GNU bug report logs - #62410
[staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes].

Previous Next

Package: guix-patches;

Reported by: Greg Hogan <code <at> greghogan.com>

Date: Thu, 23 Mar 2023 18:47:02 UTC

Severity: normal

Tags: patch

Done: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>

Bug is archived. No further changes may be made.

Full log


Message #10 received at 62410-done <at> debbugs.gnu.org (full text, mbox):

From: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
To: Greg Hogan <code <at> greghogan.com>
Cc: 62410-done <at> debbugs.gnu.org
Subject: Re: bug#62410: [staging PATCH] gnu: subversion: Update to 1.14.2
 [security fixes].
Date: Fri, 24 Mar 2023 00:20:23 -0400
Hi Greg,

Greg Hogan <code <at> greghogan.com> writes:

> This release contains fixes for CVE-2021-28544 and CVE-2022-24070.
>
> * gnu/packages/version-control.scm (subversion): Update to 1.14.2.
> ---
>  gnu/packages/version-control.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
> index 12e21336ce..526b6bbb2b 100644
> --- a/gnu/packages/version-control.scm
> +++ b/gnu/packages/version-control.scm
> @@ -1995,14 +1995,14 @@ (define-public neon
>  (define-public subversion
>    (package
>      (name "subversion")
> -    (version "1.14.1")
> +    (version "1.14.2")
>      (source (origin
>               (method url-fetch)
>               (uri (string-append "mirror://apache/subversion/"
>                                   "subversion-" version ".tar.bz2"))
>               (sha256
>                (base32
> -               "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c"))))
> +               "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9"))))
>      (build-system gnu-build-system)
>      (arguments
>       '(#:parallel-tests? #f             ; TODO Seems to cause test failures on

I decided to push this to master, as the dependent packages count was
rather low.  I hope I wasn't misguided :-).

-- 
Thanks,
Maxim




This bug report was last modified 2 years and 119 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.