Accepting request 184224 from devel:tools:scm:svn

Apache Subversion 1.8.1 [bnc#830031] CVE-2013-4131

OBS-URL: https://build.opensuse.org/request/show/184224
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=103

subversion-1.8.0.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a470803293a8aced445cff0f7b24b95ad276600af55d4b24b1e196fd2de87f10
-size 6711904

subversion-1.8.0.tar.bz2.asc

@@ -1,76 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
-Comment: GPGTools - http://gpgtools.org
-
-iQIcBAABCgAGBQJRuZJdAAoJEGLUj60WoN4B24IP/3uFSZrIA5a4nbrb2gzQIBZL
-sS6yKC2uA7lpAJx6eG8GVN9P5PMZtWfdYRBcq9Pm+hPaHaG9jhj04hck5aR5wwyg
-YEm4bsMfkeG/IPpBCOg2kuU9KipqCOeRIJFhbOMz3ctWnJc/WTPSAI7YsrRE7NuG
-mQexpTWt04BdHviDDg7hZDAN0eYXKud42hk+UxQYjiejCt1/84EtfQIsHs5GXFay
-5g+X9gc4iIDmPle5Y52aZ3gOejgu/sJN80zU3j+C8CqG5aniuLPkmSKgbPd7l1M4
-idGO0tROH6dUYRIIG8q0uoCaBK02+Kw2gpZSsYvf6EvEBAeHQCYFwq0iVBlrUGBZ
-2iUEJfXJ4VWQm5w4SzVPyEeaNWtDh66J6ZM89JEVe6pnT5GDLgDu1Fu5r1QHJ5pq
-wuFzxdHXGl4KRUJOZT4oHzycjVEePIZRAQKQ2joJ36Q/zs9ZyiTw0nL9ATyNeQd8
-Sv8SudI7rgrHMy1GIcYbzIVdG+58Ad+WqAndgmG1KJrKZA7SG5U7UTayJXYIKhfe
-7hnNrn3OcyG9saftD2VZ2vyefBDbeFRcFwqP2ZCfTNqNxx1LC3UFqEQ78KHm8CDY
-fVLv8xfPBXm8S+eVRCILXP1fFf1MzEvDwlPELYboJrCqnvPUUYa8pjsuGb2ZBGtC
-82GNrq1om9tA/L86t1C3
-=BPj9
------END PGP SIGNATURE-----
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.13 (OpenBSD)
-
-iQEcBAABAgAGBQJRuz/qAAoJEE99uqmaWblzVhcIAKGghKe6ZRRefpfRBQ2Kbdso
-T0mDFeKAnfPfdf3EDSvaqOLCNoY8wOlmx7nbsYGJPnsNoz66XerPlgzhZoC6tHUT
-Yn48q7DAkcB2FYg9oJlgvQxRELpsZIcW53rC/EEPkZWTScY2fTLf8DM6NgQGFiE0
-+9dOheRycsoSESjzzsVVyBcprydWfXT3IOuOao9jSO85m32t0XgbxZtzNOewEzgX
-wEbn91yYTbx+sxTpv8JX9GbH9lE6pqsH/Ldenl5UzZEirCppPKQidm1RFO83+E3r
-7gFKOkgO554AqxUgYR6n7i4Q1A00O/kSdt62jhs3gyTfUD2TtIHB1Q7rmZ/3xNk=
-=WHUI
------END PGP SIGNATURE-----
------BEGIN PGP SIGNATURE-----
-Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
-Comment: GPGTools - http://gpgtools.org
-
-iQIcBAABCgAGBQJRvHF5AAoJEBvKZYajR5Q/hqkQAJZY94/Js2joZeGfV7JinmO4
-qRZpnq9h7hPiI1KsRKUelHi2Nx4pSsrCfBJO5j1ma0KQSvcHTT+vulQh21Gajl3e
