Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package subversion for openSUSE:Leap:16.0 checked in at 2025-04-07 13:58:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:16.0/subversion (Old) and /work/SRC/openSUSE:Leap:16.0/.subversion.new.1907 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "subversion" Mon Apr 7 13:58:42 2025 rev:2 rq:1267608 version:1.14.5 Changes: -------- --- /work/SRC/openSUSE:Leap:16.0/subversion/subversion.changes 2025-03-19 11:58:16.918824313 +0100 +++ /work/SRC/openSUSE:Leap:16.0/.subversion.new.1907/subversion.changes 2025-04-07 13:59:20.363434855 +0200 @@ -1,0 +2,43 @@ +Fri Dec 27 18:51:42 UTC 2024 - Johannes Kastl <[email protected]> + +- fix inconsistencies in subversion.README.SUSE + +------------------------------------------------------------------- +Mon Dec 9 18:38:01 UTC 2024 - Andreas Stieger <[email protected]> + +- Apache Subversion 1.14.5 + * CVE-2024-46901: mod_dav_svn denial-of-service via control + characters in paths (boo#1234317) +- drop patches included upstream: + * subversion-1.14.4-swig-4.3.0-swig-py.patch + * subversion-1.14.4-swig-4.3.0-swig-rb.patch + +------------------------------------------------------------------- +Thu Oct 24 15:20:32 UTC 2024 - Andreas Stieger <[email protected]> + +- Fix build with Swig 4.3.0 (boo#1231590) + * subversion-1.14.4-swig-4.3.0-swig-py.patch + * subversion-1.14.4-swig-4.3.0-swig-rb.patch + +------------------------------------------------------------------- +Fri Oct 18 16:35:51 UTC 2024 - Andreas Stieger <[email protected]> + +- Update to 1.14.4: + * Fix unbounded memory usage in propget and proplist --xml + * Fix cmdline parsing bugs in --change (-c) argument + * Improve help message for svnmucc PUT + * mailer.py: Fix inconsistency in Config.which_group() arguments + * Convert path to local style in error message from diff API + * Fix `invalid escape sequence` in .py scripts for Python 3.12 + * swig-py: Fix `none_dealloc` error caused by refcount issue + * Fix a msgid in svnadmin.c which was not a valid C string +- drop patches included upstream: + * subversion-1.14.3-gcc14-2.patch + * subversion-1.14.3-gcc14.patch + +------------------------------------------------------------------- +Thu Sep 26 09:32:29 UTC 2024 - Bernhard Wiedemann <[email protected]> + +- Use strip-nondeterminism to normalize jar mtimes + +------------------------------------------------------------------- Old: ---- subversion-1.14.3-gcc14-2.patch subversion-1.14.3-gcc14.patch subversion-1.14.3.tar.bz2 subversion-1.14.3.tar.bz2.asc New: ---- subversion-1.14.5.tar.bz2 subversion-1.14.5.tar.bz2.asc BETA DEBUG BEGIN: Old:- drop patches included upstream: * subversion-1.14.3-gcc14-2.patch * subversion-1.14.3-gcc14.patch Old: * subversion-1.14.3-gcc14-2.patch * subversion-1.14.3-gcc14.patch BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ subversion.spec ++++++ --- /var/tmp/diff_new_pack.pwJjXh/_old 2025-04-07 13:59:21.015462168 +0200 +++ /var/tmp/diff_new_pack.pwJjXh/_new 2025-04-07 13:59:21.019462336 +0200 @@ -1,7 +1,7 @@ # # spec file for package subversion # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # Copyright (c) 2009-2010 Pascal Bleser <[email protected]> # Copyright (c) 2024 Andreas Stieger <[email protected]> # @@ -41,7 +41,7 @@ %bcond_with python_ctypes %bcond_with all_regression_tests Name: subversion%{psuffix} -Version: 1.14.3 +Version: 1.14.5 Release: 0 Summary: Subversion version control system License: Apache-2.0 @@ -75,8 +75,6 @@ # PATCH-FIX-UPSTREAM [email protected] bsc#1195486 bsc#1193778 # Fix testCrash_RequestChannel_nativeRead_AfterException test on aarch64 and ppc64le Patch47: fix-javahl-test.patch -Patch48: subversion-1.14.3-gcc14.patch -Patch49: subversion-1.14.3-gcc14-2.patch BuildRequires: apache-rpm-macros BuildRequires: apache2-devel >= 2.2.0 BuildRequires: apache2-prefork @@ -94,6 +92,7 @@ BuildRequires: python3-py3c BuildRequires: python3-xml BuildRequires: ruby-devel >= 1.8.2 +BuildRequires: strip-nondeterminism BuildRequires: swig BuildRequires: sysuser-tools BuildRequires: update-alternatives @@ -329,6 +328,8 @@ %if "%{flavor}" != "testsuite" %make_install