384 Commits

Author SHA256 Message Date
Dominique Leuenberger
d516c31288 Accepting request 442781 from devel:tools:scm:svn
- Version update to 1.9.5:
  * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in
    mod_dontdothat and Subversion clients using http(s)://
- Client-side bugfixes:
  * fix accessing non-existent paths during reintegrate merge (r1766699 et al)
  * fix handling of newly secured subdirectories in working copy (r1724448)
  * info: remove trailing whitespace in --show-item=revision (issue #4660)
  * fix recording wrong revisions for tree conflicts (r1734106)
  * gpg-agent: improve discovery of gpg-agent sockets (r1766327)
  * gpg-agent: fix file descriptor leak (r1766323)
  * resolve: fix --accept=mine-full for binary files (issue #4647)
  * merge: fix possible crash (issue #4652)
  * resolve: fix possible crash (r1748514)
  * fix potential crash in Win32 crash reporter (r1663253 et al)
- Server-side bugfixes:
  * fsfs: fix "offset too large" error during pack (issue #4657)
  * svnserve: enable hook script environments (r1769152)
  * fsfs: fix possible data reconstruction error (issue #4658)
  * fix source of spurious 'incoming edit' tree conflicts (r1770108)
  * fsfs: improve caching for large directories (r1721285)
  * fsfs: fix crash when encountering all-zero checksums (r1759686)
  * fsfs: fix potential source of repository corruptions (r1756266)
  * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
    (issue #3084)
  * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
  * fsfs: fix unexpected "database is locked" errors (r1741096 et al)
  * fsfs: fix opening old repositories without db/format files (r1720015)
- Client-side and server-side bugfixes:
  * fix possible crash when reading invalid configuration files (r1715777)
- Bindings bugfixes:

OBS-URL: https://build.opensuse.org/request/show/442781
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=143
2016-12-02 15:42:05 +00:00
Tomáš Chvátal
ca87b0e6d8 - Version update to 1.9.5:
* bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in
    mod_dontdothat and Subversion clients using http(s)://
- Client-side bugfixes:
  * fix accessing non-existent paths during reintegrate merge (r1766699 et al)
  * fix handling of newly secured subdirectories in working copy (r1724448)
  * info: remove trailing whitespace in --show-item=revision (issue #4660)
  * fix recording wrong revisions for tree conflicts (r1734106)
  * gpg-agent: improve discovery of gpg-agent sockets (r1766327)
  * gpg-agent: fix file descriptor leak (r1766323)
  * resolve: fix --accept=mine-full for binary files (issue #4647)
  * merge: fix possible crash (issue #4652)
  * resolve: fix possible crash (r1748514)
  * fix potential crash in Win32 crash reporter (r1663253 et al)
- Server-side bugfixes:
  * fsfs: fix "offset too large" error during pack (issue #4657)
  * svnserve: enable hook script environments (r1769152)
  * fsfs: fix possible data reconstruction error (issue #4658)
  * fix source of spurious 'incoming edit' tree conflicts (r1770108)
  * fsfs: improve caching for large directories (r1721285)
  * fsfs: fix crash when encountering all-zero checksums (r1759686)
  * fsfs: fix potential source of repository corruptions (r1756266)
  * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
    (issue #3084)
  * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
  * fsfs: fix unexpected "database is locked" errors (r1741096 et al)
  * fsfs: fix opening old repositories without db/format files (r1720015)
- Client-side and server-side bugfixes:
  * fix possible crash when reading invalid configuration files (r1715777)
- Bindings bugfixes:

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=236
2016-11-30 08:16:42 +00:00
18f6f501c8 revert
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=235
2016-09-20 15:15:53 +00:00
af8dfefbd0 - swig-py and swig-rb test known to fail with swig 3.0.8 bsc#999069
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=234
2016-09-20 13:23:33 +00:00
Dominique Leuenberger
28725cade1 Accepting request 405451 from devel:tools:scm:svn
- Drop syslog.target from After wrt bnc#983938