-T1TF7tX77Dsdp7rdPRFrnd3g74koLOPVk8PXM3TSKj5l5TCBHpCflYY9TovfiTYa
-efbpXmzVLVeRPfBGeCsXSXKOlhgcmsWjufLGjz1u5sbPrpxQ9ijZegRsZV0P7j5y
-vTE4cPQng0hO9kong/o41QDctwEAeunkqF2T7mMv7nkf+J20N2r5UB/d7lUblt0v
-2vobIvpR5ZO8bUGqh5do03+bL2AUMvcYMTkmQrylDPTMU/Ou2YXA0ppdjIV4zdfH
-wmDc88It7M8bl9MNYOsR7IoNDC8fgGMJIVa+RYeoqyUZS+QS0l5OXcZ3/TIGlT02
-1gSY9HmAfYLCTfC6lOJqcSxB4VCDlHZGRegS81nYoXJe9bVXBH6XYyRP4aZew9v3
-hngDA8EpiwpNQDSe7E7qwmvTDdmh1r0ikcV7OKwldMJBJDGMtDM6LsJL+rQCNmjO
-MS7/y2EKEGf3I2gV5QV4GPER/Pbq1jgjunyimA3mqWL4gc2bjX+l9ez1oVxEVJJ5
-IAIYQWhpZfbGVUAvh6grBhczKsVe9n67Mkz01eez+IALpO4u5qYVMM1rHMrpARRf
-lyD6mZmF81qy7laFKEqY
-=Qo1h
------END PGP SIGNATURE-----
------BEGIN PGP SIGNATURE-----
-Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
-Comment: GPGTools - http://gpgtools.org
-
-iQEcBAABCgAGBQJRvHDyAAoJECm4ktDIYoUBBZ0H/3jmU3Z9BUQTMUcp9Vqln2CW
-wL1uylJOurZNsrSUwxCxeUwAiVvokI59mlDrsYTdNIaSstIRO6/ogGznUzWqE+Hb
-icuc4x1sxIMX38sntUxP3W8kwk2wLAlW25emaPmSdylMwMHGRD/plC+NELXVPlVf
-ba8gvJ1vtyeqV2UNY2X4OvlKLZrMhEoP9FDNWagN228t5LB1NVEjOyw825jABRhK
-+lIevtTTdZg8WGplE1o77NxY36Nv2UFmMOc1JVp3WajmRF5+aedzfvV3mh+xhlQR
-tR9E4w5QCHXNm7R0lDFMjDqblS17mLDCg7tVqHl+1SCT2UzuoHp5mllfGiOJ2Ak=
-=/ONU
------END PGP SIGNATURE-----
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.11 (GNU/Linux)
-
-iQIcBAABCAAGBQJRvSxHAAoJEPXg8AH+aBMzy7QQAJIhTGb4Mc4ktah//UPLUcXG
-cZ/fdIpPxC8OgjNkThjFVljFupvp8bCLSf2/+/EUhbzqmR1i2Xh25qEjvzTWMJHc
-idqmL5OSzOWYSq4BDU8I+NuNc4Q6eUWMl8HOiLxcENFeejOOaNecVtoABXzrIryh
-VBzByVVBuC7oQztbAmWlsilk5ySaDCKQV9gBihe/adhCS32oojTIeACKnpJE2tXB
-1D0ywAl/eLNWALzb42EimIgesc7Qz1XVaby7kUrUfM418prRycqZqGUcVB6VHVog
-4Tb9/TocD+y/SrBho/ORSJo7mR/smSXPpYNGgaMXSvXrjU/fUwvqEn835nQ/9dFN
-5Eg/twP7Uy6atoj+qLujqcSWhgg0Xvz1mVwLaXGC8L46acKvUSeo7MdlDHGGV4c3
-/Qo8RJ0vHNyZcu6fjkj+QsU0MAvBvhWmwIrCBDVblZn5N7VHx68HHQi//xCoScTq
-D+5DA7E+3Qa/HrEUM8n1yEaVnkAJMS30AJ0u2mVfXq+2TeAeyvx2BreLH0cpKe86
-ppWyTz26pId9xEADDaa8MW8AhPxSSwMC3c2WNIRScMzHvioeu/K0YTzc0v3s73np
-rmnsK3aaFfgCw735TB+hfAfkLdzOnAVRiC+Wp6HBjAqhIUjtTrFnHBLLN4otNOwJ
-27erlHjo1xGYxhnL9QUd
-=ld0e
------END PGP SIGNATURE-----

