2021-12-08 17:07:18 by Adam Ciarcinski | Files touched by this commit (3063) |
Log message:
revbump for icu and libffi
|
2021-05-24 21:56:06 by Thomas Klausner | Files touched by this commit (3575) |
Log message:
*: recursive bump for perl 5.34
|
2021-04-21 13:43:04 by Adam Ciarcinski | Files touched by this commit (1822) |
Log message:
revbump for textproc/icu
|
2021-02-14 16:09:20 by Adam Ciarcinski | Files touched by this commit (9) | |
Log message:
subversion: updated to 1.14.1
Subversion 1.14.1.
This is a stable bugfix and security release of the Apache Subversion
open source version control system.
THIS RELEASE CONTAINS AN IMPORTANT SECURITY FIX:
CVE-2020-17525
"Remote unauthenticated denial-of-service in Subversion mod_authz_svn"
The full security advisory for CVE-2020-17525 is available at:
https://subversion.apache.org/security/CVE-2020-17525-advisory.txt
A brief summary of this advisory follows:
Subversion's mod_authz_svn module will crash if the server is using
in-repository authz rules with the AuthzSVNReposRelativeAccessFile
option and a client sends a request for a non-existing repository URL.
This can lead to disruption for users of the service.
We recommend all users to upgrade to the 1.10.7 or 1.14.1 release
of the Subversion mod_dav_svn server.
As a workaround, the use of in-repository authz rules files with
the AuthzSVNReposRelativeAccessFile can be avoided by switching
to an alternative configuration which fetches an authz rules file
from the server's filesystem, rather than from an SVN repository.
|
2020-11-05 10:09:30 by Ryo ONODERA | Files touched by this commit (1814) |
Log message:
*: Recursive revbump from textproc/icu-68.1
|
2020-07-27 22:48:53 by Adam Ciarcinski | Files touched by this commit (10) | |
Log message:
subversion: updated to 1.14.0
What's New in Apache Subversion 1.14
Support for Python 3.x
Support for Python 2.7 is being phased out
New Build-Time Dependency: py3c
Many enhancements and bug fixes
|
2020-06-02 10:25:05 by Adam Ciarcinski | Files touched by this commit (1689) |
Log message:
Revbump for icu
|
2020-05-13 07:08:57 by Roland Illig | Files touched by this commit (1) |
Log message:
devel/ruby-subversion: suppress USE_TOOLS+=perl warning
|
2020-04-12 10:29:21 by Adam Ciarcinski | Files touched by this commit (956) | |
Log message:
Recursive revision bump after textproc/icu update
|
2020-02-24 17:10:34 by Adam Ciarcinski | Files touched by this commit (11) | |
Log message:
subversion: updated to 1.13.0
Version 1.13.0
User-visible changes:
- Minor new features and improvements:
* New 'svnadmin rev-size' command to report revision size
* In 'svn help', hide experimental commands and global options
* Add a hint about mod_dav_svn misconfiguration
* Performance improvement for 'svn st' etc., in WC SQLite DB
- Client-side bugfixes:
* Windows: avoid delays in SSL certificate validation override
* Fix 'svn patch' setting mode 0600 on patched files with props
* Fix "svn diff --changelist ARG" broken in subdirectories
* Fix misleading 'redirect cycle' error on a non-repository URL
- Server-side bugfixes:
* svnserve: Report some errors that we previously ignored
* Make server code more resilient to malformed paths and URLs
* Make dump stream parser more resilient to malformed dump stream
* mod_dav_svn: Fix missing Last-Modified header on 'external' GET requests
- Client-side and server-side bugfixes:
* Fix excessive memory usage in some cases reading binary data
* Win32: fix svn_io_file_rename2() spinning in a retry loop
- Other tool improvements and bugfixes:
* svn_load_dirs.pl: do not show password; fix cleanup
Developer-visible changes:
* New svn_fs_ioctl() API for FSFS stats, dump/load index, rev-size
Version 1.12.2
User-visible changes:
* Fix conflict resolver bug: local and incoming edits swapped.
* Fix memory lifetime problem in a libsvn_wc error code path.
* Faster Windows file existence checks, improving 'svn st' etc.
Developer-visible changes:
* Allow generating Visual Studio 2019 projects
* Fix build with APR 1.7.0.
* Fix building Subversion with Visual Studio 2005 and 2008.
* Allow svnserve's 'get-deleted-rev' API to return 'not deleted'.
Version 1.12.1
(Not released; see changes for 1.12.2.)
|