-------------------------------------------------------------------

Tue Apr  5 17:35:08 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>

​

- Fix CVE-2022-24070 mod_dav_svn is vulnerable to memory corruption

  (CVE-2022-24070, bsc#1197940)

  * subversion-CVE-2022-24070.patch

- Fix CVE-2021-28544 SVN authz protected copyfrom paths regression

  (CVE-2021-28544, bsc#1197939)

  * subversion-CVE-2021-28544.patch

​

-------------------------------------------------------------------

Thu Mar  3 08:40:11 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>

​

- Fix testCrash_RequestChannel_nativeRead_AfterException test on

  aarch64 and ppc64le, bsc#1195486 bsc#1193778

  * fix-javahl-test.patch

​

-------------------------------------------------------------------

Fri Nov 12 11:23:14 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>

​

- The following issues have already been fixed in this package

  but weren't previously mentioned in the changes file:

  * bsc#1185052

​

-------------------------------------------------------------------

Wed Oct 20 16:37:13 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>

​

- Change to using systemd-sysusers

​

-------------------------------------------------------------------

Thu Oct 14 16:46:07 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

​

- always build with kwallet support, no longer make a

  distrinction between openSUSE and SLE (boo#1191282)

​

-------------------------------------------------------------------

Wed Feb 10 10:05:24 UTC 2021 - Markéta Machová <mmachova@suse.com>

​

- Update to 1.14.1

  * Fix non-deterministic generation of mergeinfo

  * Fix invalid SQL quoting in working copy upgrade system

  * Convert filename for editor from UTF-8 to the locale's encoding

  * Make the hot-backup.py script work with Python 3

  * Fix an uninitialized read in FSFS

  * Fix a potential NULL dereference in the config file parser (bsc#1181687, CVE-2020-17525)

- Rebase subversion-no-build-date.patch

​

-------------------------------------------------------------------

Tue Dec  1 14:33:34 UTC 2020 - pgajdos@suse.com

​

- use system apache rpm macros

​

-------------------------------------------------------------------

Mon Oct 19 10:20:28 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

​

- Enable kde integration from 15-SP3 and newer releases jsc#SLE-11654

​

-------------------------------------------------------------------

Sat Sep 26 09:25:36 UTC 2020 - d_werner@gmx.net

​

- update the path of the PIDFile in the svnserve.service file:

  change /var/run/svnserve/svnserve.pid to /run/svnserve/svnserve.pid

​

-------------------------------------------------------------------

Fri Sep 25 15:04:51 UTC 2020 - d_werner@gmx.net

​

- update the tmpfiles.d/ drop-in file as requested by the

  rpm output 

  /usr/lib/tmpfiles.d/svnserve.conf:1: Line references path below 

  legacy directory /var/run/, updating /var/run/svnserve → /run/svnserve;

​

-------------------------------------------------------------------

Wed Sep 23 18:53:25 UTC 2020 - Dirk Mueller <dmueller@suse.com>

​

- speed up testsuite run by using /dev/shm

- disable output aggregation that spec-cleaner introduces in checks

​

-------------------------------------------------------------------

Wed Sep  9 08:07:30 UTC 2020 - Antonio Larrosa <alarrosa@suse.com>

​

- Fix jira reference to SLE-11901

​

-------------------------------------------------------------------

Fri Sep  4 12:21:59 UTC 2020 - Antonio Larrosa <alarrosa@suse.com>

​

- Add patch to remove dependency on kdelibs4support just to run

  kf5-config to find out that headers are in /usr/include and

  libraries are in /usr/lib(64) (jsc#SLE-11901):

  * remove-kdelibs4support-dependency.patch

​

-------------------------------------------------------------------

Mon Jul 27 15:09:50 UTC 2020 - Callum Farmer <callumjfarmer13@gmail.com>

​

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

​

-------------------------------------------------------------------

Thu Jun 11 07:40:28 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

​

- Update to 1.14.0:

  * Support for Python 3.x

  * Support for Python 2.7 is being phased out

  * New Build-Time Dependency: py3c

  * Many enhancements and bug fixes

- Drop patches:

  * subversion-1.12.0-swig-4.patch

  * ruby27-warnings.patch

  * ruby-includes.patch

- Refresh patch subversion-no-build-date.patch

​

-------------------------------------------------------------------

Tue May  5 09:24:22 UTC 2020 - Martin Liška <mliska@suse.cz>

​

- Add disable-fs-fs-pack-test.patch in order

  to fix boo#1170834.

​

-------------------------------------------------------------------

Wed Apr 15 07:39:43 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

​

- Try to get building with ruby 2.7 bsc#1169446

- Add patches:

  * ruby27-warnings.patch

  * ruby-includes.patch

​

-------------------------------------------------------------------

Tue Mar 31 06:02:23 UTC 2020 - Martin Liška <mliska@suse.cz>

​

- Fix boo#1167467 by gcc10-do-not-optimize-get_externals_to_pin.patch.

​

-------------------------------------------------------------------

Wed Jan  8 09:59:46 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>

​

- Disable dependency on ctypesgen which is borked with new pythons

​

-------------------------------------------------------------------

Sun Nov 10 08:28:48 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

​

- Apache Subversion 1.13.0:

  * New 'svnadmin rev-size' command to report revision size

  * Performance improvement for 'svn st' etc., in WC SQLite DB

  * Fix 'svn patch' setting mode 0600 on patched files with props

  * Fix "svn diff --changelist ARG" broken in subdirectories

  * Fix misleading 'redirect cycle' error on a non-repository URL

  * svnserve: Report some errors that were previously ignored

  * Make server code more resilient to malformed paths and URLs

  * Make dump stream parser more resilient to malformed dump stream

  * mod_dav_svn: Fix missing Last-Modified header on 'external' GET requests

  * Fix excessive memory usage in some cases reading binary data

​

-------------------------------------------------------------------

Thu Sep 26 08:35:08 UTC 2019 - Franz Sirl <franz.sirl-obs@lauterbach.com>

​

- Enable build and check with swig-3:

  * Only enable subversion-1.12.0-swig-4.patch for Tumbleweed

  * 'make check-swig-py' doesn't pass with swig-4

- Enable 'make check-swig-rb' everywhere again

​

-------------------------------------------------------------------

Fri Jul 26 10:03:14 UTC 2019 - matthias.gerstner@suse.com

​

- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by

  firewalld, see [1].

​

  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html

​

-------------------------------------------------------------------

Thu Jul 25 08:26:09 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>

​

- Add patches to fix bsc#1142743 and bsc#1142721 CVE-2019-0203

  CVE-2018-11782:

  * CVE-2018-11782.patch

  * CVE-2019-0203.patch

​

-------------------------------------------------------------------

Thu Jul 25 07:52:01 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>

​

- Update to 1.12.2:

  * Fix conflict resolver bug: local and incoming edits swapped. (r1863285)

  * Fix memory lifetime problem in a libsvn_wc error code path. (r1863287)

  * CVE-2018-11782 bsc#1142743

  * CVE-2019-0203 bsc#1142721

​

-------------------------------------------------------------------

Sun Jul 21 07:15:02 UTC 2019 - Antoine Belvire <antoine.belvire@opensuse.org>

​

- Add subversion-1.12.0-swig-4.patch: Fix build with Swig 4

  (boo#1135747).

