Commit Graph

91 Commits

Author SHA1 Message Date
Ross Burton
0b7d336937 subversion: refactor do_configure
Upstream has an autogen.sh which constructs a hand-written aclocal.m4
and manually copies libtool into place. Instead of working around the
bad interaction between these expectations and our autotools class we
can just disable the execution of aclocal in autoreconf and copy files
as autogen.sh does.

(From OE-Core rev: ce0865e9a79b1603a2553392f2cd3b6394239153)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-12-20 12:47:19 +00:00
Ross Burton
8ebcc5c431 subversion: add explicit DEPENDS on expat
The configure script looks explicitly for expat, so add it to DEPENDS.

(From OE-Core rev: ab6b4f45da74727e7adae7ceab6f507b2b043e60)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-12-20 12:47:19 +00:00
Richard Purdie
ab4c066ed3 subversion: Upgrade 1.14.4 -> 1.14.5
(From OE-Core rev: ca4efd307a1b06e58da8cf7617a94521d61c1e70)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-12-17 11:41:53 +00:00
Richard Purdie
964d8ad6b0 subversion: Upgrade 1.14.3 -> 1.14.4
(From OE-Core rev: 0d1cb4295e1abcc73f62490db24b2258f0609745)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-10-22 11:39:58 +01:00
Wang Mingyu
4989adbebb subversion: upgrade 1.14.2 -> 1.14.3
Changelog:
============
 - Client-side bugfixes:
    * Fix svn:mergeinfo diff parser bug when parsing forward merges (r1906502)
    * Fix redirected URL handling with file externals (r1908926, issue #4911)
 - Developer-visible changes:
    * swig-rb: Fix uses of 'File.exist?', deprecated since Ruby 2.1 (r1904472)
    * Build: Fix uses of deprecated Python APIs (r1900882, issue #4899)
    * Build: Retain ability to build SWIG Python 2 bindings (r1900890)
    * Fix reading WC lock status with svn_wc_status2_t (r1904193, issue #4908)
    * JavaHL: Add @Deprecated to silence compiler warnings (r1904936)
    * JavaHL: Fix crash in case of null message in getMessage (r1904938)
    * Fix build breakage of release tarballs by installed swig (r1878379 et al)
    * Add regression test for issue #4711 "invalid xml file" (r1877310)
    * swig-py: Fix building with SWIG 4.1.0 (r1904167)
    * Makefile.in: Fix cleaning of __pycache__ dirs and *.pyc (r1903267)
    * swig-py: Avoid deprecated options to SWIG >= 4.1.0 (r1904198, r1904287)
    * swig-py: Use sysconfig to allow building with Python 3.12 (r1910098)
    * INSTALL: Document not to use SVN with APR 1.7.3 on Windows (r1911278)
    * Fix test suite broken by syntax error when --enable-sasl (r1907124)
    * swig-py: Fix issues #4916, #4917, #4918 (r1912500 et al)
    * swig-py: Improve error when no external diff (r1912724, -743, issue #1778)
    * autogen.sh: Fix building when Python is not named "python" (r1903245)

(From OE-Core rev: 31c0f3697a5d469a11f7cf0bf04e6368fbbbfa50)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07 12:24:57 +00:00
Ross Burton
7bd13c6a08 subversion: upgrade to 1.14.2
This release is primarily to fix two CVEs:
- CVE-2021-28544
- CVE-2022-24070

It also rewrites the macOS autoconf macros to be cross-compile friendly,
so we don't need to delete them anymore.

(From OE-Core rev: ecfbc2ef45a76ab96d215954ca0a109545e6ff02)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-04-26 18:25:08 +01:00
Richard Purdie
b0130fcf91 meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-20 16:45:25 +00:00
Ross Burton
cd5aa858a8 subversion: remove obsolete support for renamed libtool
libtool is now longer renamed to ${host}-libtool, so remove the changes
to support this.

