Accepted subversion 1.8.9-1~bpo70+1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Jul 2014 13:29:59 +0200
Source: subversion
Binary: subversion subversion-dbg libsvn1 libsvn-dev libsvn-doc libapache2-mod-svn libapache2-svn python-subversion subversion-tools libsvn-java libsvn-perl ruby-svn libsvn-ruby1.8
Architecture: source all amd64
Version: 1.8.9-1~bpo70+1
Distribution: wheezy-backports
Urgency: high
Maintainer: Peter Samuelson <peter@p12n.org>
Changed-By: Felix Geyer <felix.geyer@credativ.de>
Description:
libapache2-mod-svn - Apache Subversion server modules for Apache httpd
libapache2-svn - Apache Subversion server modules for Apache httpd (dummy package)
libsvn-dev - Development files for Apache Subversion libraries
libsvn-doc - Developer documentation for libsvn
libsvn-java - Java bindings for Apache Subversion
libsvn-perl - Perl bindings for Apache Subversion
libsvn-ruby1.8 - Ruby bindings for Apache Subversion (dummy package)
libsvn1 - Shared libraries used by Apache Subversion
python-subversion - Python bindings for Apache Subversion
ruby-svn - Ruby bindings for Apache Subversion
subversion - Advanced version control system
subversion-dbg - Debug symbols for Apache Subversion
subversion-tools - Assorted tools related to Apache Subversion
Closes: 273874 507430 508147 566148 601544 621692 644438 654172 656966 666794 672157 675987 677990 678224 683188 687291 690155 690815 698270 698443 705033 705364 705464 710498 711033 711911 712004 717794 719476 721542 721878 722393 725028 725787 726491 726717 728352 730541 734163 734918 735446 735609 737815 738650 738840 738841 739772
Changes:
subversion (1.8.9-1~bpo70+1) wheezy-backports; urgency=medium
.
* Rebuild for wheezy-backports.
* Use libdb5.1 instead of 5.3.
* Create libapache2-mod-svn maintainer scripts manually instead of using
dh_apache2.
* Adapt ruby libdir as it's not multiarched in wheezy.
.
subversion (1.8.9-1) unstable; urgency=medium
.
* New upstream release
* Merge changes from Ubuntu:
- Add DEB-8 test for Apache functionality
- debian/rules: Create pot file on build.
- debian/rules: Ensure the doxygen output directory exists
- Move svn2cl to subversion-tools' Suggests on Ubuntu.
.
subversion (1.8.8-2) unstable; urgency=medium
.
* Fix builds with ruby 2.x. (Closes: #739772)
.
subversion (1.8.8-1) unstable; urgency=medium
.
* New upstream release. Refresh patches.
- Remove backported patches sqlite_3.8.x_workaround & swig-pl_build_fix
- Fix integer overflows with 32-bit svnserv, which could cause an infinite
loop (Closes: #738840) or inaccurate statistics (Closes: #738841)
- Work around SQLite not honoring umask when creating rep-cache.db.
(Closes: #735446)
- Includes security fix:
+ CVE-2014-0032: mod_dav_svn crash when handling certain requests with
SVNListParentPath on (Closes: #737815)
* Add a subversion-dbg package. (Closes: #508147)
* Bump libdb5.1-dev → libdb5.3-dev (Closes: #738650)
.
subversion (1.8.5-2) unstable; urgency=medium
.
* rules: Move comment out of multi-line variable definition so configure is
run with the correct flags. (Closes: #735609)
* control: Remove libsvn-ruby1.8 Provides from ruby-svn.
* Add patches/swig-pl_build_fix, from upstream, to fix a build failure when
configure is run with --enable-sqlite-compatibility.
.
subversion (1.8.5-1) unstable; urgency=low
.
[ Peter Samuelson ]
* New upstream release. (Closes: #725787) Rediff patches:
- Remove apr-abi1 (applied upstream), rename apr-abi2 to apr-abi
- Remove loosen-sqlite-version-check (shouldn't be needed)
- Remove java-osgi-metadata (applied upstream)
- svnmucc prompts for a changelog if none is provided. (Closes: #507430)
- Remove fix-bdb-version-detection, upstream uses "apu-config --dbm-libs"
- Remove ruby-test-wc (applied upstream)
- Fix “svn diff -r N file” when file has svn:mime-type set.