​

-------------------------------------------------------------------

Sat May 18 01:45:06 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

​

- Apache Subversion 1.12.0:

  * 'move vs. move' merge conflicts can now be resolve

  * 'svn --version --verbose' shows loaded libraries on Linux

  * 'svnrdump' can read/write a file instead of stdin/stdout

  * 'svn list' tries to not truncate the author's name

  * 'svn list' can show sizes in base-2 unit suffixes

  * 'svn info' shows the size of files in the repository

  * 'svn cleanup' can remove read-only directories

  * Repos-to-WC copy with --parents works with absent target

  * Repos-to-WC copy from foreign repo with peg/operative revs

  * Ignore empty group definitions in authz files

  * svnauthz: warn about empty groups in authz files

  * Storing passwords in plain text on disk is disabled by default

​

-------------------------------------------------------------------

Fri Apr 26 10:41:14 UTC 2019 - mvetter@suse.com

​

- bsc#1130588: Require shadow instead of old pwdutils

​

-------------------------------------------------------------------

Mon Mar 25 16:58:41 UTC 2019 - olaf@aepfle.de

​

- Install pkgconfig into libdir instead of datadir with

  subversion-pkgconfig.patch

​

-------------------------------------------------------------------

Fri Jan 18 14:03:54 UTC 2019 - astieger@suse.com

​

- Apache Subversion 1.11.1:

  * Add conflict resolver support for added vs unversioned file

  * Add conflict resolver support for unversioned directories

  * Various client-side bug fixes for working copy operations

  * Server: fix unexpected SVN_ERR_FS_NOT_DIRECTORY errors

  * Server: fix mod_dav_svn's SVNUseUTF8 had no effect in some setups

  * Server: fix a crash in mod_http2

  * JavaHL bindings: Fix crash in client code when using external

    diff

- Fixed a vulnerability that allowed malicious SVN clients to trigger a crash

  in mod_dav_svn by omitting the root path from a recursive directory listing

  request (CVE-2018-11803 bsc#1122842)

​

-------------------------------------------------------------------

Fri Jan 11 09:21:41 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>

​

- Move the bash completion to /usr as per rpmlint warning

​

-------------------------------------------------------------------

Sat Nov 10 12:12:08 UTC 2018 - astieger@suse.com

​

- Apache Subversion 1.11.0:

  * Shelving is no longer based on patch files

  * Shelves created on 1.10 are not compatible

  * New feature: Checkpointing

  * New viewspec output command

  * Improvements to tree conflict resolutio

  * 'patch' can now read non-pretty-printed svn:mergeinfo diffs

  * Better error when http:// URL is not a Subversion repository

  * Add 'schedule' and 'depth' items to 'svn info --show-item'

  * Allow the client cert password to be saved

  * Various bug fixes

  * On-disk caching of plaintext passwords and passphrases is now

    disabled by default, but users can explicitly allow this

    behavior via runtime configuration

- drop upstreamed subversion-1.10.2-java10.patch

​

-------------------------------------------------------------------

Fri Oct 12 17:53:43 UTC 2018 - astieger@suse.com

​

- Apache Subversion 1.10.3:

  * Store the HTTPS client cert password

  * Fix shelving when custom diff command is configured

  * Fix conflict resolver crashes

  * Fix conflict resolver endless scan in some cases

  * Fix "Accept incoming deletion" on locally deleted file

  * Fix "resolver adds unrelated moves to move target list"

  * Reject bad PUT before CHECKOUT in v1 HTTP protocol 

  * Let 'svnadmin recover' prune the rep-cache even if disabled

  * Allow commands like 'svn ci --file X' to work when X is a FIFO

  * 'svnadmin verify --keep-going --quiet' shows an error summary 

  * Fix error in german translation for 'svn help merge'

​

-------------------------------------------------------------------

Tue Sep 11 08:36:11 UTC 2018 - Fridrich Strba <fstrba@suse.com>

​

- Added patches:

  * subversion-1.10.2-java10.patch

    + Partly upstream patch to remove javah requirement to build

      Subversion Java bindings.

    + Apply only for builds with jdk10+ that don't have javah tool

      any more

  * subversion-1.10.2-javadoc.patch

    + Avoid loading Internet URLs during the build

- Allow building with all Java versions starting with 1.6

​

-------------------------------------------------------------------

Thu Aug 23 13:48:11 UTC 2018 - astieger@suse.com

​

- Apache Subversion 1.10.2:

  * Correctly claim to offer Gnome Keyring support with libsecret

  * Fix segfault using Gnome Keyring with libsecret

  * Fix JavaHL local refs capacity warning when unparsing externals

  * Prune externals after 'update --set-depth=exclude'

  * Fix "conflict resolver searches too far back ..."

- Dropped patches that are included in the upstream release:

  * subversion-1.10.0-fix-svn-version-gnome-keyring.patch

​

-------------------------------------------------------------------

Wed Jul 25 12:32:43 UTC 2018 - tchvatal@suse.com

​

- Use macro to compile python objects, do not do it by hand

​

-------------------------------------------------------------------

Fri Apr 27 18:31:07 UTC 2018 - antoine.belvire@opensuse.org

​

- Remove useless build dependency on pkgconfig(bash-completion).

- Make subversion-bash-completion requires bash-completion, not

  pkgconfig(bash-completion).

​

-------------------------------------------------------------------

Sun Apr 15 17:43:29 UTC 2018 - astieger@suse.com

​

- Apache Subversion 1.10.0:

  * new conflict resolver

  * Many bug fixes and enhancements

  * lz4 compression for the repositories

  * https://subversion.apache.org/docs/release-notes/1.10.html

- Packaging changes;

  * Convert dependencies to pkgconfig counterparts

  * Add dependency on liblz4 and utf8proc

  * Use %license (boo#1082318)

  * build with KDE5 KWallet support

- Refresh patches:

  * subversion-1.8.0-rpath.patch

  * subversion-no-build-date.patch

  * subversion-fix-parallel-build-support-for-perl-bindings.patch

  * subversion-perl-underlinking.patch

- dropped patches:

  * subversion-1.8.11-autocheck-time.patch, upstream

  * subversion-1.9.0-allow-httpd-2.4.6.patch, no longer required

- Add subversion-1.10.0-fix-svn-version-gnome-keyring.patch to list

  GNOME keyring support in svn --version when using libsecret

​

-------------------------------------------------------------------

Tue Dec 19 06:59:02 UTC 2017 - fstrba@suse.com

​

- BuildConflict with jdk10 or higher. The build uses extensively

  the javah tool which is removed in jdk10.

​

-------------------------------------------------------------------

Thu Nov 23 13:45:36 UTC 2017 - rbrown@suse.com

​

- Replace references to /var/adm/fillup-templates with new 

  %_fillupdir macro (boo#1069468)

​

-------------------------------------------------------------------

Wed Nov  1 18:01:15 UTC 2017 - mpluskal@suse.com

​

- Explicitly require python2

​

-------------------------------------------------------------------

Mon Oct  9 10:30:38 UTC 2017 - vcizek@suse.com

​

- Disable kwallet support on openSUSE built with openssl 1.1, because

  otherwise the libopenssl pulled in by libserf and libqt4 create

  a conflict (boo#1042629)

​

-------------------------------------------------------------------

Fri Aug 25 12:41:19 UTC 2017 - tchvatal@suse.com

​

- Switch the KDE condition to match sle15 too

​

-------------------------------------------------------------------

Fri Aug 11 09:14:24 UTC 2017 - tchvatal@suse.com

​

- Remove user changing option inherited from sysconfig from README

  * Was removed as it does not work on systemd, new section is there

    describing current approach

​

-------------------------------------------------------------------

Thu Aug 10 15:04:45 UTC 2017 - astieger@suse.com

​

- Apache Subversion 1.9.7: 

  * CVE-2017-9800: A remote attacker could have caused svn clients

    to execute arbitrary code via specially crafted URLs in

    svn:externals and svn:sync-from-url properties. (bsc#1051362)

​

-------------------------------------------------------------------

Wed Aug  9 10:34:08 UTC 2017 - tchvatal@suse.com

​

- Apache Subversion 1.8.19 (bsc#1051362):

  * A malicious, compromised server or MITM may cause svn client to

    execute arbitrary commands by sending repository content with

    svn:externals definitions pointing to crafted svn+ssh URLs.