OBS-URL: https://build.opensuse.org/request/show/405451
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=142
2016-07-01 08:00:06 +00:00
Tomáš Chvátal
31144eb34d - Drop syslog.target from After wrt bnc#983938
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=232
2016-06-29 10:52:49 +00:00
Dominique Leuenberger
2cd0a04235 Accepting request 391970 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/391970
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=141
2016-04-30 21:31:37 +00:00
5c989f264d Accepting request 391969 from home:AndreasStieger:branches:devel:tools:scm:svn
1.9.4

OBS-URL: https://build.opensuse.org/request/show/391969
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=230
2016-04-28 15:48:17 +00:00
Dominique Leuenberger
b20fb2c926 Accepting request 365111 from devel:tools:scm:svn
- make the subversion package conflict with KWallet and Gnome
  Keyring packages with do not require matching subversion versions 
  in SLE 12 and openSUSE Leap 42.1 and thus break the main package
  upon partial upgrade. Fix/workaround for boo#969159

OBS-URL: https://build.opensuse.org/request/show/365111
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=140
2016-03-07 12:26:49 +00:00
46f5cf17d0 - make the subversion package conflict with KWallet and Gnome
Keyring packages with do not require matching subversion versions 
  in SLE 12 and openSUSE Leap 42.1 and thus break the main package
  upon partial upgrade. Fix/workaround for boo#969159

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=228
2016-03-02 19:46:39 +00:00
Dominique Leuenberger
fa4ce42e79 Accepting request 349036 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/349036
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=139
2015-12-17 14:54:50 +00:00
a840c0b972 Accepting request 349035 from home:AndreasStieger:branches:devel:tools:scm:svn
Apache Subversion 1.9.3
    CVE-2015-5259 [boo#958299]
    CVE-2015-5343 [boo#958300]

OBS-URL: https://build.opensuse.org/request/show/349035
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=226
2015-12-15 17:01:15 +00:00
Dominique Leuenberger
e12250f378 Accepting request 342426 from devel:tools:scm:svn
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/342426
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=138
2015-11-05 10:35:49 +00:00
7853c8d76d - Fix copy-and-paste error in Supplements for GNOME keyring
integration

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=224
2015-10-28 13:31:39 +00:00
Stephan Kulow
5dcf5fe04a Accepting request 333214 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/333214
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=137
2015-09-30 03:51:36 +00:00
76627142e4 Accepting request 333213 from home:AndreasStieger:branches:devel:tools:scm:svn
Apache Subversion 1.9.2

OBS-URL: https://build.opensuse.org/request/show/333213
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=222
2015-09-23 19:09:08 +00:00
Dominique Leuenberger
8b21193a12 Accepting request 328820 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/328820
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=136
2015-09-08 15:39:29 +00:00
Tomáš Chvátal
389124c969 Accepting request 328817 from home:AndreasStieger:branches:devel:tools:scm:svn
svn 1.9.1

OBS-URL: https://build.opensuse.org/request/show/328817
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=220
2015-09-03 14:21:51 +00:00
Stephan Kulow
606a666ee7 Accepting request 326410 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/326410
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=135
2015-08-27 06:57:05 +00:00
58950c6e5e Accepting request 325800 from home:scarabeus_iv:branches:devel:tools:scm:svn
- Remove support for SLE11 from the spec file
- Use supplements instead of suggests on the other side for the
  password store
- Fix kde integration conditional to work nicely on openSUSE Leap

OBS-URL: https://build.opensuse.org/request/show/325800
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=218
2015-08-24 12:49:22 +00:00
Tomáš Chvátal
34adff0d70 - Use suggests instead of recommends to avoid 180+ new pkgs on
minimal setup due subversion-password-store bnc#942819

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=217
2015-08-24 10:58:09 +00:00
Dominique Leuenberger
51c0fcd050 Accepting request 324171 from devel:tools:scm:svn
update to 1.9.0

OBS-URL: https://build.opensuse.org/request/show/324171
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=134
2015-08-21 05:41:07 +00:00
67ed8c7702 Accepting request 321836 from devel:tools:scm:svn:1.9
Apache Subversion 1.9.0

OBS-URL: https://build.opensuse.org/request/show/321836
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=216
2015-08-18 20:04:51 +00:00
Dominique Leuenberger
48c8301152 Accepting request 320945 from devel:tools:scm:svn
- Pass --enable-broken-httpd-auth to configure. Assumes all apache2
  packages contain security patches regardless of their version number.
  Should fix the build on SLES12 and perhaps elsewhere.