(Closes: #734163)
- Support specifying an encoding for mod_dav_svn's environment in which
hooks are run. (Closes: #601544)
- Fix ordering of “svnadmin dump” paths with certain APR versions.
(Closes: #687291)
- Provide a better error message when authentication fails with an
svn+ssh:// URL. (Closes: #273874)
- Updated Polish translations. (Closes: #690815)
.
[ James McCoy ]
* Remove all traces of libneon, replaced by libserf.
* patches/sqlite_3.8.x_workaround: Upstream fix for wc-queries-test test
failurse.
* Run configure with --with-apache-libexecdir, which allows removing part of
patches/rpath.
* Re-enable auth-test as upstream has fixed the problem of picking up
libraries from the environment rather than the build tree.
(Closes: #654172)
* Point LD_LIBRARY_PATH at the built auth libraries when running the svn
command during the build. (Closes: #678224)
* Add a NEWS entry describing how to configure mod_dav_svn to understand
UTF-8. (Closes: #566148)
* Remove ancient transitional package, libsvn-ruby.
* Enable compatibility with Sqlite3 versions back to Wheezy.
* Enable hardening flags. (Closes: #734918)
* patches/build-fixes: Enable verbose build logs.
* Build against the default ruby version. (Closes: #722393)
.
subversion (1.7.14-1) unstable; urgency=medium
.
* New upstream version.
- mod_dav_svn: Prevent crashes with some 3rd party modules. (Closes:
#728352)
- Includes security fix:
+ CVE-2013-4505: mod_dontdothat restrictions bypassed by relative
requests (Closes: #730541)
+ CVE-2013-4558: mod_dav_svn assertion when SVNAutoversioning is
enabled.
* Bump compat to debhelper 8
* Use shlibs.local to handle intrapackage dependencies on private libraries.
* rules: Fix removal of libsvnjavahl-1.a/.la/.so from libsvn-dev. (Closes:
#711911)
* Remove obsolete conffiles under /etc/svn2cl. (Closes: #677990)
.
subversion (1.7.13-3) unstable; urgency=low
.
* Remove architecture exclusions for libsvn-java. (Closes: #710498)
* Fix multi-arch Python include paths. (Closes: #698443)
* Add strict Depends on libsvn1 to libapach2-mod-svn since the latter
leverages some internal APIs and therefore must be upgraded in lock step.
(Closes: #705464)
* Standards-Version 3.9.5 (no change needed).
* Add strict minimum Depends on libsqlite3-0 to work around lack of build
time dependency information. (Closes: #721878)
.
subversion (1.7.13-2) unstable; urgency=low
.
* Remove unnecessary libapache2-svn.prem. (Closes: #726717)
.
subversion (1.7.13-1) unstable; urgency=low
.
[ Peter Samuelson ]
* New upstream version. (Closes: #719476)
- patches/CVE-2013-1968.patch, patches/CVE-2013-2112.patch: remove,
obsoleted
- Includes security fixes:
+ CVE-2013-4131: Remotely triggered crash in mod_dav_svn (Closes:
#717794)
+ CVE-2013-4277: Local privilege escalation vulnerability via symlink
attack (Closes: #721542)
+ CVE-2013-2088: Arbitrary code execution in check-mime-type.pl and
svn-keyword-check.pl contrib scripts.
.
[ James McCoy ]
* Add myself to uploaders.
* Acknowledge NMUs.
* Canonicalize the Vcs-* URLs. Thanks, Lintian.
* Remove Guilherme de S. Pastore from Uploaders. (Closes: #698270)
* Add Breaks: svnmailer (<< 1.0.9) to python-subversion. (Closes: #726491)
* Remove obsolete conffile /etc/emacs/site-start.d/50psvn.el. (Closes:
#705033)
.
subversion (1.7.9-1+nmu6) unstable; urgency=low
.