    CVE-2017-9800

​

-------------------------------------------------------------------

Fri Jul 28 14:18:49 UTC 2017 - astieger@suse.com

​

- Add instructions for running svnserve as a user different from

  "svn", and remove sysconfig variables that are no longer

  effective with the systemd unit. bsc#1049448

​

-------------------------------------------------------------------

Fri Jul  7 11:17:13 UTC 2017 - astieger@suse.com

​

- Apache Subversion 1.9.6 (bsc#1026936):

  This change makes Subversion resilient to collision attacks,

  including SHA-1 collision attacks such as <http://shattered.io/>.

  https://subversion.apache.org/faq#shattered-sha1

  * fsfs: never attempt to share directory representations

  * fsfs: make consistency independent of hash algorithms

  * cp/mv: improve error message when target is an unversioned dir

  * merge: reduce memory usage with large amounts of mergeinfo

  * 'svnadmin freeze': document the purpose more clearly

  * dump: fix segfault when a revision has no revprops

  * fsfs: improve error message upon failure to open rep-cache

  * work around an APR bug related to file truncation

  * javahl: follow redirects when opening a connection

​

-------------------------------------------------------------------

Fri Jul  7 11:17:13 UTC 2017 - astieger@suse.com

​

- Apache Subversion 1.8.18 (bsc#1026936):

  This change makes Subversion resilient to collision attacks,

  including SHA-1 collision attacks such as <http://shattered.io/>.

  https://subversion.apache.org/faq#shattered-sha1

  * fsfs: never attempt to share directory representations

  * fsfs: make consistency independent of hash algorithms

  * work around an APR bug related to file truncation

​

-------------------------------------------------------------------

Thu Jun 15 14:37:29 UTC 2017 - nmoudra@suse.com

​

- Deleted all xinetd related entries as it is not desired anymore

  * its obsolete due to socket based service

  * socket based service is not needed at this pkg

​

-------------------------------------------------------------------

Mon Mar 13 10:28:41 UTC 2017 - tchvatal@suse.com

​

- Update to build with new RPM in Factory

- Provide the kwallet auth in main pkg in case kde integration is

  disabled

- Use apache2-rpm-macros to get the apache variables

​

-------------------------------------------------------------------

Thu Dec 22 14:14:01 UTC 2016 - stsp@elego.de

​

- Package the 'svnauthz' binary.

​

-------------------------------------------------------------------

Wed Nov 30 12:03:57 UTC 2016 - astieger@suse.com

​

- Apache Subversion 1.8.17:

  * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in

    mod_dontdothat and Subversion clients using http(s)://

  * Client-side bugfixes:

    + fix handling of newly secured subdirectories in working copy

    + ra_serf: fix deleting directories with many files

    + gpg-agent: properly handle passwords with percent characters

    + merge: fix crash when merging to a local add

  * Server-side bugfixes:

    + fsfs: fix possible data reconstruction error

    + svnlook: properly remove tempfiles on diff errors

  * Client-side and server-side bugfixes:

    + fix potential memory access bugs

  * Bindings bugfixes:

    + javahl: fix temporarily accepting SSL server certificates

    + swig-pl: do not corrupt "{DATE}" revision variable

    + swig-pl: fix possible stack corruption

  * Developer-visible changes:

    + fix inconsistent behavior of inherited property API

    + fix patch filter invocation in svn_client_patch()

    + fix potential build issue with invalid SVN_LOCALE_DIR

​

-------------------------------------------------------------------

Wed Nov 30 07:42:07 UTC 2016 - tchvatal@suse.com

​

- Version update to 1.9.5:

  * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in

    mod_dontdothat and Subversion clients using http(s)://

- Client-side bugfixes:

  * fix accessing non-existent paths during reintegrate merge (r1766699 et al)

  * fix handling of newly secured subdirectories in working copy (r1724448)

  * info: remove trailing whitespace in --show-item=revision (issue #4660)

  * fix recording wrong revisions for tree conflicts (r1734106)

  * gpg-agent: improve discovery of gpg-agent sockets (r1766327)

  * gpg-agent: fix file descriptor leak (r1766323)

  * resolve: fix --accept=mine-full for binary files (issue #4647)

  * merge: fix possible crash (issue #4652)

  * resolve: fix possible crash (r1748514)

  * fix potential crash in Win32 crash reporter (r1663253 et al)

- Server-side bugfixes:

  * fsfs: fix "offset too large" error during pack (issue #4657)

  * svnserve: enable hook script environments (r1769152)

  * fsfs: fix possible data reconstruction error (issue #4658)

  * fix source of spurious 'incoming edit' tree conflicts (r1770108)

  * fsfs: improve caching for large directories (r1721285)

  * fsfs: fix crash when encountering all-zero checksums (r1759686)

  * fsfs: fix potential source of repository corruptions (r1756266)

  * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate

    (issue #3084)

  * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)

  * fsfs: fix unexpected "database is locked" errors (r1741096 et al)

  * fsfs: fix opening old repositories without db/format files (r1720015)

- Client-side and server-side bugfixes:

  * fix possible crash when reading invalid configuration files (r1715777)

- Bindings bugfixes:

  * swig-pl: do not corrupt "{DATE}" revision variable (r1767768)

  * javahl: fix temporary accepting SSL server certificates (r1764851)

  * swig-pl: fix possible stack corruption (r1683266, r1683267)

- Drop no longer needed patch:

  * subversion-1.8.11-swig-py-comment-3.patch

​

-------------------------------------------------------------------

Thu Aug  4 14:42:36 UTC 2016 - tchvatal@suse.com

​

- Add patch to build with swig3 to fix build on sle12sp2+

  * subversion-swig3.patch

​

-------------------------------------------------------------------

Wed Jun 29 10:52:11 UTC 2016 - tchvatal@suse.com

​

- Drop syslog.target from After wrt bnc#983938

​

-------------------------------------------------------------------

Thu Apr 28 00:00:00 UTC 2016 - astieger@suse.com

​

- Apache Subversion 1.9.4, fixing two server-side vulnerabilities:

  * CVE-2016-2167: svnserve/sasl may authenticate users using the

    wrong realm (boo#976849)

  * CVE-2016-2168: Remotely triggerable DoS vulnerability in

    mod_authz_svn during COPY/MOVE authorization check (boo#976850)

- Client-side bugfixes:

  * diff: support '--summarize --ignore-properties'

  * checkout: fix performance regression on NFS

  * gpg-agent: properly handle passwords with percent characters

  * svn-graph.pl: fix assertion about a non-canonical path

  * hot-backup.py: better input validation

  * commit: abort on Ctrl-C in plaintext password prompt

  * diff: produce proper forward binary diffs with --git

  * ra_serf: fix deleting directories with many files

- Server-side bugfixes:

  * improve documentation for AuthzSVNGroupsFile and groups-db

  * fsfs: reduce peak memory usage when listing large directories

  * fsfs: fix a rare source of incomplete dump files and reports

- Client-side and server-side bugfixes:

  * update INSTALL documentation file

  * fix potential memory access bugs

  * fix potential out of bounds read in svn_repos_get_logs5()

- Bindings bugfixes:

  * ignore absent nodes in javahl version of svn status -u

- API changes:

  * properly interpret parameters in svn_wc_get_diff_editor6()

​

-------------------------------------------------------------------

Wed Mar  2 19:43:18 UTC 2016 - astieger@suse.com

​

- make the subversion package conflict with KWallet and Gnome

  Keyring packages with do not require matching subversion versions 

  in SLE 12 and openSUSE Leap 42.1 and thus break the main package

  upon partial upgrade. Fix/workaround for boo#969159

​

-------------------------------------------------------------------

Tue Dec 15 16:56:10 UTC 2015 - astieger@suse.com

​

- Apache Subversion 1.9.3

  This release fixes two security issues:

  * Remotely triggerable heap overflow and out-of-bounds read

    caused by integer overflow in the svn:// protocol parser.