(From OE-Core rev: 0610df3e56e350493731d49fe67261b62d346573)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-12 18:10:22 +00:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Dorinda
8e4567bd5f meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION
Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage

[YOCTO #13471]

(From OE-Core rev: bb05814335e7101bfd8df0a11dc18a044e867bed)

Signed-off-by: Dorinda Bassey <dorindabassey@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26 15:21:21 +00:00
Richard Purdie
dabae8722b subversion: upgrade 1.14.0 -> 1.14.1
(From OE-Core rev: ee8414fa2bef13a64e71e941c3df8e7a0cd9e2d3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-17 11:01:17 +00:00
Jens Rehsack
9108fbe944 subversion: extend for nativesdk
For SDK environments where people still use subversion, let it easily being
added to buildtools-tarball to invite more developers relying on Yocto
based SDKs without much requirement to setup anything on the development
workplace.

(From OE-Core rev: 586a15b76f879f49c5224116cbf506b7ccf96cd2)

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-07-12 12:21:48 +01:00
Alexander Kanavin
c3433400d9 subversion: upgrade 1.13.0 -> 1.14.0
Add python3native, as configure probes into python configuration.

(From OE-Core rev: e57a7d0fb2e12bfd8179e6859a7fc28183b15d76)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-09 13:14:00 +01:00
Jeremy A. Puhlman
4df2beeeb4 subversion: move pkgconfig files in to libdir
All of the .pc files contain the path to ${libdir} which fails
in a multilib rpm image.

(From OE-Core rev: c96c56476fe9025884c7ea96f15f41694a6908fe)

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-02-15 22:42:13 +00:00
Richard Purdie
0c02740147 subversion: upgrade 1.12.2 -> 1.13.0
(From OE-Core rev: 0a8b7ade93eba51adbfc5fbc8ed33118c66cf35c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-30 23:39:09 +00:00
Adrian Bunk
b0efa1952c subversion: Upgrade 1.12.0 -> 1.12.2
Remove backported patch.

(From OE-Core rev: 947828b8e9c4f332533d1d6bd0750ff018d51295)

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-28 11:31:21 +01:00
Kai Kang
111f9ab083 subversion: add packageconfig boost
subversion checks whether build with boost during do_configure. If boost
exists on build machine, it causes configure-unsafe QA issue:

| ERROR: subversion-1.12.0-r0 do_configure: QA Issue: This autoconf log
|  indicates errors, it looked at host include and/or library paths
|  while determining system capabilities.
| Rerun configure task after fixing this. [configure-unsafe]

Add a PACKAGECONFIG 'boost' to fix the issue.

(From OE-Core rev: 237478724be75a4efeebafe07b46a353894ee4ca)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-27 22:45:30 +01:00
Ross Burton
b674d5cc27 subversion: set CVE vendor to Apache
There's a Jenkins plugin for Subversion.

(From OE-Core rev: ac115c3b5f1dcb95fb7d39537693fe0dcd330451)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-18 12:16:19 +01:00
Hongxu Jia
8e7b9685d2 subversion: upgrade 1.11.1 -> 1.12.0
- Backport a patch to fix build failure while APR 1.7.0
...
checking for apr_int64_t Python/C API format string...
configure: error: failed to recognize APR_INT64_T_FMT on this platform
...

- Rebase disable_macos.patch and serfmacro.patch

License-update: no change, declare two new added file
* in build/ac-macros/ax_boost_base.m4
* in build/ac-macros/ax_boost_unit_test_framework.m4

(From OE-Core rev: 68ae5e624642218e7e01805c096da09098a8706f)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-05-12 17:55:11 +01:00
Ruslan Bilovol
fd4bb0f753 subversion: drop lost patch
Commit 5bb47984af79 "subversion: 1.9.7 -> 1.10.0" dropped
serf.m4-Regex-modified-to-allow-D-in-paths.patch
from recipe, but left the patch itself in source tree.
Remove this patch since nobody uses it.