* Add Breaks/Replaces: libapache2-svn to libapach2-mod-svn.
.
subversion (1.7.9-1+nmu5) unstable; urgency=low
.
* Non-maintainer upload.
* Re-enable libapache2-svn build (Closes: #725028)
* Adjust packaging for Apache 2.4 compatibility (Closes: #712004)
- Rename libapache2-svn to libapache2-mod-svn and add a transitional
package
- Add apache2-dev & dh-apache2 to Build-Depends
- Add apache2-api-20120211 as a Depends for libapache2-mod-svn
- Update maintainer scripts to use apache2-maintscript-helper
.
subversion (1.7.9-1+nmu4) unstable; urgency=low
.
* Non-maintainer upload.
* patches/ruby-test-wc: New patch from upstream to fix a stray case of a
testsuite failure due to APR 1.4 hash randomization. Thanks to
Michael Gilbert for digging this up. (Closes: #705364)
* Use --disable-neon-version-check to build libsvn_ra_neon against libneon27
0.30.0.
* Add handling of directory to symlink conversions for
/usr/share/doc/libsvn-{dev,java,ruby,ruby1.8}. (Closes: #690155)
.
subversion (1.7.9-1+nmu3) unstable; urgency=high
.
* Non-maintainer upload.
* Disable libapache2-svn build (closes: #712004, #666794)
.
subversion (1.7.9-1+nmu2) unstable; urgency=high
.
* Non-maintainer upload.
* Add CVE-2013-1968.patch patch.
CVE-2013-1968: Subversion FSFS repositories can be corrupted by newline
characters in filenames. (Closes: #711033)
* Add CVE-2013-2112.patch patch.
CVE-2013-2112: Fix remotely triggerable DoS vulnerability. (Closes: #711033)
.
subversion (1.7.9-1+nmu1) unstable; urgency=medium
.
* Non-maintainer upload.
* Convert SVN_STREAM_CHUNK_SIZE to an integer in svn/core.py (closes: #683188).
.
subversion (1.7.9-1) unstable; urgency=medium
.
* New upstream version. Some DOS fixes in mod_dav_svn:
- CVE-2013-1845: mod_dav_svn excessive memory usage from property changes
- CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs
- CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant
URLs
- CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity
URLs
- CVE-2013-1884: mod_dav_svn crashes on out of range limit in log REPORT
request
* patches/python-swig205, patches/g++47: Remove as obsolete.
* Don't make python-subversion 'Depends: subversion'. It is quite
usable on its own.
* Move libsvn1 to section 'libs'. (Ref: #700145)
* Update watch file. (Closes: #672157)
.
subversion (1.7.5-1) unstable; urgency=low
.
[ Peter Samuelson ]
* New upstream version. (Closes: #621692, #656966)
- Refresh patches; remove obsolete no-dbus-spam, kwallet-wid,
perl-warning, perl-compiler-flags, po, swig2-compat,
disable-failing-tests, python-exception-syntax
- Split patches/apr-abi into apr-abi1 (to be submitted) and
apr-abi2 (Debian-specific).
- Disable patches/ruby-test-info ... for now.
- Requires serf 1.0 or higher.
* Upstream no longer ships contrib in tarball:
- Remove contrib-license-audit
- subversion-tools now Recommends: svn2cl
- Ship svn-clean, svn-fast-backup, svn_apply_autoprops,
svn_load_dirs, commit-email.pl in debian/contrib
- Don't ship svnmerge.py, it has outlived its usefulness
- Delete patches/{svn2cl-*,svn-clean-ignore,commit-email}
- Overhaul debian/copyright
* rules: Specify that we want our own libtool. Otherwise it finds the
one from /usr/share/apr-1.0/build, which doesn't support C++.
* patches/entropy: Remove as obsolete. It was a workaround for apr
using /dev/random, but apr switched to /dev/urandom in 1.3.
* Move emacs plugins from subversion to subversion-tools.
* patches/java-osgi-metadata: Add OSGi metadata to the libsvn-java
jarfile. Thanks Jakub Adam. (Closes: #644438)
* Switch from python-support to dh_python2.
