kumquat-buildroot/package/subversion/subversion.mk
Peter Korsgaard 4109401acd package/subversion: security bump to version 1.14.1
Fixes the following security issue:

CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion
mod_authz_svn

Subversion's mod_authz_svn module will crash if the server is using
in-repository authz rules with the AuthzSVNReposRelativeAccessFile option
and a client sends a request for a non-existing repository URL.

For more details, see the advisory:
https://subversion.apache.org/security/CVE-2020-17525-advisory.txt

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-02-12 08:41:41 +01:00

40 lines
1.0 KiB
Makefile

################################################################################
#
# subversion
#
################################################################################
SUBVERSION_VERSION = 1.14.1
SUBVERSION_SOURCE = subversion-$(SUBVERSION_VERSION).tar.bz2
SUBVERSION_SITE = https://downloads.apache.org/subversion
SUBVERSION_LICENSE = Apache-2.0
SUBVERSION_LICENSE_FILES = LICENSE
SUBVERSION_CPE_ID_VENDOR = apache
SUBVERSION_DEPENDENCIES = \
host-pkgconf \
apr \
apr-util \
expat \
lz4 \
utf8proc \
zlib \
sqlite \
$(TARGET_NLS_DEPENDENCIES)
SUBVERSION_AUTORECONF = YES
SUBVERSION_CONF_OPTS = \
--with-expat=$(STAGING_DIR)/usr/include:$(STAGING_DIR)/usr/lib: \
--with-apr=$(STAGING_DIR)/usr \
--with-apr-util=$(STAGING_DIR)/usr \
--with-lz4=$(STAGING_DIR)/usr \
--with-utf8proc=$(STAGING_DIR)/usr \
--with-zlib=$(STAGING_DIR)/usr \
--without-serf \
--without-apxs \
--without-berkeley-db \
--without-sasl \
--without-gnome-keyring \
--without-libmagic
SUBVERSION_CONF_ENV = LIBS=$(TARGET_NLS_LIBS)
$(eval $(autotools-package))