GNU bug report logs - #62410
[staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 62410 in the body.
You can then email your comments to 62410 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Greg Hogan <code <at> greghogan.com>
To: guix-patches <at> gnu.org
Cc: Greg Hogan <code <at> greghogan.com>
Subject: [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].
Date: Thu, 23 Mar 2023 18:46:31 +0000

This release contains fixes for CVE-2021-28544 and CVE-2022-24070.

* gnu/packages/version-control.scm (subversion): Update to 1.14.2.
---
 gnu/packages/version-control.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
index 12e21336ce..526b6bbb2b 100644
--- a/gnu/packages/version-control.scm
+++ b/gnu/packages/version-control.scm
@@ -1995,14 +1995,14 @@ (define-public neon
 (define-public subversion
   (package
     (name "subversion")
-    (version "1.14.1")
+    (version "1.14.2")
     (source (origin
              (method url-fetch)
              (uri (string-append "mirror://apache/subversion/"
                                  "subversion-" version ".tar.bz2"))
              (sha256
               (base32
-               "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c"))))
+               "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9"))))
     (build-system gnu-build-system)
     (arguments
      '(#:parallel-tests? #f             ; TODO Seems to cause test failures on
-- 
2.40.0

Message #10 received at 62410-done <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Greg Hogan <code <at> greghogan.com>
Cc: 62410-done <at> debbugs.gnu.org
Subject: Re: bug#62410: [staging PATCH] gnu: subversion: Update to 1.14.2
 [security fixes].
Date: Fri, 24 Mar 2023 00:20:23 -0400

Hi Greg,

Greg Hogan <code <at> greghogan.com> writes:

> This release contains fixes for CVE-2021-28544 and CVE-2022-24070.
>
> * gnu/packages/version-control.scm (subversion): Update to 1.14.2.
> ---
>  gnu/packages/version-control.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
> index 12e21336ce..526b6bbb2b 100644
> --- a/gnu/packages/version-control.scm
> +++ b/gnu/packages/version-control.scm
> @@ -1995,14 +1995,14 @@ (define-public neon
>  (define-public subversion
>    (package
>      (name "subversion")
> -    (version "1.14.1")
> +    (version "1.14.2")
>      (source (origin
>               (method url-fetch)
>               (uri (string-append "mirror://apache/subversion/"
>                                   "subversion-" version ".tar.bz2"))
>               (sha256
>                (base32
> -               "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c"))))
> +               "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9"))))
>      (build-system gnu-build-system)
>      (arguments
>       '(#:parallel-tests? #f             ; TODO Seems to cause test failures on

I decided to push this to master, as the dependent packages count was
rather low.  I hope I wasn't misguided :-).

-- 
Thanks,
Maxim

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.