* patches/python-swig205: New patch: Adjust for swig 2.0.5+ handling of
Python ints vs. longs.
.
[ Michael Diers ]
* More contrib adjustments:
- Provide debian/contrib/emacs from upstream VCS contrib/client-side/emacs
- Add svn_1.6_releasenotes.html, svn_1.7_releasenotes.html
- subversion.docs, subversion.install
- subversion-tools.docs, subversion-tools.manpages
.
subversion (1.6.18dfsg-1) experimental; urgency=low
.
* New upstream version.
- patches/sasl-mem-handling: delete obsolete patch.
* Add Conflicts and Replaces: libsvn-jni. (Closes: #675987)
* Rename libsvn-ruby1.8 to ruby-svn, per Ruby policy.
Leave transition package behind for wheezy.
Checksums-Sha1:
d872a388a0da44795ed7f81396dc02198a58704d 2887 subversion_1.8.9-1~bpo70+1.dsc
2f2595f528b39e61ffc6ba6daed387ddb470fe63 267985 subversion_1.8.9-1~bpo70+1.diff.gz
b87e9fa432aa2a1eeae3f50e129dfa7c70bed441 2785430 libsvn-doc_1.8.9-1~bpo70+1_all.deb
70a69a3fa66030435bd854e8eab044dc71ce4987 123762 libapache2-svn_1.8.9-1~bpo70+1_all.deb
ccae3d796570d8901386a0bdab8175630953a3ec 308002 subversion-tools_1.8.9-1~bpo70+1_all.deb
86940d51463b41940f6282dd625a5f3c8a689629 920 libsvn-ruby1.8_1.8.9-1~bpo70+1_all.deb
6a1ba8e5fe89390723e45341dcae5a541d61e392 1561520 subversion_1.8.9-1~bpo70+1_amd64.deb
fe1dc36a75318ddae49ec292e3a4c41cac405aab 14591242 subversion-dbg_1.8.9-1~bpo70+1_amd64.deb
231e475995b624925362ab05fbb2297fd689a9b1 1342492 libsvn1_1.8.9-1~bpo70+1_amd64.deb
858fea54365e665888e4340fc9ad90930649ae44 1718168 libsvn-dev_1.8.9-1~bpo70+1_amd64.deb
aa1c66a41b0811987d52fd9104b1556be7822077 214836 libapache2-mod-svn_1.8.9-1~bpo70+1_amd64.deb
63d2a922d94137f5e56a2e71a36aa8a0bc9ab553 1705462 python-subversion_1.8.9-1~bpo70+1_amd64.deb
8f7345e20692a406b900e19af64c6ccfc78c256e 383724 libsvn-java_1.8.9-1~bpo70+1_amd64.deb
0c75d3f46d78289c37904e771c62c6562474b9cc 1341260 libsvn-perl_1.8.9-1~bpo70+1_amd64.deb
3063814649f1a7db353b55f4d9bca273b6e49548 792174 ruby-svn_1.8.9-1~bpo70+1_amd64.deb
Checksums-Sha256:
ed8add7d3c337b371a5f505345e84f121fd96c7e95ba07d389c588d3157ac3cd 2887 subversion_1.8.9-1~bpo70+1.dsc
dabf219a0c18226e141ea42b074956fa5522220af819b73e8fb2fe3136678027 267985 subversion_1.8.9-1~bpo70+1.diff.gz
eee6093569aa2db225cdf1339a39326fb7f25204e954d521da53d2ae84631d3b 2785430 libsvn-doc_1.8.9-1~bpo70+1_all.deb
dd99a3abfc7f4a84326c9bae31ad81cc4144d34ab1de7467c49bea38c0cff460 123762 libapache2-svn_1.8.9-1~bpo70+1_all.deb
fe37248c4a6d7482168140cd5d76c51f03aed357657b25f19595b1b40f5eabba 308002 subversion-tools_1.8.9-1~bpo70+1_all.deb
