From patchwork Thu Mar 23 18:46:31 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Greg Hogan X-Patchwork-Id: 48624 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 34A8616FE7; Thu, 23 Mar 2023 18:47:48 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, MAILING_LIST_MULTI,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 4AA4016FCC for ; Thu, 23 Mar 2023 18:47:46 +0000 (GMT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pfPy8-0002n0-3c; Thu, 23 Mar 2023 14:47:24 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pfPxn-0002ZY-6h for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:05 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pfPxm-0004Kh-TN for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pfPxm-0001YO-F6 for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#62410] [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes]. Resent-From: Greg Hogan Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 23 Mar 2023 18:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 62410 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 62410@debbugs.gnu.org Cc: Greg Hogan X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16795972105952 (code B ref -1); Thu, 23 Mar 2023 18:47:02 +0000 Received: (at submit) by debbugs.gnu.org; 23 Mar 2023 18:46:50 +0000 Received: from localhost ([127.0.0.1]:39321 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pfPxZ-0001Xw-Li for submit@debbugs.gnu.org; Thu, 23 Mar 2023 14:46:49 -0400 Received: from lists.gnu.org ([209.51.188.17]:44986) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pfPxY-0001Xp-B2 for submit@debbugs.gnu.org; Thu, 23 Mar 2023 14:46:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pfPxO-0002Oa-8b for guix-patches@gnu.org; Thu, 23 Mar 2023 14:46:40 -0400 Received: from mail-io1-xd31.google.com ([2607:f8b0:4864:20::d31]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pfPxM-00048Z-9E for guix-patches@gnu.org; Thu, 23 Mar 2023 14:46:37 -0400 Received: by mail-io1-xd31.google.com with SMTP id bl9so3945379iob.8 for ; Thu, 23 Mar 2023 11:46:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=greghogan-com.20210112.gappssmtp.com; s=20210112; t=1679597194; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=IdshKxY8Edw04NsuRqzrG2gS3ofaKD9oBVBM7SWlqp8=; b=IvHc6InzmOcOmw6NkMJKWkfkwNJArPpkNC/dA+KkY+/Wqfj+66uzK/Wn16pcgTvByR JlSaR/gLnZk9tqHR86RLHfOf4D2Q9GWfU6h8emWSGJ3tGY22HOC/WdsavgbRDb0XSIQp 67nK1fcuG645vYLI0TSoW59YHrRayCGIBgS1ys6B1rg+T5l9SzLM2RRgtsz+25Qfo4Ir ZjPzXtnuSdA0tfxaaVi57TK7f0coNETdnz33K08fSYxFsBI45uUjeqPqkuFH8TQtZ0zz T1BJYzN94LPYeleE8Ntn2oBT5F6Ki4FkwDLc1M5lKWb0la91vm2m35qdS74xlfA1Xi8p c9Yg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679597194; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=IdshKxY8Edw04NsuRqzrG2gS3ofaKD9oBVBM7SWlqp8=; b=zrHk2kWr999qWV89Y4txFGtSa4nNhtVYOJCttvCzI8aUZwnBc63GTuWl7D7SD/vB5N +Zve/2TbSzQDAUrZkpsJ3uNoAA5AdPFqkJrwLds8QKQN+UPkw7YvpUKMm1O0gAjoG/+Y W7jUiCcif4CSZGhJxUTPunNrRCQHyN81XM7ovVWMTJKU5AUOT5vFU43nc3ffgGI0yZ7b w+6rmKe0o4ZJhgrTf0TYseI51juIhmoEzlEufT9GQfQOPvgAPDj9i7QDhvrvC/6Z5Epu n8nGQy4hh1GFXsJXDptZcGvqtPOr7lcalaJR2B6gxjDBWRS9/OqbIjBp3tzxSgc9XEAL ZwNg== X-Gm-Message-State: AO0yUKVnBKy6U/KxkYIf2oynCYDURfLkNtpyPdk808GlQ/jGLQFmKUHu dSnUOXo94r8tPfIqMmPnDNjjXpKNpQg7hUUvPk8= X-Google-Smtp-Source: AK7set/RC3dL0kkx76KTqI1/xM58nxBjvIT/1w00olLAaCrm6CfUsdVK0PLGLWftrTljingFg9Xoow== X-Received: by 2002:a6b:7018:0:b0:74c:fe71:5808 with SMTP id l24-20020a6b7018000000b0074cfe715808mr212842ioc.6.1679597194186; Thu, 23 Mar 2023 11:46:34 -0700 (PDT) Received: from ip-172-31-24-233.us-east-2.compute.internal (ec2-3-145-209-148.us-east-2.compute.amazonaws.com. [3.145.209.148]) by smtp.gmail.com with ESMTPSA id f12-20020a6be80c000000b00746c717e922sm1181904ioh.43.2023.03.23.11.46.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 23 Mar 2023 11:46:33 -0700 (PDT) From: Greg Hogan Date: Thu, 23 Mar 2023 18:46:31 +0000 Message-Id: <20230323184631.1171191-1-code@greghogan.com> X-Mailer: git-send-email 2.40.0 MIME-Version: 1.0 Received-SPF: none client-ip=2607:f8b0:4864:20::d31; envelope-from=code@greghogan.com; helo=mail-io1-xd31.google.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This release contains fixes for CVE-2021-28544 and CVE-2022-24070. * gnu/packages/version-control.scm (subversion): Update to 1.14.2. --- gnu/packages/version-control.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index 12e21336ce..526b6bbb2b 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -1995,14 +1995,14 @@ (define-public neon (define-public subversion (package (name "subversion") - (version "1.14.1") + (version "1.14.2") (source (origin (method url-fetch) (uri (string-append "mirror://apache/subversion/" "subversion-" version ".tar.bz2")) (sha256 (base32 - "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c")))) + "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9")))) (build-system gnu-build-system) (arguments '(#:parallel-tests? #f ; TODO Seems to cause test failures on