    CVE-2015-5259 [boo#958299]

​

  * Remotely triggerable heap overflow and out-of-bounds read in

    mod_dav_svn caused by integer overflow when parsing skel-

    encoded request bodies.

    CVE-2015-5343 [boo#958300]

  Other changes:

  * svn: fix possible crash in auth credentials cache

  * cleanup: avoid unneeded memory growth during pristine cleanup

  * diff: fix crash when repository is on server root

  * fix translations for commit notifications

  * ra_serf: fix crash in multistatus parser

  * svn: report lock/unlock errors as failures

  * svn: cleanup user deleted external registrations

  * svn: allow simple resolving of binary file text conflicts

  * svnlook: properly remove tempfiles on diff errors

  * ra_serf: report built- and run-time versions of libserf

  * ra_serf: set Content-Type header in outgoing requests

  * svn: fix merging deletes of svn:eol-style CRLF/CR files

  * ra_local: disable zero-copy code path

  * mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm

  * mod_dav_svn: fix display of process ID in cache statistics

  * mod_dav_svn: use LimitXMLRequestBody for skel-encoded requests

  * svnadmin dump: preserve no-op changes

  * fsfs: avoid unneeded I/O when opening transactions

  * javahl: fix ABI incompatibilty with 1.8

  * javahl: allow non-absolute paths in SVNClient.vacuum

  * fix patch filter invocation in svn_client_patch()

  * add @since information to config defines

  * fix running the tests in compatibility mode

  * clarify documentation of svn_fs_node_created_rev()

  * fix overflow detection in svn_stringbuf_remove and _replace

  * don't ignore some of the parameters to svn_ra_svn_create_conn3

​

-------------------------------------------------------------------

Wed Oct 28 13:27:17 UTC 2015 - astieger@suse.com

​

- Fix copy-and-paste error in Supplements for GNOME keyring

  integration

​

-------------------------------------------------------------------

Wed Sep 23 15:30:14 UTC 2015 - astieger@suse.com

​

- Apache Subversion 1.9.2:

  * fix a numer of client-side crashes and bugs

  * checkout: remove unnecessary I/O operation

  * svn: show utf8proc version in svn --version --verbose

  * fix reporting for empty representations in svnfsfs stats

- upstream keyring updated

​

-------------------------------------------------------------------

Thu Sep  3 13:28:33 UTC 2015 - astieger@suse.com

​

- Apache Subversion 1.9.1:

  * Fix crash with GPG-agent with non-canonical $HOME

  * svn: expose expat and zlib versions in svn --version --verbose

  * svn: improve help text for 'svn info --show-item'

  * svnserve: fixed minor typo in help text

  * Fix an error leak in FSFS verification

  * Fix incomplete membuffer cache initialization

  * svnfsfs: fix some bugs and inconsistencies in load-index

  * Fix memory corruption in copy source SWIG bindings

- drop subversion-1.8.14-httpd-version-number-detection.patch, 

  change is upstream

- adjust subversion-1.9.0-allow-httpd-2.4.6.patch for upstream

  changes

​

-------------------------------------------------------------------

Mon Aug 24 11:08:08 UTC 2015 - tchvatal@suse.com

​

- Remove support for SLE11 from the spec file

- Use supplements instead of suggests on the other side for the

  password store

- Fix kde integration conditional to work nicely on openSUSE Leap

​

-------------------------------------------------------------------

Mon Aug 24 10:56:02 UTC 2015 - tchvatal@suse.com

​

- Use suggests instead of recommends to avoid 180+ new pkgs on

  minimal setup due subversion-password-store bnc#942819

​

-------------------------------------------------------------------

Tue Aug 11 06:38:11 UTC 2015 - astieger@suse.com

​

- Apache Subversion 1.9.0:

  * new FSFS format 7 with major overhaul for I/O reduction

  * prospective blame

  * FSX experimental repository back-end

  * many enhangements and bug fixes

- subversion-devel now ships pkgconfig files

- dependency changes:

  * serf 1.3.4

  * apr, apr-utl 1.3.x

  * httpd 2.2.x

  * java 1.6

  * Python 2.7

- To continue to allow building against blacklisted httpd 2.4.6

  which has the required patches in openSUSE:13.1:Update, update

  subversion-1.8.9-allow-httpd-2.4.6.patch to 

  subversion-1.9.0-allow-httpd-2.4.6.patch

- removed upstreamed patches:

  * subversion-1.8.10-fix-bashisms.patch

  * subversion-1.8.11-swig-py-comment.patch

  * subversion-1.8.11-swig-py-comment-2.patch

- adjust subversion-no-build-date.patch

- drop subversion-1.8.14-unused-var-authnrequired.patch

​

-------------------------------------------------------------------

Thu Aug  6 11:28:23 UTC 2015 - stsp@elego.de

​

- Pass --enable-broken-httpd-auth to configure. Assumes all apache2

  packages contain security patches regardless of their version number.

  Should fix the build on SLES12 and perhaps elsewhere.

​

-------------------------------------------------------------------

Thu Aug  6 11:10:50 UTC 2015 - stsp@elego.de

​

- fix mod_authz_svn build with -Wunused-variable

  * subversion-1.8.14-unused-var-authnrequired.patch

​

-------------------------------------------------------------------

Thu Aug  6 10:48:33 UTC 2015 - stsp@elego.de

​

- Apache Subversion 1.8.14

  This release fixes two vulnerabilities:

  * mod_authz_svn: do not leak information in mixed anonymous/authenticated

    httpd (dav) configurations (CVE-2015-3184) bnc#939514

  * do not leak paths that were hidden by path-based authz (CVE-2015-3187)

    bnc#939517

  Non-security fixes:

  * document svn:autoprops

  * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A

  * improve conflict prompts for binary files

  * improve performance of 'ls -v'

  * improved Sqlite 3.8.9 query performance

  * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev

  * mod_dav_svn: do not ignore skel parsing errors

  * detect invalid svndiff data earlier

  * prevent possible repository corruption on power/disk failures

  * fixed issue #4577: Read error with some repository nodes

  * fixed issue #4531: server-side copy (over dav) is slow

  * swig-pl: fix some stack memory problems

- Refreshed patch subversion-no-build-date.patch

- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch

- Add patch subversion-1.8.14-httpd-version-number-detection.patch

​

-------------------------------------------------------------------

Sat May 16 18:08:29 UTC 2015 - astieger@suse.com

​

- disable failing check-swig-rb

​

-------------------------------------------------------------------

Thu Apr  9 18:12:48 UTC 2015 - astieger@suse.com

​

- fix tests with SQLite 3.8.9, adding

  subversion-1.8.13-fix-sqlite-3.8.9-tests.patch

​

-------------------------------------------------------------------

Wed Apr  1 12:13:37 UTC 2015 - tchvatal@suse.com

​

- Apply sec fixes for bnc#923793 bnc#923794 bnc#923795;

  CVE-2015-0202 CVE-2015-0248 CVE-2015-0251:

  * subversion-bnc923793.patch

  * subversion-bnc923794.patch

  * subversion-bnc923795.patch

​

-------------------------------------------------------------------

Tue Mar 31 12:00:00 UTC 2015 - astieger@suse.com

​

- Apache Subversion 1.8.13

  This release fixes three vulerabilities:

  * Subversion HTTP servers with FSFS repositories were vulnerable

    to a remotely triggerable excessive memory use with certain

    REPORT requests.

    (bsc#923793 CVE-2015-0202) 

  * Subversion mod_dav_svn and svnserve were vulnerable to a

    remotely triggerable assertion DoS vulnerability for certain

    requests with dynamically evaluated revision numbers.