- fix mod_authz_svn build with -Wunused-variable
  * subversion-1.8.14-unused-var-authnrequired.patch

- Apache Subversion 1.8.14
  This release fixes two vulnerabilities:
  * mod_authz_svn: do not leak information in mixed anonymous/authenticated
    httpd (dav) configurations (CVE-2015-3184) bnc#939514
  * do not leak paths that were hidden by path-based authz (CVE-2015-3187)
    bnc#939517
  Non-security fixes:
  * document svn:autoprops
  * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
  * improve conflict prompts for binary files
  * improve performance of 'ls -v'
  * improved Sqlite 3.8.9 query performance
  * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
  * mod_dav_svn: do not ignore skel parsing errors
  * detect invalid svndiff data earlier
  * prevent possible repository corruption on power/disk failures
  * fixed issue #4577: Read error with some repository nodes
  * fixed issue #4531: server-side copy (over dav) is slow
  * swig-pl: fix some stack memory problems
- Refreshed patch subversion-no-build-date.patch
- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch
- Add patch subversion-1.8.14-httpd-version-number-detection.patch

OBS-URL: https://build.opensuse.org/request/show/320945
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=133
2015-08-06 22:25:00 +00:00
Tomáš Chvátal
a42a45defa - fix mod_authz_svn build with -Wunused-variable
* subversion-1.8.14-unused-var-authnrequired.patch

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=214
2015-08-06 13:14:50 +00:00
Stefan Sperling
0b4fd41e51 - Pass --enable-broken-httpd-auth to configure. Assumes all apache2
packages contain security patches regardless of their version number.
  Should fix the build on SLES12 and perhaps elsewhere.

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=213
2015-08-06 11:30:01 +00:00
Stefan Sperling
404628c794 - fix mod_authz_svn build with -Wunused-variable
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=212
2015-08-06 11:11:59 +00:00
Tomáš Chvátal
2ab4bcad2b - Refreshed patch subversion-no-build-date.patch
- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch
- Add patch subversion-1.8.14-httpd-version-number-detection.patch

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=211
2015-08-06 11:04:24 +00:00
Tomáš Chvátal
4ae62bee3d httpd (dav) configurations (CVE-2015-3184) bnc#939514
bnc#939517

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=210
2015-08-06 11:03:02 +00:00
Stefan Sperling
c5a5192b66 - Apache Subversion 1.8.14
This release fixes two vulnerabilities:
  * mod_authz_svn: do not leak information in mixed anonymous/authenticated
    httpd (dav) configurations (CVE-2015-3184)
  * do not leak paths that were hidden by path-based authz (CVE-2015-3187)
  Non-security fixes:
  * document svn:autoprops
  * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
  * improve conflict prompts for binary files
  * improve performance of 'ls -v'
  * improved Sqlite 3.8.9 query performance
  * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
  * mod_dav_svn: do not ignore skel parsing errors
  * detect invalid svndiff data earlier
  * prevent possible repository corruption on power/disk failures
  * fixed issue #4577: Read error with some repository nodes
  * fixed issue #4531: server-side copy (over dav) is slow
  * swig-pl: fix some stack memory problems

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=209
2015-08-06 10:53:09 +00:00
Dominique Leuenberger
752e278cba Accepting request 307514 from devel:tools:scm:svn
- disable failing check-swig-rb, fixing build in Factory

OBS-URL: https://build.opensuse.org/request/show/307514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=132
2015-05-18 20:23:54 +00:00
94d2ce1fdc - disable failing check-swig-rb
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=207
2015-05-16 18:09:00 +00:00
Dominique Leuenberger
568ac04e18 Accepting request 295241 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/295241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=131
2015-04-10 07:54:55 +00:00
8748f9e59e Accepting request 295240 from home:AndreasStieger:branches:devel:tools:scm:svn
- fix tests with SQLite 3.8.9, adding
  subversion-1.8.13-fix-sqlite-3.8.9-tests.patch

