89e51bc625
Fixes the following security issues: - CVE-2021-28544: SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the `copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable. https://subversion.apache.org/security/CVE-2021-28544-advisory.txt - CVE-2022-24070: Subversion's mod_dav_svn is vulnerable to memory corruption While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. https://subversion.apache.org/security/CVE-2022-24070-advisory.txt Drop no longer needed patch and autoreconf, as this is now fixed upstream: https://svn.apache.org/viewvc?view=revision&revision=1881534 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
39 lines
1.0 KiB
Makefile
39 lines
1.0 KiB
Makefile
################################################################################
|
|
#
|
|
# subversion
|
|
#
|
|
################################################################################
|
|
|
|
SUBVERSION_VERSION = 1.14.2
|
|
SUBVERSION_SOURCE = subversion-$(SUBVERSION_VERSION).tar.bz2
|
|
SUBVERSION_SITE = https://downloads.apache.org/subversion
|
|
SUBVERSION_LICENSE = Apache-2.0
|
|
SUBVERSION_LICENSE_FILES = LICENSE
|
|
SUBVERSION_CPE_ID_VENDOR = apache
|
|
SUBVERSION_DEPENDENCIES = \
|
|
host-pkgconf \
|
|
apr \
|
|
apr-util \
|
|
expat \
|
|
lz4 \
|
|
utf8proc \
|
|
zlib \
|
|
sqlite \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
SUBVERSION_CONF_OPTS = \
|
|
--with-expat=$(STAGING_DIR)/usr/include:$(STAGING_DIR)/usr/lib: \
|
|
--with-apr=$(STAGING_DIR)/usr \
|
|
--with-apr-util=$(STAGING_DIR)/usr \
|
|
--with-lz4=$(STAGING_DIR)/usr \
|
|
--with-utf8proc=$(STAGING_DIR)/usr \
|
|
--with-zlib=$(STAGING_DIR)/usr \
|
|
--without-serf \
|
|
--without-apxs \
|
|
--without-berkeley-db \
|
|
--without-sasl \
|
|
--without-gnome-keyring \
|
|
--without-libmagic
|
|
SUBVERSION_CONF_ENV = LIBS=$(TARGET_NLS_LIBS)
|
|
|
|
$(eval $(autotools-package))
|