subversion-1.8.1.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:faaaaedba25777331e761884598af1dd9fe33631d6415b2e0ba5348867c4edb4
+size 6770843

subversion-1.8.1.tar.bz2.asc

@@ -0,0 +1,40 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
+Comment: GPGTools - http://gpgtools.org
+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+=Ro31
+-----END PGP SIGNATURE-----
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+iQEcBAABCAAGBQJR5mILAAoJEHbXiOHtGlmc1FAH/R7npMLg5K/HcZx6QNzHmYE6
+JNGBlHSUr9SSs18IyC4DIpHS3XMWWYfkXGOUYdxerZSPpmd807i0ZutBt+Yg+A0h
+rE0+xte1TIG7UTQRNCn4Eu+4rgTBuDGgAU2+oQHzmAdGWvKfBNwhLz8PF/G65lDt
+0zPoeLdraUNYK4KmdiEUFv/AuLmn8bHj53aTIrrmvwKXw0ISOzRf2beFqRhVFhk1
+a483oP4uEeQdXNUwrA+Am4Ac6HZtoXrdWkTvjcEUnrNGgFacvO2fsjIUgEOUUZ5i
+BBnvAE6YmEF2FVcjvqSn3zEA6WqRt8bLIKs4C+b2mir8g/bFNEcGmOEJIvk2rLA=
+=1Svv
+-----END PGP SIGNATURE-----
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.13 (OpenBSD)
+
+iQEcBAABAgAGBQJR5o84AAoJEE99uqmaWblzP6AH/jijn3mD23xyWvlh8KgH2Yim
+l/eWH2vVL0BEnMA9cJSfQCVTEz1YZpctoXI4IMNrzvNSxFYBuInXqxndw+JSeECQ
+OHpgIgabycAfUPU8WB0vfazDH1h+7TWrOcCNy1scPR9KN28gbTd0O9/mC/jh+puh
+5z1Xkjqe2ZnIoHnf/4MPDbA6OI6cKbVh055n9ylZNNbpewYHCCywmk0IGH5PCL/G
+KoY1AQvGgIHwwWvE3V7A+Gqnn22bJBkx6clSyndHtXMv4VSjzN4Ek7Z//HqrVBG1
+1R+nns70OWFsFgw3RNyNyIQ1WRNUvcmY3ia6RKa8XE/8UGJlz7JkQr1KBME26JY=
+=WmJm
+-----END PGP SIGNATURE-----