Cc: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: 803d834780cb9380e19209f2bb93953ac3cb6165)

Signed-off-by: Ruslan Bilovol <ruslan.bilovol@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-01-27 13:05:17 +00:00
Richard Purdie
6cf85152ff subversion: Upgrade 1.11.0 -> 1.11.1
(From OE-Core rev: 5d7c41d82a7f0ae26fe0fed5e05507d22c1ec3ab)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-01-18 16:24:40 +00:00
Richard Purdie
476b519c59 subversion: upgrade 1.10.0 -> 1.11.0
(From OE-Core rev: e06afc5cc6d848e63e1dd66425612c6a486a5a6c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-11-19 17:03:24 +00:00
Richard Purdie
e8a8359641 subversion: Update HOMEPAGE
(From OE-Core rev: 5da1b9c29afc249d5ff7e9514bf996227dc28c7a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-21 09:34:40 +01:00
Richard Purdie
dc4d7bb8f7 subversion: 1.9.7 -> 1.10.0
License changed since licenses for the bundled linenoise and lz4 codebases
were added. We don't build either of them. Add MIT since utf8proc is MIT
licensed.

Configure to use the internal utf8proc codebase since we have no copy of that in
OE-Core, nor any need to add one.

Add a dependency on lz4 which is now required rather than using the internal
codebase within subversion.

Drop a patch merged upstream.

(From OE-Core rev: 5bb47984af79fe2e8c3ba5bc6895741131f03bcd)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-21 09:34:40 +01:00
Andre McCurdy
1d44f1f157 subversion: misc recipe cleanup
- Add default value for PACKAGECONFIG
 - Combine "inherit autotools" with "inherit pkgconfig gettext"
 - Drop historical addition of -L${STAGING_LIBDIR} to LDFLAGS
 - Re-order variables according to OE styleguide

(From OE-Core rev: 10cb7bccc2452375b363ba82bf1be2ee0cb0e8e2)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-11 07:49:37 +01:00
Richard Purdie
f0cb5fe07c subversion: upgrade 1.9.6 -> 1.9.7
(From OE-Core rev: d3973d787c8af417b6f4d433c3a8a60b5333778e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-01-18 12:50:36 +00:00
Wenzong Fan
3f5906e086 subversion: fix CVE-2017-9800
A maliciously constructed svn+ssh:// URL would cause Subversion clients
before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3
to run an arbitrary shell command. Such a URL could be generated by a
malicious server, by a malicious user committing to a honest server(to
attack another user of that server's repositories), or by a proxy
server.

The vulnerability affects all clients, including those that use
file://, http://, and plain (untunneled) svn://.

Backport patch from:
http://svn.apache.org/viewvc?view=revision&amp;sortby=rev&amp;revision=1804691

Reference:
http://subversion.apache.org/security/CVE-2017-9800-advisory.txt

(From OE-Core rev: 6e1f8001a0f3c26cce9c692d25987a3c47ff2f74)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-09-11 17:30:30 +01:00
Alexander Kanavin
bac4e58992 subversion: inherit pkgconfig, so that serf can be found
(From OE-Core rev: 079b765c6ce7032fa2ad429d80090d7531f174a9)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-30 11:14:26 +01:00
Richard Purdie
5a8f9aa347 subversion: Upgrade 1.9.5-> 1.9.6
(From OE-Core rev: 5212d88104b7a53d4bd8bf2320aca9455099ac80)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-21 08:44:25 +01:00
Dengke Du
971fc29713 Revert "subversion: fix "svnadmin create" fail on x86"
This reverts commit cfe6f3e251.

This is because the apr configure wrong, when the apr configure meets the
cross compiling, it pass 8 bytes to "off_t", in apr source code configure.in,
it was hardcoded:

	APR_CHECK_SIZEOF_EXTENDED([#include <sys/types.h>], off_t, 8)

The macro "APR_CHECK_SIZEOF_EXTENDED" was defined in build/apr_common.m4,
it use the "AC_TRY_RUN" macro, this macro let the off_t to 8, when cross
compiling enable.

But in glibc on the x86 or multilib target the "off_t" was 4 bytes, so this
cases dismatch for softwares which use the apr.h, such as subversion, run this:

	svnadmin create test

It failed because the "APR_OFF_T_FMT" was "lld" in apr.h when apr configure,
but the "apr_off_t" was 4 bytes, in the apr source code: apr_snprintf.c

	i_quad = va_arg(ap, apr_int64_t);

When the function apr_vformatter meets "lld", it would use the above to parse,
but the above read 8 bytes, so the follow-up data go to wrong.

So we should configure the apr correct when cross compiling. I do this on the
following patchs.

(From OE-Core rev: fbdfb39c011676fe61a4d58b62226126e0e9ec62)

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-12-22 08:50:16 +00:00
Richard Purdie
0fe7a940e2 subversion: Upgrade 1.9.4 -> 1.9.5
(From OE-Core rev: 4cfb7e9342978e77b0167441360330e66b9931cb)

(From OE-Core rev: 3f11325f7b7f3d0d1c0829f5f46e65814cf00de3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-12-17 09:57:02 +00:00
Richard Purdie
862d6db9d3 subversion: Fix issues in LDFLAGS sed manipulation
The existing sed expression can match expressions like
--sysroot=/some/path/xxx-linux/ which clearly isn't intended and
injects incorrect paths into LDFLAGS.

Fix this in the same way we address the problem in CFLAGS. This fixes corrupt
build paths and incorrect paths in .la files amongst other issues.

(From OE-Core rev: 9a8382422ddbb0972dc25b752204f4908bb9857c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-12-08 10:31:29 +00:00
Dengke Du
cfe6f3e251 subversion: fix "svnadmin create" fail on x86
When run the following command on x86:

        svnadmin create /var/test_repo

It cause segmentation fault error like the following:

        [16499.751837] svnadmin[21117]: segfault at 83 ip 00000000f74bf7f6 sp 00000000ffdd9b34 error 4 in libc-2.24.so[f7441000+1af000]
        Segmentation fault (core dumped)

This is because in source code ./subversion/libsvn_fs_fs/low_level.c,
function svn_fs_fs__unparse_footer, when:

        target arch:    x86
        apr_off_t:      4 bytes

if the "APR_OFF_T_FMT" is "lld", it still use type "apr_off_t" to pass
data to apr, but in apr source code file apr_snprintf.c the function
apr_vformatter meet "lld", it would use the:

        i_quad = va_arg(ap, apr_int64_t);

It uses the apr_int64_t to deal data, it read 8 bytes, so the follow-up
data may be error.

(From OE-Core rev: 7ea7e3db7801b58495b89a95ec2751d618d3a29f)

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-11-06 23:35:36 +00:00
Robert Yang
5a35913b86 subversion: 1.9.3 -> 1.9.4
(From OE-Core rev: 8620d13f8cf18be13429b0015d11e4efefe75b20)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-08-25 23:03:45 +01:00
Alexander Kanavin
79797a8b9b subversion: remove unnecessary python dependency
It would be useful if swig was enabled, but it isn't.

(From OE-Core rev: 54cbeb2975e2ea386386fce077146935afa0f719)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-06-01 12:38:42 +01:00
Richard Purdie
b08dfb5d60 subversion: Upgrade 1.9.2 -> 1.9.3
(From OE-Core rev: 7423386923a37bca21aef99eea8dddf572d51a13)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 11:54:47 +00:00
Alexander Kanavin
21e35df191 subversion: update to 1.9.2
Drop backported CVE fix patches
libtool2.patch has been rebased and renamed to 0001-Fix-libtool-name-in-configure.ac.patch
LICENSE checksum has been updated because more 3rd party attributions have been added to it,
it's otherwise still Apache 2.

(From OE-Core rev: b57f57ea092f93bd7e1268b04c7d3c4af2149a77)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12 23:42:54 +00:00
Wenzong Fan
04034e75e0 subversion: fix CVE-2015-3187
The svn_repos_trace_node_locations function in Apache Subversion before
1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used,
allows remote authenticated users to obtain sensitive path information
by reading the history of a node that has been moved from a hidden path.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3187-advisory.txt

(From OE-Core rev: 6da25614edcad30fdb4bea8ff47b81ff81cdaed2)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:05 +00:00
Wenzong Fan
f91aedfb56 subversion: fix CVE-2015-3184
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before
1.8.14, when using Apache httpd 2.4.x, does not properly restrict
anonymous access, which allows remote anonymous users to read hidden
files via the path name.

