Subject: bug#62410: closed (Re: bug#62410: [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].)

From: [email-masked] (GNU bug Tracking System)
Date: Fri, 24 Mar 2023 04:28:02 +0000

Your bug report

#62410: [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
62410: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62410
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#62410: [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].
From: Maxim Cournoyer <[email-masked]>
To: Greg Hogan <[email-masked]>
Cc: [email-masked]
Date: Fri, 24 Mar 2023 00:20:23 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi Greg,

Greg Hogan <[email-masked]> writes:

> This release contains fixes for CVE-2021-28544 and CVE-2022-24070.
>
> * gnu/packages/version-control.scm (subversion): Update to 1.14.2.
> ---
>  gnu/packages/version-control.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
> index 12e21336ce..526b6bbb2b 100644
> --- a/gnu/packages/version-control.scm
> +++ b/gnu/packages/version-control.scm
> @@ -1995,14 +1995,14 @@ (define-public neon
>  (define-public subversion
>    (package
>      (name "subversion")
> -    (version "1.14.1")
> +    (version "1.14.2")
>      (source (origin
>               (method url-fetch)
>               (uri (string-append "mirror://apache/subversion/"
>                                   "subversion-" version ".tar.bz2"))
>               (sha256
>                (base32
> -               "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c"))))
> +               "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9"))))
>      (build-system gnu-build-system)
>      (arguments
>       '(#:parallel-tests? #f             ; TODO Seems to cause test failures on

I decided to push this to master, as the dependent packages count was
rather low.  I hope I wasn't misguided :-).

-- 
Thanks,
Maxim

Subject: [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].
From: Greg Hogan <[email-masked]>
To: [email-masked]
Cc: Greg Hogan <[email-masked]>
Date: Thu, 23 Mar 2023 18:46:31 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

This release contains fixes for CVE-2021-28544 and CVE-2022-24070.

* gnu/packages/version-control.scm (subversion): Update to 1.14.2.
---
 gnu/packages/version-control.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
index 12e21336ce..526b6bbb2b 100644
--- a/gnu/packages/version-control.scm
+++ b/gnu/packages/version-control.scm
@@ -1995,14 +1995,14 @@ (define-public neon
 (define-public subversion
   (package
     (name "subversion")
-    (version "1.14.1")
+    (version "1.14.2")
     (source (origin
              (method url-fetch)
              (uri (string-append "mirror://apache/subversion/"
                                  "subversion-" version ".tar.bz2"))
              (sha256
               (base32
-               "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c"))))
+               "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9"))))
     (build-system gnu-build-system)
     (arguments
      '(#:parallel-tests? #f             ; TODO Seems to cause test failures on
-- 
2.40.0