSE @@ -14,7 +14,7 @@ Since the BDB system libraries often introduce a new incompatible format during version upgrade, a backup/restore of all the subversion repositories must be performed _BEFORE_ doing such a system upgrade. 'svnadmin dump' will write the repository to stdout in a 'dumpfile' format. -This dumpfile can be loader later with 'svnadmin load'. +This dumpfile can be loaded later with 'svnadmin load'. 2. create svn user/group for svnserve diff --git a/subversion.changes b/subversion.changes index 77e089e..971bd2e 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Jan 19 09:59:05 CET 2011 - dmueller@suse.de + +- fix typo in readme (bnc#661584) + ------------------------------------------------------------------- Mon Dec 27 15:48:41 CET 2010 - dmueller@suse.de From 040f363b2a4274b06a5f5b8bbc426e3b2e8ac197c7f862aa9964f34930a494c5 Mon Sep 17 00:00:00 2001 From: Stefan Sperling Date: Mon, 31 Jan 2011 20:19:18 +0000 Subject: [PATCH 3/6] - fix misleading text in /etc/sysconfig/svnserve (+1 from mrueckert) OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=40 --- subversion.changes | 5 +++++ subversion.sysconfig.svnserve | 7 ++++--- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/subversion.changes b/subversion.changes index 971bd2e..a5127ab 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Jan 31 21:18:19 CET 2011 - stsp@elego.de + +- fix misleading text in /etc/sysconfig/svnserve (+1 from mrueckert) + ------------------------------------------------------------------- Wed Jan 19 09:59:05 CET 2011 - dmueller@suse.de diff --git a/subversion.sysconfig.svnserve b/subversion.sysconfig.svnserve index f54fd18..064de3b 100644 --- a/subversion.sysconfig.svnserve +++ b/subversion.sysconfig.svnserve @@ -5,9 +5,10 @@ ## Default "-d -R -r /srv/svn/repos" # # default options for the svnserve process -# it is recommended to provide only readonly access to your data. -# there is no authentication possible, everyone can read and write at will -# read the subversion documentation about more info +# the -R option enforces read-only access, i.e. write operations to the +# repository (such as commits) will not be allowed +# authentication should be configured before allowing write access, +# see http://svnbook.red-bean.com/en/1.5/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth # SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos" From b47af2b0675c71568c1a77eb50ce1a2d12b620be0525f9aa6460afa313dcc19a Mon Sep 17 00:00:00 2001 From: Stefan Sperling Date: Mon, 31 Jan 2011 20:22:26 +0000 Subject: [PATCH 4/6] - use proper capitalisation and punctuation in /etc/sysconfig/svnserve OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=41 --- subversion.changes | 5 +++++ subversion.sysconfig.svnserve | 22 +++++++++++----------- 2 files changed, 16 insertions(+), 11 deletions(-) diff --git a/subversion.changes b/subversion.changes index a5127ab..2099a37 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Jan 31 21:21:33 CET 2011 - stsp@elego.de + +- use proper capitalisation and punctuation in /etc/sysconfig/svnserve + ------------------------------------------------------------------- Mon Jan 31 21:18:19 CET 2011 - stsp@elego.de diff --git a/subversion.sysconfig.svnserve b/subversion.sysconfig.svnserve index 064de3b..62b5f43 100644 --- a/subversion.sysconfig.svnserve +++ b/subversion.sysconfig.svnserve @@ -4,28 +4,28 @@ ## Type: string ## Default "-d -R -r /srv/svn/repos" # -# default options for the svnserve process -# the -R option enforces read-only access, i.e. write operations to the -# repository (such as commits) will not be allowed -# authentication should be configured before allowing write access, -# see http://svnbook.red-bean.com/en/1.5/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth +# Default options for the svnserve process. +# The -R option enforces read-only access, i.e. write operations to the +# repository (such as commits) will not be allowed. +# Authentication should be configured before allowing write access. +# See http://svnbook.red-bean.com/en/1.5/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth # SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos" ## Type: string ## Default "svn" # -# svnserve should run as unprivileged user -# the userid/groupid svn is not created during package install -# run 'groupadd svn; useradd -d /srv/svn -s /bin/false -g svn svn' to create the userid/groupid +# svnserve should run as unprivileged user. +# The userid/groupid svn is not created during package install. +# Run 'groupadd svn; useradd -d /srv/svn -s /bin/false -g svn svn' to create the userid/groupid. # SVNSERVE_USERID="svn" ## Type: string ## Default "svn" # -# svnserve should run as unprivileged user -# the userid/groupid svn is not created during package install -# run 'groupadd svn; useradd -d /srv/svn -s /bin/false -g svn svn' to create the userid/groupid +# svnserve should run as unprivileged user. +# The userid/groupid svn is not created during package install. +# Run 'groupadd svn; useradd -d /srv/svn -s /bin/false -g svn svn' to create the userid/groupid. # SVNSERVE_GROUPID="svn" From 02181c2983809cc79a02398f3f0889ee4ac4556ac1cb0e3b9fa3e4663569cc29 Mon Sep 17 00:00:00 2001 From: Stefan Sperling Date: Thu, 3 Mar 2011 20:08:01 +0000 Subject: [PATCH 5/6] - update to 1.6.16 (SECURITY UPDATE) User-visible changes: * more improvement to the 'blame -g' memory leak from 1.6.15 (r1041438) * avoid a crash in mod_dav_svn when using locks (r1071239, -307) See CVE-2011-0715, and descriptive advisory at http://subversion.apache.org/security/CVE-2011-0715-advisory.txt * avoid unnecessary globbing for performance (r1068988) * don't add tree conflicts when one already exists (issue #3486) * fix potential crash when requesting mergeinfo (r902467) * don't attempt to resolve prop conflicts in 'merge --dry-run' (r880146) * more fixes for issue #3270. Developer-visible changes: * ensure report_info_t is properly initialized by ra_serf (r1058722) * locate errors properly on a malfunction (r1053208) * fix output param timing of svn_fs_commit_txn() on fsfs (r1051751) * for svn_fs_commit_txn(), set invalid rev on failed commit (r1051632, -8) * fix sporadic Ruby bindings test failures (r1038792) * fix JavaHL JVM object leak when dumping large revisions (r947006) * use Perl to resolve symlinks when building swig-pl (r1039040) * allow Perl bindings to build within a symlinked working copy (r1036534) * don't overwrite the LD_LIBRARY_PATH during make check-swig-pl (r946355) * improve unit tests for some fs functions (r1051744, -5, -3185, -241) OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=42 --- subversion-1.6.15.tar.bz2 | 3 --- subversion-1.6.16.tar.bz2 | 3 +++ subversion.changes | 27 +++++++++++++++++++++++++++ subversion.perl.LD_RUN_PATH.patch | 10 +++++----- subversion.spec | 4 ++-- 5 files changed, 37 insertions(+), 10 deletions(-) delete mode 100644 subversion-1.6.15.tar.bz2 create mode 100644 subversion-1.6.16.tar.bz2 diff --git a/subversion-1.6.15.tar.bz2 b/subversion-1.6.15.tar.bz2 deleted file mode 100644 index b5139eb..0000000 --- a/subversion-1.6.15.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b2919d603a5f3c19f42e3265c4b930e2376c43b3969b90ef9c42b2f72d5aaa45 -size 5515056 diff --git a/subversion-1.6.16.tar.bz2 b/subversion-1.6.16.tar.bz2 new file mode 100644 index 0000000..42a3bb0 --- /dev/null +++ b/subversion-1.6.16.