summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGustavo Zacarias <gustavo@zacarias.com.ar>2014-12-16 11:08:17 -0300
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>2014-12-21 13:22:18 +0100
commitd80f5c99fdaf2ffb20e3453236b987301b277b34 (patch)
treece0bc56913104f5c30709a02057d63bf5afc86fb
parentcf7c832853025bdd632a7eb998b26ca01cc01f21 (diff)
downloadbuildroot-d80f5c99fdaf2ffb20e3453236b987301b277b34.tar.gz
buildroot-d80f5c99fdaf2ffb20e3453236b987301b277b34.zip
subversion: security bump to version 1.7.19
Fixes: CVE-2014-3580: mod_dav_svn DoS from invalid REPORT requests. CVE-2014-8108: mod_dav_svn DoS from use of invalid transaction names. Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
-rw-r--r--package/subversion/subversion.hash2
-rw-r--r--package/subversion/subversion.mk3
2 files changed, 3 insertions, 2 deletions
diff --git a/package/subversion/subversion.hash b/package/subversion/subversion.hash
new file mode 100644
index 0000000000..b6a0e88617
--- /dev/null
+++ b/package/subversion/subversion.hash
@@ -0,0 +1,2 @@
+# From https://mail-archives.apache.org/mod_mbox/subversion-dev/201412.mbox/%3C548F4EEB.7030601@apache.org%3E
+sha1 bb3cd135bbd856e7f0f2d59313f075b9bbec9848 subversion-1.7.19.tar.gz
diff --git a/package/subversion/subversion.mk b/package/subversion/subversion.mk
index 5f37a87c77..3c6c3f0f73 100644
--- a/package/subversion/subversion.mk
+++ b/package/subversion/subversion.mk
@@ -4,11 +4,10 @@
#
################################################################################
-SUBVERSION_VERSION = 1.7.18
+SUBVERSION_VERSION = 1.7.19
SUBVERSION_SITE = http://archive.apache.org/dist/subversion
SUBVERSION_LICENSE = Apache-2.0
SUBVERSION_LICENSE_FILES = LICENSE
-
SUBVERSION_DEPENDENCIES = host-pkgconf apr apr-util expat neon zlib sqlite
SUBVERSION_CONF_OPTS = \
--with-expat=$(STAGING_DIR)/usr/include:$(STAGING_DIR)/usr/lib: \
OpenPOWER on IntegriCloud