subversion.changes

@@ -1,3 +1,89 @@
+-------------------------------------------------------------------
+Wed Jul 24 17:37:14 UTC 2013 - andreas.stieger@gmx.de
+
+- Apache Subversion 1.8.1 [bnc#830031] CVE-2013-4131
+- User-visible changes:
+  - Client- and server-side bugfixes:
+    * translation updates for German and Simplified Chinese
+    * improve sqlite error message output
+    * support platforms lacking mmap
+    * allow configuration files to start with UTF-8 BOM
+    * don't fail on UTF-8 data when encoding conversion not available
+    * improve error messages when encoding conversion fails
+  - Client-side bugfixes:
+    * merge: rename 'automatic merge' to 'complete merge'
+    * mergeinfo: reduce network usage for '--show-revs'
+    * ra_serf: improve http status handling
+    * merge: avoid unneeded ra session
+    * merge: reduce network usage
+    * merge: remove duplicated ancestry check
+    * ra_serf: fix 'Accept-Encoding' header for IIS interoperability
+    * svn status: improve documentation for lock columns
+    * ra_serf: fix support for 'get-file-revs-reversed' capability
+    * log: reduce network usage on repository roots
+    * diff: avoid temporary files when calling external diff
+    * upgrade: fix notification of 1.7.x working copies
+    * fix crash during tree conflict resolution
+    * interactive file merge: add two additional choices
+    * diff: use local style paths in error messages
+    * resolve: improve the interactive conflict resolution menu
+    * switch: use local style path in error message
+    * ra_serf: improve error output when receiving invalid XML
+    * svn cleanup: explain what the command does in help output
+    * blame: error on -r M:N where M>N unless server supports
+    * gpg-agent auth: don't try to use agent when unavailable
+    * gpg-agent auth: don't require GPG_TTY or TERM env vars
+    * update: fix some tree conflicts not triggering resolver
+    * commit: remove stale entries from wc lock table when deleting
+    * merge: fix --record-only erroring out on renamed path
+    * svnmucc: fix 'make install' symlink to work when DESTDIR is set
+    * wc: fix crash when target is symlink to a working copy root
+    * ra_serf: change "internal malfunction" errors to normal errors
+    * ra_serf: handle proxies not supporting chunked requests
+  - Server-side bugfixes:
+    * fsfs: resolve endless loop problem when repos/db/uuid has \r\n
+    * fsfs: remove revision property buffer limit
+    * mod_dav_svn: better status codes for anonymous user errors
+    * mod_dav_svn: better status codes for commit failures
+    * fix performance regression in 'svn log' against root
+    * allow deleting non-user-visible 'svn:' properties
+    * fsfs: fix crash on strict-alignment architectures
+    * svnadmin upgrade: fix error of non-sharded fsfs repositories
+    * svnadmin create: deny '--fs-type=fsfs --compatible-version=1.0'
+    * svnadmin upgrade: fix data loss when cancelling in last stage
+    * mod_dav_svn: fix incorrect path canonicalization
+
+  - Other tool improvements and bugfixes:
+    * fsfs-stats (tool): resolve segfault when passing invalid path
+    * svn-bench: fix help output
+    * svnpubsub: add version header to server
+
+ Developer-visible changes
+  - General:
+    * ra_serf: fix some test runner issues on Windows 
+    * fix two issues in reverse svn_ra_get_file_revs()
+    * handle --compatible-version=1.8 in the C tests
+    * improve clang compatibility
+    * use proper cancel baton when handling conflicts
+    * fs: BDB: provide proper error value from BDB
+    * ra_serf: tweak connection failed error value
+    * svn_client_log5: resolve possible segfault
+    * fix metadata_only move to work when target is unversioned node
+    * ra_svn: fix segfault with a NULL commit message
+    * Ev2: correctly initialize node kind in shims'
+    * Ev2: fix copyfrom URL construction in shims
+    * fs: improve test against newlines in filenames
+    * make building with BDB 6 an opt-in feature
+    * sqlite: allow placing amalgamation in build dir
+    * ra_svn: make sessions usable after log callback early out
+  - Bindings:
+    * swig-rb: fix tests with out-of-tree-builds
+    * javahl: fix encoding of error messages produced by javahl
+    * swig-pl: silence compiler warnings
+    * swig-pl: improve documentation
+- packaging changes:
+  * update keyring
+
 -------------------------------------------------------------------
 Fri Jun 21 20:30:57 UTC 2013 - andreas.stieger@gmx.de
 

subversion.spec

@@ -46,7 +46,7 @@
 %define svnuser svn
 
 Name:           subversion
-Version:        1.8.0
+Version:        1.8.1
 Release:        0
 # in-tree SWIG version to use for the build:
 %define swig_version   1.3.36
@@ -161,8 +161,7 @@ Source14:       svnserve.service
 Source15:       svnserve.tmpfiles
 Source42:       subversion.svngrep.sh
 Source43:       subversion.svndiff.sh
-# https://people.apache.org/keys/group/subversion.asc
+Source50:       https://people.apache.org/keys/group/subversion.asc#/subversion.keyring
-Source50:       subversion.keyring
 Source51:       https://www.apache.org/dist/subversion/%{name}-%{version}.tar.bz2.asc
 %if 0%{?suse_version} >= 1230
 BuildRequires:  gpg-offline