    (bsc#923794 CVE-2015-0248)

  * Subversion HTTP servers allow spoofing svn:author property

    values for new revisions

    (bsc#923795 CVE-2015-0251)

- Non-security updates:

  * fixes number of client and server side non-security bugs

  * improved working copy performanc

  * reduction of resource use

  * stability improvements

  * usability improvements

- 1.8.12 was not released

​

-------------------------------------------------------------------

Fri Mar 20 21:10:19 UTC 2015 - astieger@suse.com

​

- Improve installation of secure password storage plugins for

  KWallet and GNOME Keyring

- Recommend installation of bash completion

​

-------------------------------------------------------------------

Tue Mar 10 20:09:16 UTC 2015 - astieger@suse.com

​

- Fix running all regression tests with davautocheck.sh and

  svnserveautocheck.sh when time is a shell built-in but not

  a command: add subversion-1.8.11-autocheck-time.patch

​

-------------------------------------------------------------------

Wed Mar  4 18:12:54 UTC 2015 - astieger@suse.com

​

- fix sample configuration comments in subversion.conf [boo#916286]

​

-------------------------------------------------------------------

Mon Mar  2 08:08:44 UTC 2015 - astieger@suse.com

​

- SLE 11 SP3 build with all regression tests

- run swig-py tests where they pass

​

-------------------------------------------------------------------

Fri Feb 20 15:59:32 UTC 2015 - astieger@suse.com

​

- fix build with swig 3.0.3 and later:

  * upstream subversion-1.8.11-swig-py-comment.patch

  * upstream subversion-1.8.11-swig-py-comment-2.patch

  * partial subversion-1.8.11-swig-py-comment-3.patch

  There remains a regression in swig 3.0.3 and later which causes

  check-swig-py to fail - disable these checks.

​

-------------------------------------------------------------------

Thu Jan  8 15:41:32 UTC 2015 - bwiedemann@suse.com

​

- fix sysconfig file generation (bnc#911620)

​

-------------------------------------------------------------------

Fri Jan  2 09:46:08 UTC 2015 - tchvatal@suse.com

​

- Sec update bnc#909935 CVE-2014-3580, CVE-2014-8108                           

  * subversion-CVE-2014-3580.patch                                             

  * subversion-CVE-2014-8108.patch

​

-------------------------------------------------------------------

Thu Dec 18 14:33:55 UTC 2014 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.11

- This release addresses two security issues: [boo#909935]

  * CVE-2014-3580: mod_dav_svn DoS from invalid REPORT requests.

  * CVE-2014-8108: mod_dav_svn DoS from use of invalid transaction

    names.

- Client-side bugfixes:

  * checkout/update: fix file externals failing to follow history

    and subsequently silently failing

  * patch: don't skip targets in valid --git difs

  * diff: make property output in diffs stable

  * diff: fix diff of local copied directory with props

  * diff: fix changelist filter for repos-WC and WC-WC

  * remove broken conflict resolver menu options that always error

    out

  * improve gpg-agent support

  * fix crash in eclipse IDE with GNOME Keyring

  * fix externals shadowing a versioned directory

  * fix problems working on unix file systems that don't support

    permissions

  * upgrade: keep external registrations

  * cleanup: iprove performance of recorded timestamp fixups

  * translation updates for German

- Server-side bugfixes:

  * disable revprop caching feature due to cache invalidation

    problems

  * skip generating uniquifiers if rep-sharing is not supported

  * mod_dav_svn: reject requests with missing repository paths

  * mod_dav_svn: reject requests with invalid virtual transaction

    names

  * mod_dav_svn: avoid unneeded memory growth in resource walking

​

-------------------------------------------------------------------

Thu Nov 20 00:20:00 UTC 2014 - Led <ledest@gmail.com>

​

- fix bashisms in mailer-init.sh script

- add patches:

  * subversion-1.8.10-fix-bashisms.patch

​

-------------------------------------------------------------------

Sat Nov  1 22:56:00 UTC 2014 - andreas.stieger@gmx.de

​

- Add a versioned runtime requirement for sqlite and pass it to

  configure via --enable-sqlite-compatibility-version to allow

  running with sqlite older than at build time but compatible.

- make build with KDE / WKallet optional to fix build with SLE 12

​

-------------------------------------------------------------------

Sat Sep 27 22:56:01 UTC 2014 - andreas.stieger@gmx.de

​

- enable build with python-ctypesgen

​

-------------------------------------------------------------------

Wed Sep 17 13:10:50 UTC 2014 - jweberhofer@weberhofer.at

​

- INSTALL#SQLite says 'Subversion 1.8 requires SQLite version 3.7.12 or above';

  therefore I lowered the sqlite requirement to make the subversion run on

  older system versions, tooi. [bnc#897033]

​

-------------------------------------------------------------------

Tue Sep  9 06:57:54 UTC 2014 - andreas.stieger@gmx.de

​

- Re-enable optional running full regression test suite,

  cleanup of dependencies only for network based tests.

- make build with ctypesgen optional, off as it is not in Factory

​

-------------------------------------------------------------------

Mon Sep  8 22:41:18 UTC 2014 - andreas.stieger@gmx.de

​

- move autogen to %build to not break quilt setup

​

-------------------------------------------------------------------

Thu Sep  4 13:38:53 UTC 2014 - tchvatal@suse.com

​

- Use python_sitearch properly

​

-------------------------------------------------------------------

Thu Sep  4 11:50:04 UTC 2014 - tchvatal@suse.com

​

- Cleanup with spec-cleaner, remove crufty conditionals to reduce

  the in-build conditions

- Install only systemd packages where needed

- Drop support of really old stuff (sle10)

- Run only basic tests and run them always

- Unbundle everything. For older distros rather use linkpac

- Removed patches:

  * subversion.libtool-pie-flags.patch

  * subversion.perl.LD_RUN_PATH.patch

  * swig.noembed.patch

- Added patches:

  * subversion-1.8.0-rpath.patch

  * subversion-fix-parallel-build-support-for-perl-bindings.patch

  * subversion-perl-underlinking.patch

  * subversion-swig-perl-Wall.patch

​

-------------------------------------------------------------------

Thu Aug  7 22:22:08 UTC 2014 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.10

- Client-side bugfixes:

  * guard against md5 hash collisions when finding cached

    credentials [bnc#889849] [CVE-2014-3528]

  * ra_serf: properly match wildcards in SSL certs.

    [bnc#890511] [CVE-2014-3522]

  * ra_serf: ignore the CommonName in SSL certs where there are

    Subject Alt Names

  * ra_serf: fix a URI escaping bug that prevented deleting locked

    paths

  * rm: Display the proper URL when deleting a URL in the commit

    log editor

  * log: Fix another instance of broken pipe error

  * copy: Properly handle props not present or excluded on cross wc

    copy

  * copy: Fix copying parents of locally deleted nodes between wcs

  * externals: Properly delete ancestor directories of externals

    when removing the external by changing svn:externals.

  * ra_serf: fix memory lifetime of some hash values

- Server-side bugfixes:

  * fsfs: omit config file when creating pre-1.5 format repos

- Bindings:

  * ruby: removing warning about Ruby 1.9 support being new.