make DESTDIR=%{buildroot} install-swig-py install-swig-pl install-javahl install-swig-rb +strip-nondeterminism %{buildroot}%{_libdir}/svn-javahl/svn-javahl.jar + %if %{with python_ctypes} make DESTDIR=%{buildroot} install-ctypes-python # remove csvn .pyc files and recompile them because they contain the $RPM_BUILD_ROOT path: @@ -433,6 +434,7 @@ %endif %else + %pre -f subversion.pre %service_add_pre svnserve.service ++++++ subversion-1.14.3.tar.bz2 -> subversion-1.14.5.tar.bz2 ++++++ /work/SRC/openSUSE:Leap:16.0/subversion/subversion-1.14.3.tar.bz2 /work/SRC/openSUSE:Leap:16.0/.subversion.new.1907/subversion-1.14.5.tar.bz2 differ: char 11, line 1 ++++++ subversion-no-build-date.patch ++++++ --- /var/tmp/diff_new_pack.pwJjXh/_old 2025-04-07 13:59:21.111466190 +0200 +++ /var/tmp/diff_new_pack.pwJjXh/_new 2025-04-07 13:59:21.115466358 +0200 @@ -13,10 +13,10 @@ subversion/tests/cmdline/getopt_tests_data/svn--version_stdout | 1 - 5 files changed, 6 insertions(+), 12 deletions(-) -Index: subversion-1.14.3/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java +Index: subversion-1.14.4/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java =================================================================== ---- subversion-1.14.3.orig/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java -+++ subversion-1.14.3/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java +--- subversion-1.14.4.orig/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java ++++ subversion-1.14.4/subversion/bindings/javahl/tests/org/apache/subversion/javahl/BasicTests.java @@ -149,10 +149,10 @@ public class BasicTests extends SVNTests { vx = client.getVersionExtended(false); @@ -30,10 +30,10 @@ throw new Exception("Build time empty"); result = vx.getBuildHost(); if (result == null || result.trim().length() == 0) -Index: subversion-1.14.3/subversion/libsvn_subr/opt.c +Index: subversion-1.14.4/subversion/libsvn_subr/opt.c =================================================================== ---- subversion-1.14.3.orig/subversion/libsvn_subr/opt.c -+++ subversion-1.14.3/subversion/libsvn_subr/opt.c +--- subversion-1.14.4.orig/subversion/libsvn_subr/opt.c ++++ subversion-1.14.4/subversion/libsvn_subr/opt.c @@ -1147,12 +1147,8 @@ svn_opt__print_version_info(const char * if (quiet) return svn_cmdline_printf(pool, "%s\n", SVN_VER_NUMBER); @@ -49,10 +49,10 @@ SVN_ERR(svn_cmdline_printf(pool, "%s\n", svn_version_ext_copyright(info))); if (footer) -Index: subversion-1.14.3/subversion/libsvn_subr/version.c +Index: subversion-1.14.4/subversion/libsvn_subr/version.c =================================================================== ---- subversion-1.14.3.orig/subversion/libsvn_subr/version.c -+++ subversion-1.14.3/subversion/libsvn_subr/version.c +--- subversion-1.14.4.orig/subversion/libsvn_subr/version.c ++++ subversion-1.14.4/subversion/libsvn_subr/version.c @@ -139,8 +139,8 @@ svn_version_extended(svn_boolean_t verbo { svn_version_extended_t *info = apr_pcalloc(pool, sizeof(*info)); @@ -63,21 +63,21 @@ + info->build_time = ""; info->build_host = SVN_BUILD_HOST; info->copyright = apr_pstrdup - (pool, _("Copyright (C) 2023 The Apache Software Foundation.\n" -Index: subversion-1.14.3/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout + (pool, _("Copyright (C) 2024 The Apache Software Foundation.\n" +Index: subversion-1.14.4/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout =================================================================== ---- subversion-1.14.3.orig/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout -+++ subversion-1.14.3/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout +--- subversion-1.14.4.orig/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout ++++ subversion-1.14.4/subversion/tests/cmdline/getopt_tests_data/svn--version--verbose_stdout @@ -1,5 +1,4 @@ svn, version 1.9.0-dev (under development) - compiled Feb 26 2014, 15:15:42 on x86_64-unknown-openbsd5.5 Copyright (C) 2012 The Apache Software Foundation. This software consists of contributions made by many people; -Index: subversion-1.14.3/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout +Index: subversion-1.14.4/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout =================================================================== ---- subversion-1.14.3.orig/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout -+++ subversion-1.14.3/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout +--- subversion-1.14.4.orig/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout ++++ subversion-1.14.4/subversion/tests/cmdline/getopt_tests_data/svn--version_stdout @@ -1,5 +1,4 @@ svn, version 1.9.0-dev (under development) - compiled Feb 26 2014, 15:15:42 on x86_64-unknown-openbsd5.5 ++++++ subversion.README.SUSE ++++++ --- /var/tmp/diff_new_pack.pwJjXh/_old 2025-04-07 13:59:21.159468200 +0200 +++ /var/tmp/diff_new_pack.pwJjXh/_new 2025-04-07 13:59:21.163468368 +0200 @@ -79,8 +79,8 @@ To create the repository itself: cd /srv/svn/repos - svnadmin create project1 - chown -R wwwrun:www project1/{db,locks} + svnadmin create myproject1 + chown -R wwwrun:www myproject1/{db,locks} If using svnserve is not planned, /srv/svn/repos may be owned by wwrun:www. Otherwise see instruction in the svnserve section on how to use the user and @@ -92,23 +92,23 @@ To create the user access files: - touch /srv/svn/user_access/project1_passwdfile - chown root:www /srv/svn/user_access/project1_passwdfile - chmod 640 /srv/svn/user_access/project1_passwdfile + touch /srv/svn/user_access/myproject1_passwdfile + chown root:www /srv/svn/user_access/myproject1_passwdfile + chmod 640 /srv/svn/user_access/myproject1_passwdfile - htpasswd2 /srv/svn/user_access/project1_passwdfile user1 - htpasswd2 /srv/svn/user_access/project1_passwdfile user2 + htpasswd2 /srv/svn/user_access/myproject1_passwdfile user1 + htpasswd2 /srv/svn/user_access/myproject1_passwdfile user2 -Create the group file for project1: - /srv/svn/user_access/project1_groupfile +Create the group file for myproject1: + /srv/svn/user_access/myproject1_groupfile - project1_committers: user2 - project1_readers: user1 user2 + myproject1_committers: user2 + myproject1_readers: user1 user2 You can test access by: - svn info http://127.0.0.1/repos/project1 + svn info http://127.0.0.1/repos/myproject1 ================================================================================ @@ -184,13 +184,13 @@ You can test repository access by: - svn info svn://127.0.0.1/project1 + svn info svn://127.0.0.1/myproject1 Please note that by default, svnserve is configured to be started with -R, meaning read-only access only. Remove to allow write access, after you have configured access via - /srv/svn/repos/repo1/conf/svnserve.conf + /srv/svn/repos/myproject1/conf/svnserve.conf To configue authentication for svnserve, see http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth @@ -227,8 +227,8 @@ 7. quickstart for mod_dontdothat The apache module mod_dontdothat can be used to prevent users from causing high -load on the server, e.g. checking out the root of the tree or the tags or -branches directories. +load on the server, e.g. checking out the root of the tree or the tags or +branches directories. Make sure mod_dontdothat is loaded: $ a2enmod dontdothat ++++++ subversion.conf ++++++ --- /var/tmp/diff_new_pack.pwJjXh/_old 2025-04-07 13:59:21.191469541 +0200 +++ /var/tmp/diff_new_pack.pwJjXh/_new 2025-04-07 13:59:21.199469876 +0200 @@ -40,15 +40,15 @@ # <Limit GET PROPFIND OPTIONS REPORT> # # uncomment to require SSL connection for password protection. # # SSLRequireSSL -# Require group project1_committers -# Require group project1_readers +# Require group myproject1_committers +# Require group myproject1_readers # </Limit> # # # Limit write permission to list of valid users. # <LimitExcept GET PROPFIND OPTIONS REPORT> # # uncomment to require SSL connection for password protection. # # SSLRequireSSL -# Require group project1_committers +# Require group myproject1_committers # </LimitExcept> # #</Location> ++++++ subversion.keyring ++++++ ++++ 18084 lines (skipped) ++++ between /work/SRC/openSUSE:Leap:16.0/subversion/subversion.keyring ++++ and /work/SRC/openSUSE:Leap:16.0/.subversion.new.1907/subversion.keyring