Patch is from:
http://subversion.apache.org/security/CVE-2015-3184-advisory.txt

(From OE-Core rev: 29eb921ed074d86fa8d5b205a313eb3177473a63)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:05 +00:00
Ross Burton
9336e1fd80 subversion: add explicit dependency on file-replacement-native for native builds
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-27 07:24:30 +00:00
Jose Lamego
873b8edd41 subversion_1.8.13.bb: Upstream-Status updated to Accepted
Upstream-Status changed to Accepted due to [1]

[1] http://svn.apache.org/viewvc/subversion/trunk/build/ac-macros/serf.m4?r1=1594156&r2=1689824

(From OE-Core rev: 7785c496df839bd811cb33aef4b54158e81aa2c5)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-20 10:40:40 +01:00
Jose Lamego
d93171c060 subversion_1.8.13.bb: Regex modified to allow '-D' in paths
Modified the regex sed in serf.m4 to allow the use of '-D' characters
in project folder names without having compilation error from
subversion-native.

[YOCTO #7874]

(From OE-Core rev: 04554b128c358e3c10f6581fd4506764a65240b8)

Signed-off-by: Jose Lamego <jose.a.lamego@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-08 00:01:23 +01:00
Richard Purdie
b3fc3748a0 subversion: Fix subversion-native on Fedora22
Similarly to:
http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=9b19d6548a345009a6de79a6820c07a72054d961

we also need to fix the subversion-native case with gcc5 by using
the same fix to the BUILD_CPPFLAGS.

(From OE-Core rev: a5e7a1e597e7bbe3bbc547f43a89d00a8a9a9924)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-27 22:42:56 +01:00
Roy Li
24609d9b60 subversion: remove 1.6.X recipes
Removing the 1.6.X recipes, since there is a new version 1.8.X recipes,
and hope that all projects already upgraded their premirror caches to
use new format

(From OE-Core rev: 65c4dcbefbe118eb1b04335d7d6171236a1315c2)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-30 23:04:17 +01:00
Roy Li
a03039caec subversion: upgrade it from 1.8.11 to 1.8.13
upgrade to fix two CVE defects: CVE-2015-0248 and CVE-2015-0251

(From OE-Core rev: cb00b9e0330970b5c768aae9ddd4703a7172acbe)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-28 07:56:55 +01:00
Khem Raj
9b19d6548a subversion: Add -P to CPPFLAGS
see https://gcc.gnu.org/gcc-5/porting_to.html

we need to stop the preprocessor from generating the #line directives
or we run into issues like

| checking for apr_int64_t Python/C API format string...
| configure: error: failed to recognize APR_INT64_T_FMT on this platform
| Configure failed. The contents of all config.log files follows to aid
debugging
| ERROR: oe_runconf failed

Rightly subversion should be fixed but lets leave that to subversion
folks

Change-Id: I02a89798ff949f79967ab0a73adcddaa4218662d
(From OE-Core rev: 7793b1c425077ed6ed11a9bc2a8b1b96612b1c96)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-27 14:59:48 +01:00
Richard Purdie
8b54cb7e96 subversion: 1.8.10 -> 1.8.11
(From OE-Core rev: 6218b590e02afc346b473e62ee4e4624b677cacf)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:24 +00:00
Robert Yang
b5577e02e0 subversion 1.6.15: fix unknown-configure-option
WARNING: QA Issue: subversion: configure was passed unrecognised options: --without-apache [unknown-configure-option]

(From OE-Core rev: 49ad2ba8c2ffe57300b37e6bd0d9d25eb30a5449)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-08 08:00:28 +00:00
Richard Purdie
e20a85dab9 subversion: 1.8.9 -> 1.8.10
(From OE-Core rev: aa3aa6fff5b5e5b36b76665846e8b7f0408f7e81)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-11-06 16:45:18 +00:00
Yue Tao
a64e37ac0e subversion: Security Advisory - subversion - CVE-2014-3528
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before
1.8.10 uses an MD5 hash of the URL and authentication realm to store
cached credentials, which makes it easier for remote servers to obtain
the credentials via a crafted authentication realm.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528

(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-11-04 10:27:08 +00:00