df492f255390f2d06dd7d155d279a7dc6e9ff826f171db3baf7ad992cfcdfdd3 920 libsvn-ruby1.8_1.8.9-1~bpo70+1_all.deb
8ec16c4934dc2889c8eef1c400c1c92df4b0b3661cca8a0509fc0cb7c5749a79 1561520 subversion_1.8.9-1~bpo70+1_amd64.deb
904e8aab681f30e30edf9a3920c5d25b814f95ee68894709dff91601dbe05589 14591242 subversion-dbg_1.8.9-1~bpo70+1_amd64.deb
f9d660f0f277a0834c7d68576b502302480c2abbf86f49bb94ed432c030f8f7d 1342492 libsvn1_1.8.9-1~bpo70+1_amd64.deb
478bd092780e0afb2db74695e49447825f202fb0a4a0c4c9d096dd2148841ddc 1718168 libsvn-dev_1.8.9-1~bpo70+1_amd64.deb
8c114fc7dd59b80dc18f3d8dff6ec97b920f1ce969cfc0aef60c512dc8eb4940 214836 libapache2-mod-svn_1.8.9-1~bpo70+1_amd64.deb
2c7930b124a75c70de92829a06782dff81b66be118009fbf1511895361117276 1705462 python-subversion_1.8.9-1~bpo70+1_amd64.deb
8a6756959ddcffd516521487be2a12154820d15177f0427f08a62f7852c57471 383724 libsvn-java_1.8.9-1~bpo70+1_amd64.deb
d6b5eb1b614cd92d9d4e77d946ca4a8c2a1d2ec928f45ea4c6e83a08f57779d2 1341260 libsvn-perl_1.8.9-1~bpo70+1_amd64.deb
af28ec6d9d2332ab76ab8bee9bea151927ce455b2402e5d34dc6493d6f21ec1b 792174 ruby-svn_1.8.9-1~bpo70+1_amd64.deb
Files:
1a445696713e1a3674592b446d2085fc 2887 vcs optional subversion_1.8.9-1~bpo70+1.dsc
b270eb6d8d7b3aa58fb4cbd17e0d5e60 267985 vcs optional subversion_1.8.9-1~bpo70+1.diff.gz
bcfd0a6aa82239b580dad01a946ea028 2785430 doc extra libsvn-doc_1.8.9-1~bpo70+1_all.deb
b22a91c16f4fb6bfc92dd563a8aea207 123762 oldlibs extra libapache2-svn_1.8.9-1~bpo70+1_all.deb
80cb110abb21568dc960aa26330ffc48 308002 vcs extra subversion-tools_1.8.9-1~bpo70+1_all.deb
6c4b9899eeda2d28791b8a3ee1bb40cd 920 oldlibs extra libsvn-ruby1.8_1.8.9-1~bpo70+1_all.deb
accb3eb92ee8cde6ec074c9cc66125fa 1561520 vcs optional subversion_1.8.9-1~bpo70+1_amd64.deb
f8cdc57b9a882411f25b6da02fedb50f 14591242 debug extra subversion-dbg_1.8.9-1~bpo70+1_amd64.deb
9cac7e00fe3cd40c4756a4848e95398a 1342492 libs optional libsvn1_1.8.9-1~bpo70+1_amd64.deb
b7f6dfd5fcf521c24c423ee1bbc9426f 1718168 libdevel extra libsvn-dev_1.8.9-1~bpo70+1_amd64.deb
d2aaaa9c3d631556e9e71a11c9e641e5 214836 httpd optional libapache2-mod-svn_1.8.9-1~bpo70+1_amd64.deb
9fc40e5dfff38a537fb323271f139666 1705462 python optional python-subversion_1.8.9-1~bpo70+1_amd64.deb
38d74181bb7f19d581d3e4342a5d4a9c 383724 java optional libsvn-java_1.8.9-1~bpo70+1_amd64.deb
6ee25f709c7602161c7f2ca4980d2df7 1341260 perl optional libsvn-perl_1.8.9-1~bpo70+1_amd64.deb
3662f706d35ee5876392c0a19aeea2df 792174 ruby optional ruby-svn_1.8.9-1~bpo70+1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=C8W6
-----END PGP SIGNATURE-----
Reply to: