lp:ubuntu/vivid-security/subversion

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

88. By Marc Deslauriers on 2015-08-19

* SECURITY UPDATE: denial of service via large number of REPORT requests
  - debian/patches/CVE-2015-0202.patch: refactor locking in
    subversion/libsvn_fs_fs/tree.c.
  - CVE-2015-0202
* SECURITY UPDATE: denial of service via crafted parameter combinations
  - debian/patches/CVE-2015-0248.patch: properly handle missing revision
    numbers in subversion/mod_dav_svn/reports/get-location-segments.c,
    subversion/svnserve/serve.c.
  - CVE-2015-0248
* SECURITY UPDATE: svn:author property spoofing issue
  - debian/patches/CVE-2015-0251.patch: restrict svn:author modifications
    in subversion/mod_dav_svn/deadprops.c.
  - CVE-2015-0251
* SECURITY UPDATE: incorrect anonymous access restriction
  - debian/patches/CVE-2015-3184.patch: use force_authn() in Makefile.in,
    build/ac-macros/apache.m4, build/run_tests.py,
    subversion/mod_authz_svn/mod_authz_svn.c,
    subversion/tests/cmdline/README,
    subversion/tests/cmdline/davautocheck.sh,
    subversion/tests/cmdline/mod_authz_svn_tests.py,
    subversion/tests/cmdline/svntest/main.py, win-tests.py.
  - CVE-2015-3184
* SECURITY UPDATE: sensitive path information disclosure
  - debian/patches/CVE-2015-3187.patch: fix order in
    subversion/libsvn_repos/rev_hunt.c, added tests to
    subversion/tests/cmdline/authz_tests.py,
    subversion/tests/libsvn_repos/repos-test.c.
  - CVE-2015-3187
* debian/control: Depend on specific version of apache2-dev and
  apache2-bin to make sure fix for CVE-2015-3185 is included.

87. By Colin Watson on 2015-01-04

* Resynchronise with Debian. Remaining changes:
  - debian/rules: Manually create the doxygen output directory, otherwise
    we get weird build failures when running parallel builds.
  - Build a python-subversion-dbg package.
  - Build-depend on python-all-dbg.
  - Only build on requested python versions (X-Python-Versions:).
  - debian/patches/verbose-tests.diff: Make tests verbose.

86. By Colin Watson on 2014-11-17

* Resynchronise with Debian. Remaining changes:
  - debian/rules: Manually create the doxygen output directory, otherwise
    we get weird build failures when running parallel builds.
  - Build a python-subversion-dbg package.
  - Build-depend on python-all-dbg.
  - Only build on requested python versions (X-Python-Versions:).
  - debian/patches/verbose-tests.diff: Make tests verbose.

85. By Colin Watson on 2014-08-21

Rebuild for Perl 5.20.0.

84. By Marc Deslauriers on 2014-08-14

* Merge with Debian; remaining changes:
  - debian/rules: Manually create the doxygen output directory, otherwise
    we get weird build failures when running parallel builds.
  - Build a python-subversion-dbg package.
  - Build-depend on python-dbg.
  - Build-depend on default-jre-headless/-jdk.
  - only build on requested python versions (X-Python-Versions:)
  - Do not apply java-build patch.
  - debian/patches/verbose-tests.diff: make tests verbose
  - debian/control: added ruby-test-unit to Build-Depends
  - Check for libtoolize instead of libtool, which is not used for
    the build.
* debian/patches/lp1353142.patch: fix alignment issue causing test
  failures on ppc64el in subversion/libsvn_delta/text_delta.c.
  (LP: #1353142)

83. By Matthias Klose on 2014-08-05

Build using -O2 on ppc64el. Test failures with -O3.

82. By Matthias Klose on 2014-08-05

* Merge with Debian; remaining changes:
  - debian/rules: Manually create the doxygen output directory, otherwise
    we get weird build failures when running parallel builds.
  - Build a python-subversion-dbg package.
  - Build-depend on python-dbg.
  - Build-depend on default-jre-headless/-jdk.
  - only build on requested python versions (X-Python-Versions:)
  - Do not apply java-build patch.
  - debian/patches/ruby19.patch: disable check for ruby 1.8, and backport
    a few changes to the test suite.
  - debian/control: added ruby-test-unit to Build-Depends
  - Check for libtoolize instead of libtool, which is not used for
    the build.

81. By Matthias Klose on 2014-04-28

* Merge with Debian; remaining changes:
  - Create pot file on build.
  - debian/rules: Manually create the doxygen output directory, otherwise
    we get weird build failures when running parallel builds.
  - Build a python-subversion-dbg package.
  - Build-depend on python-dbg.
  - Build-depend on default-jre-headless/-jdk.
  - only build on requested python versions (X-Python-Versions:)
  - Do not apply java-build patch.
  - Drop svn2cl to Suggests; we don't particularly need it in Ubuntu main
  - Add DEP-8 test for Apache functionality.
  - debian/patches/ruby19.patch: disable check for ruby 1.8, and backport
    a few changes to the test suite.
  - debian/control: added ruby-test-unit to Build-Depends
  - Check for libtoolize instead of libtool, which is not used for
    the build.
  - Temporarily disable running the tests on powerpc.

80. By Matthias Klose on 2014-02-24

Run the tests on powerpc again.

79. By Matthias Klose on 2014-02-23

Re-add lost python-all-dbg build dependency.