  * python: fix notify_func callbacks

​

-------------------------------------------------------------------

Tue Jul 22 17:09:01 CEST 2014 - mls@suse.de

​

- do not undef bool in swig, it breaks modern perl versions

  new patch: swig.noembed.patch

​

-------------------------------------------------------------------

Wed Jun  4 22:30:27 UTC 2014 - andreas.stieger@gmx.de

​

- do not package svnserve pid file in /var/run, fixing Factory

​

-------------------------------------------------------------------

Tue May 13 17:34:59 UTC 2014 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.9 [bnc#877555]

- Client-side bugfixes:

  * log: use proper peg revision over DAV

  * upgrade: allow upgrading from 1.7 with exclusive locks

  * proplist: resolve inconsitent inherited property results

  * increase minimal timestamp sleep from 1ms to 10ms

  * merge: automatic merge confused by subtree merge

  * propget: report proper error on invalid revision for url

  * commit: fix an assertion when committing a deleted descendant

  * merge: resolve segfault when '--force' merges a directory

    delete

  * resolve: prevent interactive conflict resolution when nothing

    has been done to resolve the conflict

  * update: fix locks lost from wc with pre-1.6.17 servers

  * merge: honor the 'preserved-conflict-file-exts' setting

  * list: fix '--verbose' against older servers

  * unlock: fix ability to remove locks with timeouts

  * copy: fix 'svn copy URL WC' on relocated working copies

  * export: allow file externals to be exported

  * move: fix working copy db inconsistency in cert scenarios

  * commit: fix an issue where mixed revision copy with non copy

    descendants that shadow a not present node couldn't be committed

  * delete: properly remove move_to info when the node in its

    original location is removed

  * status; fix an issue where output would vary based on if the

    target was the node itself or its parent

- Server-side bugfixes:

  * svnadmin dump: don't let invalid mergeinfo stop dump

  * svnserve: resolve performance regression caused by iprops

  * reduce size of memory buffer when reading config files

  * remove dead transaction if commit was blocked by hook

  * svnrdump load: fix crash when svn:* normalization

  * fix memcached support

  * svndumpfilter: fix order of node record headers

  * mod_dav_svn: allow generic DAV clients to refresh locks

  * mod_dav_svn: detect out of dateness correctly during commit

- Developer-visible changes:

  * improve consistency checks of DAV inherited property requests

  * fix ocassional failure in autoprop_tests.py

  * avoid duplicate sqlite analyze information rows

  * add Mavericks to our sysinfo output

  * bump copyright years to 2014

  * unbreak test suite when running as root

  * resolve buffer overflow in testcode

  * fix libmagic detection with custom LDFLAGS

  * fix an out of scope variable use in merge

  * javahl: fix crash from resolve callback throwing an exception

  * ruby: fix two memory lifetime bugs

  * fix a missing null byte when handling old pre-1.4 deltas

  * fix building with APR 0.9.x

  * make svn_ra_get_locks() and svn_ra_get_lock() report not locked

    nodes with a NULL svn_lock_t *, as documented

  * fix tests for compiler flags

- Packaging changes:

  * adds subversion-1.8.9-allow-httpd-2.4.6.patch to allow building

    against blacklisted httpd 2.4.6 which has the required patches

  * update subversion-no-build-date.patch for context changes

​

-------------------------------------------------------------------

Wed Apr 23 16:14:18 UTC 2014 - dmueller@suse.com

​

- remove dependency on gpg-offline (is already checked

  by source_validator)

​

-------------------------------------------------------------------

Wed Feb 19 00:00:00 UTC 2014 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.8

- Client-side bugfixes:

  * fix automatic relocate for wcs not at repository root

  * wc: improve performance when used with SQLite 3.8

  * copy: fix some scenarios that broke the working copy

  * move: fix errors when moving files between an external and the

    parent working copy

  * log: resolve performance regression in certain scenarios

  * merge: decrease work to detect differences between 3 files

  * commit: don't change file permissions inappropriately

  * commit: fix assertion due to invalid pool lifetime

  * version: don't cut off the distribution version on Linux

  * flush stdout before exiting to avoid information being lost

  * status: fix missing sentinel value on warning codes

  * update/switch: improve some WC db queries that may return

    incorrect results depending on how SQLite is built

- Server-side bugfixes:

  * reduce memory usage during checkout and export

  * fsfs: create rep-cache.db with proper permissions

  * mod_dav_svn: prevent crashes with SVNListParentPath on

    (previously patched in this package)

  * mod_dav_svn: fix SVNAllowBulkUpdates directive merging

  * mod_dav_svn: include requested property changes in reports

  * svnserve: correct default cache size in help text

  * svnadmin dump: reduce size of dump files with '--deltas'

  * resolve integer underflow that resulted in infinite loops

- developer visible changes:

  * fix ocassional failure of check_tests.py 12

  * fix failure with SQLite 3.8.1-3.8.3 when built with

    SQLITE_ENABLE_STAT3/4 due to bug in SQLite

  * specify SQLite defaults that can be changed when SQLite is

    built to avoid unexpected behavior with Subversion

  * numerous documentation fixes

  * svn_client_commit_item3_dup() fix pool lifetime issues

  * ra_serf: properly ask multiple certificate validation providers

    for acceptance of certificate failures

  * release internal fs objects when closing commit editor

  * svn_client_proplist4() don't call the callback multiple times

    for the same path in order to deliver inherited properties

- Bindings:

  * swig-pl: fix with --enable-sqlite-compatibility-version

  * swig: fix building from tarball with an out-of-tree build

- removed patches:

  * subversion-1.8.x-SQLite-3.8.patch, committed upstream

  * subversion-1.8.x-fix-ppc-tests.patch, committed upstream

  * subversion-CVE-2014-0032.patch, now upstream 

- packaging changes:

  * only require and build with junit when building with java and

    running regression tests

  * specify memory constraints for reliable builds with regression

    tests

- 1.8.6 and 1.8.7 were not released

​

-------------------------------------------------------------------

Sun Feb  9 22:30:22 UTC 2014 - andreas.stieger@gmx.de

​

- fix a remotely triggerable segfault in mod_dav_svn when svn is

  handling the server root and SVNListParentPath is on

  [bnc#862459] CVE-2014-0032

- added patches:

  * subversion-CVE-2014-0032.patch

​

-------------------------------------------------------------------

Sun Dec  8 15:32:37 UTC 2013 - andreas.stieger@gmx.de

​

- add Subversion C API documentation to subversion-devel package

- fix rpmlint warning W: suse-wrong-suse-capitalisation

​

-------------------------------------------------------------------

Sat Dec  7 21:54:08 UTC 2013 - matz@suse.de

​

- Copy updated config.{guess,sub} to in-tree swig source also

  for ppc64le.

​

-------------------------------------------------------------------

Sun Dec  1 22:14:24 UTC 2013 - andreas.stieger@gmx.de

​

- add repository benchmarking tool svn-bench to tools subpackage

- add repository statistics tool fsfs-stats to tools subpackage

- fix performance problems when dynamically linking against 

  SQLite 3.8. While this does not create a new working copy format

  version, working copies that were created with a 1.8 client 

  linked against SQLite 3.7 need to have "svn upgrade" run once

  to enjoy the benefits, while otherwise maintaining compatibility.

  The step is optional and not required for new working copies.

  Adds subversion-1.8.x-SQLite-3.8.patch based on upstream commits.

- dynamically link against SQLite as per the above in 13.1 and up.

​

-------------------------------------------------------------------

Mon Nov 25 18:33:46 UTC 2013 - andreas.stieger@gmx.de

​

- CVE redaction for 1.8.5 [bnc#850747]

​

-------------------------------------------------------------------

Mon Nov 25 08:00:00 UTC 2013 - andreas.stieger@gmx.de

​

- fix build on Factory where ruby 1.9 is no longer available,

  do not build ruby bindings

​

-------------------------------------------------------------------

Mon Nov 25 00:00:00 UTC 2013 - andreas.stieger@gmx.de

​

- update to 1.8.5 [bnc#850747], addressing two security issues:

    * CVE-2013-4505: mod_dontdothat does not restrict requests from

                     serf clients.

    * CVE-2013-4558: mod_dav_svn assertion triggered by

                     autoversioning commits.

