Accepting request 72762 from devel:tools:scm:svn

- update to 1.6.17 (bnc#698205):
  includes security fixes [CVE-2011-1752, CVE-2011-1783, CVE-2011-1921] 
  User-visible changes:
    * improve checkout speed on Windows (issue #3719)
    * make 'blame -g' more efficient on with large mergeinfo (r1094692)
    * avoid some invalid handle exceptions on Windows (r1095654)
    * preserve log message with a non-zero editor exit (r1072084)
    * fix FSFS cache performance on 64-bit platforms (r1103665)
    * make svn cleanup tolerate obstructed directories (r1091881)
    * fix deadlock in multithreaded servers serving FSFS repositories (r1104093)
    * detect very occasional corruption and abort commit (issue #3845)
    * fixed: file externals cause non-inheritable mergeinfo (issue #3843)
    * fixed: file externals cause mixed-revision working copies (issue #3816)
    * fix crash in mod_dav_svn with GETs of baselined resources (r1104126)
            See CVE-2011-1752, and descriptive advisory at
            http://subversion.apache.org/security/CVE-2011-1752-advisory.txt
    * fixed: write-through proxy could direcly commit to slave (r917523)
    * detect a particular corruption condition in FSFS (r1100213)
    * improve error message when clients refer to unkown revisions (r939000)
    * bugfixes and optimizations to the DAV mirroring code (r878607)
    * fixed: locked and deleted file causes tree conflict (issue #3525)
    * fixed: update touches locked file with svn:keywords property (issue #3471)
    * fix svnsync handling of directory copyfrom (issue #3641)
    * fix 'log -g' excessive duplicate output (issue #3650)
    * fix svnsync copyfrom handling bug with BDB (r1036429)
    * server-side validation of svn:mergeinfo syntax during commit (issue #3895)
    * fix remotely triggerable mod_dav_svn DoS
            See CVE-2011-1783, and descriptive advisory at
            http://subversion.apache.org/security/CVE-2011-1783-advisory.txt
    * fix potential leak of authz-protected file contents

OBS-URL: https://build.opensuse.org/request/show/72762
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=77
This commit is contained in:
Sascha Peilicke 2011-06-06 14:19:09 +00:00 committed by Git OBS Bridge
commit aac8401a7b
5 changed files with 69 additions and 16 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:dce4897d62d0dc29ab03834ed1d66ede95c07702e32a0042f96c24c6f1213386
size 5509729

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d629c657e171616d30cc0cbddf1011a065770813bfc32f78c6940d09ca868124
size 5504298

View File

@ -1,7 +1,52 @@
-------------------------------------------------------------------
Mon May 30 14:07:41 UTC 2011 - stsp@elego.de
- update to 1.6.17 (bnc#698205):
includes security fixes [CVE-2011-1752, CVE-2011-1783, CVE-2011-1921]
User-visible changes:
* improve checkout speed on Windows (issue #3719)
* make 'blame -g' more efficient on with large mergeinfo (r1094692)
* avoid some invalid handle exceptions on Windows (r1095654)
* preserve log message with a non-zero editor exit (r1072084)
* fix FSFS cache performance on 64-bit platforms (r1103665)
* make svn cleanup tolerate obstructed directories (r1091881)
* fix deadlock in multithreaded servers serving FSFS repositories (r1104093)
* detect very occasional corruption and abort commit (issue #3845)
* fixed: file externals cause non-inheritable mergeinfo (issue #3843)
* fixed: file externals cause mixed-revision working copies (issue #3816)
* fix crash in mod_dav_svn with GETs of baselined resources (r1104126)
See CVE-2011-1752, and descriptive advisory at
http://subversion.apache.org/security/CVE-2011-1752-advisory.txt
* fixed: write-through proxy could direcly commit to slave (r917523)
* detect a particular corruption condition in FSFS (r1100213)
* improve error message when clients refer to unkown revisions (r939000)
* bugfixes and optimizations to the DAV mirroring code (r878607)
* fixed: locked and deleted file causes tree conflict (issue #3525)
* fixed: update touches locked file with svn:keywords property (issue #3471)
* fix svnsync handling of directory copyfrom (issue #3641)
* fix 'log -g' excessive duplicate output (issue #3650)
* fix svnsync copyfrom handling bug with BDB (r1036429)
* server-side validation of svn:mergeinfo syntax during commit (issue #3895)
* fix remotely triggerable mod_dav_svn DoS
See CVE-2011-1783, and descriptive advisory at
http://subversion.apache.org/security/CVE-2011-1783-advisory.txt
* fix potential leak of authz-protected file contents
See CVE-2011-1921, and descriptive advisory at
http://subversion.apache.org/security/CVE-2011-1921-advisory.txt
Developer-visible changes:
* fix reporting FS-level post-commit processing errors (r1104098)
* fix JVM recognition on OS X Snow Leopard (10.6) (r1028084)
* allow building on Windows with recent Expat (r1074572)
-------------------------------------------------------------------
Thu Apr 21 15:57:51 CEST 2011 - pth@suse.de
- Use getent to check for existance of user and group (bnc#688968).
-------------------------------------------------------------------
Thu Feb 24 11:24:33 UTC 2011 - stsp@elego.de
- update to 1.6.16 (bnc#674949):
- update to 1.6.16 (bnc#676949):
User-visible changes:
* more improvement to the 'blame -g' memory leak from 1.6.15 (r1041438)
* avoid a crash in mod_dav_svn when using locks (r1071239, -307)

View File

@ -1,5 +1,5 @@
#! /bin/sh
# Copyright (c) 1995-2002 SuSE Linux AG, Nuernberg, Germany.
# Copyright (c) 1995-20011 SuSE Linux AG, Nuernberg, Germany.
# All rights reserved.
#
# /etc/init.d/svnserve
@ -96,13 +96,21 @@ case "$1" in
echo -n "Starting svnserve "
## Start daemon with startproc(8). If this fails
## the return value is set appropriately by startproc.
if test -z "$SVNSERVE_USERID" || ! (/usr/bin/id $SVNSERVE_USERID &>/dev/null) \
UID_ENT="$(/usr/bin/getent passwd $SVNSERVE_USERID)"
GID_ENT="$(/usr/bin/getent group $SVNSERVE_GROUPID)"
test -z "$SVNSERVE_GROUPID" || ! (/usr/bin/id $SVNSERVE_GROUPID &>/dev/null);
if test -z "$SVNSERVE_USERID" -o -z "$UID_ENT"
then
echo
echo "User $SVNSERVE_USERID does not exist."
echo "Please check $SVNSERVE_CONFIG before starting this service."
rc_failed
elif test -z "$SVNSERVE_GROUPID" -o -z "$GID_ENT"
then
echo
echo "Group $SVNSERVE_GROUPID does not exist."
echo "Please check $SVNSERVE_CONFIG before starting this service."
rc_failed
else
startproc -u "$SVNSERVE_USERID" -g "$SVNSERVE_GROUPID" -e $SVNSERVE_BIN $SVNSERVE_OPTIONS
fi

View File

@ -41,7 +41,7 @@
%endif # suse_version > 1030
Name: subversion
Version: 1.6.16
Version: 1.6.17
Release: 1
# in-tree SWIG version to use for the build:
%define swig_version 1.3.36