OBS-URL: https://build.opensuse.org/request/show/295240
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=205
2015-04-09 19:16:29 +00:00
Dominique Leuenberger
6d3080af28 Accepting request 293791 from devel:tools:scm:svn
Apache Subversion 1.8.13
    (bsc#923793 CVE-2015-0202) 
    (bsc#923794 CVE-2015-0248)
    (bsc#923795 CVE-2015-0251)

OBS-URL: https://build.opensuse.org/request/show/293791
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=130
2015-04-02 14:03:26 +00:00
8d71cb8e87 fix bug references
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=203
2015-03-31 12:58:06 +00:00
2d31de8e18 Accepting request 293788 from home:AndreasStieger:branches:devel:tools:scm:svn
Apache Subversion 1.8.13 security update
    (bso#923793 CVE-2015-0202) 
    (bso#923794 CVE-2015-0248)
    (bso#923795 CVE-2015-0251)

OBS-URL: https://build.opensuse.org/request/show/293788
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=202
2015-03-31 12:51:08 +00:00
Dominique Leuenberger
6c6fae6295 Accepting request 293494 from devel:tools:scm:svn
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/293494
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=129
2015-03-28 17:39:01 +00:00
1803d8fe95 - Improve installation of secure password storage plugins for
KWallet and GNOME Keyring
- Recommend installation of bash completion

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=200
2015-03-20 21:11:16 +00:00
Dominique Leuenberger
3c6dd8e0f2 Accepting request 291238 from devel:tools:scm:svn
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/291238
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=128
2015-03-18 12:08:47 +00:00
4387e55c20 - Fix running all regression tests with davautocheck.sh and
svnserveautocheck.sh when time is a shell built-in but not
  a command: add subversion-1.8.11-autocheck-time.patch

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=198
2015-03-10 20:10:11 +00:00
ec785cbc65 - fix sample configuration comments in subversion.conf [boo#916286]
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=197
2015-03-04 18:14:07 +00:00
f820c87552 Accepting request 288413 from home:AndreasStieger:branches:devel:tools:scm:svn
- SLE 11 SP3 build with all regression tests
- run swig-py tests where they pass

OBS-URL: https://build.opensuse.org/request/show/288413
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=196
2015-03-02 08:09:26 +00:00
Dominique Leuenberger
3417efd993 Accepting request 287057 from devel:tools:scm:svn
fix build with swig 3.0.3 and later

OBS-URL: https://build.opensuse.org/request/show/287057
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=127
2015-02-22 16:26:44 +00:00
a8c69c447d Accepting request 286999 from home:AndreasStieger:branches:devel:tools:scm:svn
fix build with swig 3.0.3 and later

OBS-URL: https://build.opensuse.org/request/show/286999
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=195
2015-02-20 19:45:18 +00:00
699dc33f4b revert
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=194
2015-01-25 23:34:20 +00:00
4f08993df5 Accepting request 282793 from home:AndreasStieger:branches:devel:tools:scm:svn
- fix build with swig 3.0.4, add subversion-1.8.11-swig_3.patch

OBS-URL: https://build.opensuse.org/request/show/282793
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=193
2015-01-25 22:14:20 +00:00
Dominique Leuenberger
ab41327fd8 Accepting request 280440 from devel:tools:scm:svn
1

OBS-URL: https://build.opensuse.org/request/show/280440
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=126
2015-01-09 19:50:28 +00:00
68aeab2b7e Accepting request 280417 from home:bmwiedemann:branches:devel:tools:scm:svn
fix sysconfig file generation (bnc#911620)

(not fully tested yet)

OBS-URL: https://build.opensuse.org/request/show/280417
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=191
2015-01-08 17:27:36 +00:00
Dominique Leuenberger
9b44203d7e Accepting request 265818 from devel:tools:scm:svn
Apache Subversion 1.8.11 [boo#909935]
  * CVE-2014-3580: mod_dav_svn DoS from invalid REPORT requests.
  * CVE-2014-8108: mod_dav_svn DoS from use of invalid transaction
    names.

OBS-URL: https://build.opensuse.org/request/show/265818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/subversion?expand=0&rev=125
2014-12-19 08:38:51 +00:00