  - Client-side bugfixes:

    * fix externals that point at redirected locations

    * diff: fix assertion with move inside a copy

  - Server-side bugfixes:

    * mod_dav_svn: Prevent crashes with some 3rd party modules

    * mod_dav_svn: canonicalize paths properly

    * mod_authz_svn: fix crash of mod_authz_svn with invalid config

    * hotcopy: fix hotcopy losing revprop files in packed repos

  - Other tool improvements and bugfixes:

    * mod_dontdothat: Fix the uri parser

  - Developer-visible changes:

    * fix compilation with '--enable-optimize' with clang

    * add test to fail when built against broken ZLib

  - Bindings:

    * ctypes-python: build with compiler selected via configure

- if running regression tests, also run them against bdb backend

​

-------------------------------------------------------------------

Tue Nov 19 18:36:45 UTC 2013 - andreas.stieger@gmx.de

​

- print error logs on on regression test failures

- always build with and statically link to in-tree SQLite to 

  prevent performance problems and test failures with SQLite 3.8

- fix regression tests for ppc/ppc64 architectures, found in

  openSUSE package build and fixed with upstream developers, adding

  subversion-1.8.x-fix-ppc-tests.patch

- improve sqlite and python-ctypes conditionals, the latter not

  building for any current targets

- require python-sqlite when running regression tests for all

  targets, no longer pulled in implicitly

- update keyring, use Subversion Project Management Committee

  keyring rather than all committers

​

-------------------------------------------------------------------

Tue Oct 29 18:27:53 UTC 2013 - andreas.stieger@gmx.de

​

- update to 1.8.4 [bnc#847103]

  - Client- and server-side bugfixes:

    * fix assertion on urls of the form 'file://./'

    * translation updates for Swedish

  - Client-side bugfixes:

    * revert: fix problems reverting moves

    * update: fix assertion when file external access is denied

    * merge: reduce network connections for automatic merge

    * merge: fix path corruption during reintegration

    * mergeinfo: fix crash

    * ra_serf: verify the result of xml parsing

    * ra_serf: improve error messages during commit

    * ra_local: fix error with repository in Windows drive root

    * fix crash on windows when piped command is interrupted

    * fix assertion when upgrading old working copies

  - Server-side bugfixes:

    * hotcopy: cleanup unpacked revprops with '--incremental'

    * fix OOM on concurrent requests at threaded server start

    * fsfs: improve error message when unsupported fsfs format found

    * fix memory problem in 3rd party FS module loader

  - Developer-visible changes - Bindings:

    * javahl: canonicalize path for streaFileContent method

- packaging changes:

  * update keyring

​

-------------------------------------------------------------------

Fri Aug 30 16:00:16 UTC 2013 - andreas.stieger@gmx.de

​

- update to 1.8.3

  CVE-2013-4246: fsfs: corruption from editing packed revision properties

  CVE-2013-4262: admin-side tools: symlink attack against pid file

  CVE-2013-4277: svnserve: symlink attack against pid file

- User-visible changes:

  - Client- and server-side bugfixes:

    * translation updates for Swedish

    * enforce strict version equality between tools and libraries

    * consistently output revisions as "r%ld" in error messags

  - Client-side bugfixes:

    * status: always use absolute paths in XML output

    * ra_serf: 'svn log -v' fails with a 1.2.x server

    * ra_serf: fix crash when committing cp with deep deletion

    * diff: issue an error for files that can't fit in memory

    * svnmucc: generate proper error for mismatched URLs

    * update: fix a crash when a temp file doesn't exist

    * commit & update: improve sleep for timestamps performance

    * diff: continue on missing or obstructing files

    * ra_serf: use runtime serf version for User-Agent

    * ra_serf: ignore case when checking certificate common names

    * ra_serf: format distinguished names properly

    * ra_serf: do not retry HTTP requests if we started to parse them

    * ra_serf: output ssl cert verification failure reason

    * ra_serf: allow session reuse after SVN_ERR_CEASE_INVOCATION

    * ra_serf: include library version in '--version' output

    * info: fix spurious error on wc root with child in conflict

  - Server-side bugfixes:

    * svnserve: fix creation of pid files

    * svnadmin: fix output encoding in non-UTF8 environments

    * svnsync: fix high memory usage when running over ra_serf

    * mod_dav_svn: do not map requests to filesystem

    * svnauthz: improve help strings

    * fsfs: fixed manifest file growth with revprop changes

    * fsfs: fix packed revprops causing loss of revprops

  - Other tool improvements and bugfixes:

    * svnwcsub/irkerbridge: fix symlink attack via pid file

​

 Developer-visible changes:

  - General:

    * describe APR unimplemented errors as coming from APR

    * mod_dav_svn: update INSTALL to reflect configure defaults

    * davautocheck: use the correct apxs binary by default

  - API changes:

    * svn_config_walk_auth_data() config_dir arg: permit NULL)

  - Bindings:

    * swig-pl: fix SVN::Client not honoring config file settings

    * swig-pl & swig-py: disable unusable svn_fs_set_warning_func

​

-------------------------------------------------------------------

Wed Jul 24 17:37:14 UTC 2013 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.1 [bnc#830031] CVE-2013-4131

- User-visible changes:

  - Client- and server-side bugfixes:

    * translation updates for German and Simplified Chinese

    * improve sqlite error message output

    * support platforms lacking mmap

    * allow configuration files to start with UTF-8 BOM

    * don't fail on UTF-8 data when encoding conversion not available

    * improve error messages when encoding conversion fails

  - Client-side bugfixes:

    * merge: rename 'automatic merge' to 'complete merge'

    * mergeinfo: reduce network usage for '--show-revs'

    * ra_serf: improve http status handling

    * merge: avoid unneeded ra session

    * merge: reduce network usage

    * merge: remove duplicated ancestry check

    * ra_serf: fix 'Accept-Encoding' header for IIS interoperability

    * svn status: improve documentation for lock columns

    * ra_serf: fix support for 'get-file-revs-reversed' capability

    * log: reduce network usage on repository roots

    * diff: avoid temporary files when calling external diff

    * upgrade: fix notification of 1.7.x working copies

    * fix crash during tree conflict resolution

    * interactive file merge: add two additional choices

    * diff: use local style paths in error messages

    * resolve: improve the interactive conflict resolution menu

    * switch: use local style path in error message

    * ra_serf: improve error output when receiving invalid XML

    * svn cleanup: explain what the command does in help output

    * blame: error on -r M:N where M>N unless server supports

    * gpg-agent auth: don't try to use agent when unavailable

    * gpg-agent auth: don't require GPG_TTY or TERM env vars

    * update: fix some tree conflicts not triggering resolver

    * commit: remove stale entries from wc lock table when deleting

    * merge: fix --record-only erroring out on renamed path

    * svnmucc: fix 'make install' symlink to work when DESTDIR is set

    * wc: fix crash when target is symlink to a working copy root

    * ra_serf: change "internal malfunction" errors to normal errors

    * ra_serf: handle proxies not supporting chunked requests

  - Server-side bugfixes:

    * fsfs: resolve endless loop problem when repos/db/uuid has \r\n

    * fsfs: remove revision property buffer limit

    * mod_dav_svn: better status codes for anonymous user errors

    * mod_dav_svn: better status codes for commit failures

    * fix performance regression in 'svn log' against root

    * allow deleting non-user-visible 'svn:' properties

    * fsfs: fix crash on strict-alignment architectures

    * svnadmin upgrade: fix error of non-sharded fsfs repositories

    * svnadmin create: deny '--fs-type=fsfs --compatible-version=1.0'

    * svnadmin upgrade: fix data loss when cancelling in last stage

    * mod_dav_svn: fix incorrect path canonicalization

​

  - Other tool improvements and bugfixes:

    * fsfs-stats (tool): resolve segfault when passing invalid path

    * svn-bench: fix help output

    * svnpubsub: add version header to server

​

 Developer-visible changes

  - General:

    * ra_serf: fix some test runner issues on Windows 

    * fix two issues in reverse svn_ra_get_file_revs()

