c5a5192b66
This release fixes two vulnerabilities:
* mod_authz_svn: do not leak information in mixed anonymous/authenticated
httpd (dav) configurations (CVE-2015-3184)
* do not leak paths that were hidden by path-based authz (CVE-2015-3187)
Non-security fixes:
* document svn:autoprops
* fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
* improve conflict prompts for binary files
* improve performance of 'ls -v'
* improved Sqlite 3.8.9 query performance
* fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
* mod_dav_svn: do not ignore skel parsing errors
* detect invalid svndiff data earlier
* prevent possible repository corruption on power/disk failures
* fixed issue #4577: Read error with some repository nodes
* fixed issue #4531: server-side copy (over dav) is slow
* swig-pl: fix some stack memory problems
OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=209
13 lines
698 B
Diff
13 lines
698 B
Diff
diff -ur subversion-1.8.14.orig/build/ac-macros/apache.m4 subversion-1.8.14/build/ac-macros/apache.m4
|
|
--- subversion-1.8.14.orig/build/ac-macros/apache.m4 Mon Jul 27 02:23:40 2015
|
|
+++ subversion-1.8.14/build/ac-macros/apache.m4 Tue Jul 28 11:08:30 2015
|
|
@@ -164,7 +164,7 @@
|
|
if ! test -e $HTTPD ; then
|
|
HTTPD="`$APXS -q bindir`/`$APXS -q PROGNAME`"
|
|
fi
|
|
- HTTPD_VERSION=["`$HTTPD -v | $SED -e 's@^.*/\([0-9.]*\)\(.*$\)@\1@ ; 1q'`"]
|
|
+ HTTPD_VERSION=["`$HTTPD -v | $SED -e 's/^.*Apache\/\([0-9.]*\).*$/\1/' -e 1q`"]
|
|
AC_ARG_ENABLE(broken-httpd-auth,
|
|
AS_HELP_STRING([--enable-broken-httpd-auth],
|
|
[Allow building against httpd 2.4 with broken auth]),
|