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dce4897d62d0dc29ab03834ed1d66ede95c07702e32a0042f96c24c6f1213386 +size 5509729 diff --git a/subversion.changes b/subversion.changes index 2099a37..525d6a9 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,3 +1,30 @@ +------------------------------------------------------------------- +Thu Feb 24 11:24:33 UTC 2011 - stsp@elego.de + +- update to 1.6.16 (SECURITY UPDATE) + User-visible changes: + * more improvement to the 'blame -g' memory leak from 1.6.15 (r1041438) + * avoid a crash in mod_dav_svn when using locks (r1071239, -307) + See CVE-2011-0715, and descriptive advisory at + http://subversion.apache.org/security/CVE-2011-0715-advisory.txt + * avoid unnecessary globbing for performance (r1068988) + * don't add tree conflicts when one already exists (issue #3486) + * fix potential crash when requesting mergeinfo (r902467) + * don't attempt to resolve prop conflicts in 'merge --dry-run' (r880146) + * more fixes for issue #3270. + + Developer-visible changes: + * ensure report_info_t is properly initialized by ra_serf (r1058722) + * locate errors properly on a malfunction (r1053208) + * fix output param timing of svn_fs_commit_txn() on fsfs (r1051751) + * for svn_fs_commit_txn(), set invalid rev on failed commit (r1051632, -8) + * fix sporadic Ruby bindings test failures (r1038792) + * fix JavaHL JVM object leak when dumping large revisions (r947006) + * use Perl to resolve symlinks when building swig-pl (r1039040) + * allow Perl bindings to build within a symlinked working copy (r1036534) + * don't overwrite the LD_LIBRARY_PATH during make check-swig-pl (r946355) + * improve unit tests for some fs functions (r1051744, -5, -3185, -241) + ------------------------------------------------------------------- Mon Jan 31 21:21:33 CET 2011 - stsp@elego.de diff --git a/subversion.perl.LD_RUN_PATH.patch b/subversion.perl.LD_RUN_PATH.patch index 8a24d9a..b8bbd9d 100644 --- a/subversion.perl.LD_RUN_PATH.patch +++ b/subversion.perl.LD_RUN_PATH.patch @@ -6,14 +6,14 @@ ERROR: RPATH "/usr/src/packages/BUILD/subversion-1.5.x/subversion/libsvn_subr/.l Makefile.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---- Makefile.in.orig -+++ Makefile.in -@@ -680,7 +680,7 @@ $(SWIG_PL_DIR)/native/Makefile.PL: $(SWI +--- Makefile.in.orig 2011-02-24 13:08:55.738946798 +0100 ++++ Makefile.in 2011-02-24 13:16:28.567572756 +0100 +@@ -685,7 +685,7 @@ ./config.status subversion/bindings/swig/perl/native/Makefile.PL $(SWIG_PL_DIR)/native/Makefile: $(SWIG_PL_DIR)/native/Makefile.PL - cd $(SWIG_PL_DIR)/native; $(PERL) Makefile.PL + cd $(SWIG_PL_DIR)/native; $(PERL) Makefile.PL ; for i in `grep -wl ^LD_RUN_PATH Makefile Makefile.[^P]*` ; do sed -i 's@^LD_RUN_PATH.*@LD_RUN_PATH=@' $$i ; done - swig-pl_DEPS = autogen-swig-pl libsvn_swig_perl \ - $(SWIG_PL_DIR)/native/Makefile + # There is a "readlink -f" command on some systems for the same purpose, + # but it's not as portable (e.g. Mac OS X doesn't have it). These should diff --git a/subversion.spec b/subversion.spec index 8e9ea81..bd57cbd 100644 --- a/subversion.spec +++ b/subversion.spec @@ -41,8 +41,8 @@ %endif # suse_version > 1030 Name: subversion -Version: 1.6.15 -Release: 2 +Version: 1.6.16 +Release: 1 # in-tree SWIG version to use for the build: %define swig_version 1.3.36 %define sqlite_version 3.6.13 From 1e8e58edd45020d70660148a5d3ea64a8a1c888fb411a291cb40b5fa593abf5d Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Fri, 4 Mar 2011 12:47:49 +0000 Subject: [PATCH 6/6] - update to 1.6.16 (bnc#674949): OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=43 --- subversion.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/subversion.changes b/subversion.changes index 525d6a9..1128681 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Thu Feb 24 11:24:33 UTC 2011 - stsp@elego.de -- update to 1.6.16 (SECURITY UPDATE) +- update to 1.6.16 (bnc#674949): User-visible changes: * more improvement to the 'blame -g' memory leak from 1.6.15 (r1041438) * avoid a crash in mod_dav_svn when using locks (r1071239, -307)