    * handle --compatible-version=1.8 in the C tests

    * improve clang compatibility

    * use proper cancel baton when handling conflicts

    * fs: BDB: provide proper error value from BDB

    * ra_serf: tweak connection failed error value

    * svn_client_log5: resolve possible segfault

    * fix metadata_only move to work when target is unversioned node

    * ra_svn: fix segfault with a NULL commit message

    * Ev2: correctly initialize node kind in shims'

    * Ev2: fix copyfrom URL construction in shims

    * fs: improve test against newlines in filenames

    * make building with BDB 6 an opt-in feature

    * sqlite: allow placing amalgamation in build dir

    * ra_svn: make sessions usable after log callback early out

  - Bindings:

    * swig-rb: fix tests with out-of-tree-builds

    * javahl: fix encoding of error messages produced by javahl

    * swig-pl: silence compiler warnings

    * swig-pl: improve documentation

- packaging changes:

  * update keyring

​

-------------------------------------------------------------------

Fri Jun 21 20:30:57 UTC 2013 - andreas.stieger@gmx.de

​

- require krb5-devel to fix factory build

- remove unrequired BuildIgnore

- update keyring

- change swig tarball to pristine upstream file

​

-------------------------------------------------------------------

Tue Jun 18 00:00:00 UTC 2013 - andreas.stieger@gmx.de

​

- Apache Subversion 1.8.0

- Major new features

  * working copy records moves as first-class operation

  * merge uses reintegrate mode automatically when needed

  * FSFS: Packing of revision property shards

  * support inheritable properties

  * repository can suggest config for autoprops and ignores

  * support gpg-agent for password caching

  * authz rules can be stored inside the repository

- concerns when upgrading from earlier versions

  * Upgrading the Working Copy

    1.8 introduces a new working copy format. One-time execution of

    "svn upgrade" required. After that, clients earlier than 1.8 will

    be unable to use the working copy. Working copy must have been

    created using 1.6 or 1.7. For details, please see:

    https://subversion.apache.org/docs/release-notes/1.8.html#wc-upgrade

  * Upgrading the Repository

    1.8 can read and write repositories created by earlier versions.

    "svnadmin upgrade" may be used to upgrade to FSFS format 6 of 1.8,

    after which the repository will be no longer be usable for 1.7 servers.

    An optional dump/load cycle may be used to apply FSFS improvements

    to past revisions.

    https://subversion.apache.org/docs/release-notes/1.8.html#compatibility

    https://subversion.apache.org/docs/release-notes/1.8.html#fsfs-enhancements

  * Required configuration changes when using mod_dav_svn with Apache httpd2:

    The MaxKeepAliveRequests option in httpd.conf needs to be increased 

    from 100 (the default) to at least 1000 (there is no reason why it 

    could not be 10000). This will improve performance by allowing serf 

    clients to use fewer TCP connections to the server. Clients using 

    neon will also work fine with this configuration.

- many minor features and improvements listed in:

  https://subversion.apache.org/docs/release-notes/1.8.html

  http://svn.apache.org/repos/asf/subversion/tags/1.8.0/CHANGES

- Deprecations:

  * require serf as client-side http library (neon support removed)

  * deprecate the Berkeley DB FS backend (libsvn_fs_base)

- packaging changes:

  * ra_serf is now the only http library

  * remove neon dependency, ra_neon removed upstream

  * update in-tree sqlite to recommended version 3.7.15.1

  * build with sqlite amalgamation for openSUSE 12.2 and earlier

  * dropped patches, accepted upstream:

    subversion-1.7.4-ruby-1.9-RbConfig.patch

    subversion-1.7.8-TestHarness_run_py_test_exit_code.patch

  * dropped patches, no longer required:

    subversion-1.7.9-davautocheck-LD_LIBRARY_PATH.patch

    Also setting LD_LIBRARY_PATH no longer required for tests.

  * dropped patches, feature removed upstream:

    subversion-neon-systemproxy.patch

  * updated patches for upstream changes:

    subversion-no-build-date.patch

    subversion-swig-perl-install_vendor.patch

    subversion.libtool-verbose.patch

    subversion.perl.LD_RUN_PATH.patch

    subversion.libtool-pie-flags.patch

  * update tools installation, svnmucc is now a first order tool

  * updated build requirements:

    + python >= 2.5

    + serf >= 1.2.1

    + ruby 1.8.x, >= 1.8.2 or 1.9.3

  * build ruby bindings again for openSUSE 12.3 and Factory

  * fix detection of ruby sitelib directory

  * remove obsolete tool svnmerge.py

  * update contrib package to r1485350 

​

-------------------------------------------------------------------

Sat Jun 15 23:20:09 UTC 2013 - andreas.stieger@gmx.de

​

- fix build for 12.3 x86_64 due to choice for libjpeg-devel 

  needed by libmng-devel: libjpeg62-devel libjpeg8-devel

​

-------------------------------------------------------------------

Fri Jun  7 07:17:35 UTC 2013 - andreas.stieger@gmx.de

​

- fix execution of regression tests on SLE 11

​

-------------------------------------------------------------------

Mon Jun  3 18:38:09 UTC 2013 - andreas.stieger@gmx.de

​

- build with -std=gnu99 on 12.3 and later to match apache httpd to 

  avoid configure warning 

​

-------------------------------------------------------------------

Fri May 31 20:44:34 UTC 2013 - andreas.stieger@gmx.de

​

- update to 1.7.10 [bnc#821505]

  CVE-2013-1968 CVE-2013-2088 CVE-2013-2112

  - Client-side bugfixes:

    * fix 'svn revert' "no such table: revert_list" spurious error

    * fix 'svn diff' doesn't show some locally added files

    * fix changelist filtering when --changelist values aren't UTF8

    * fix 'svn diff --git' shows wrong copyfrom

    * fix 'svn diff -x-w' shows wrong changes

    * fix 'svn blame' sometimes shows every line as modified

    * fix regression in 'svn status -u' output for externals

    * fix file permissions change on commit of file with keywords

    * improve some fatal error messages

    * fix externals not removed when working copy is made shallow

  - Server-side bugfixes:

    * fix repository corruption due to newline in filename

    * fix svnserve exiting when a client connection is aborted

    * fix svnserve memory use after clear

    * fix repository corruption on power/disk failure on Windows

  - Developer visible changes:

    * make get-deps.sh compatible with Solaris /bin/sh

    * fix infinite recursion bug in get-deps.sh

    * fix uninitialised output parameter of svn_fs_commit_txn()

  - Bindings:

    * fix JavaHL thread-safety bug

​

-------------------------------------------------------------------

Tue May 21 19:41:36 UTC 2013 - andreas.stieger@gmx.de

​

- use svnserveautocheck.sh and davautocheck.sh for unit tests,

  greatly reducing complexity of spec file and adding support

  for running unit tests with httpd 2.4 in factory

- add subversion-1.7.9-davautocheck-LD_LIBRARY_PATH.patch to 

  not overwrite LD_LIBRARY_PATH in davautocheck.sh to make

  auth-test pass

​

-------------------------------------------------------------------

Mon May 20 19:30:52 UTC 2013 - andreas.stieger@gmx.de

​

- add systemd support for svnserve

- package now contains user and group svn

- adjust and extend README.SuSE to cover a quickstart with both

  mod_dav_svn and svnserve, mention the user/group requirement for

  parallel operation and make text more compact by referencing the

  template config file [bnc#781980]

​

-------------------------------------------------------------------

Tue May 14 21:52:35 UTC 2013 - andreas.stieger@gmx.de

​

- package verify-po.py and other hook scripts as documentation 

  [bnc#781982]

​

-------------------------------------------------------------------

Fri Apr 12 20:28:50 UTC 2013 - andreas.stieger@gmx.de

​

- add gpg signature verification of source tarball

​