From 544949e4987c177ebcfa76244c5383a2267ac240 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 31 Jan 2016 19:23:50 +0100 Subject: [PATCH] package/subversion: security version bump to 1.9.3 Release announcement: http://mail-archives.apache.org/mod_mbox/subversion-dev/201512.mbox/%3CCAP_GPNj_GCA869VQeJUrp5ngXsgN7pQQHSS=sqoXm8_6hHTTxg@mail.gmail.com%3E CVE-2015-5259: Remotely triggerable heap overflow and out-of-bounds read caused by integer overflow in the svn:// protocol parser. http://subversion.apache.org/security/CVE-2015-5259-advisory.txt CVE-2015-5343: Remotely triggerable heap overflow and out-of-bounds read in mod_dav_svn caused by integer overflow when parsing skel-encoded request bodies. http://subversion.apache.org/security/CVE-2015-5343-advisory.txt Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni --- package/subversion/subversion.hash | 2 +- package/subversion/subversion.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/subversion/subversion.hash b/package/subversion/subversion.hash index 7806374765..4f0a4460ec 100644 --- a/package/subversion/subversion.hash +++ b/package/subversion/subversion.hash @@ -1,2 +1,2 @@ # From http://subversion.apache.org/download.cgi#recommended-release -sha1 fb9db3b7ddf48ae37aa8785872301b59bfcc7017 subversion-1.9.2.tar.bz2 +sha1 27e8df191c92095f48314a415194ec37c682cbcf subversion-1.9.3.tar.bz2 diff --git a/package/subversion/subversion.mk b/package/subversion/subversion.mk index 2f6a249e57..e9aa0ae33c 100644 --- a/package/subversion/subversion.mk +++ b/package/subversion/subversion.mk @@ -4,7 +4,7 @@ # ################################################################################ -SUBVERSION_VERSION = 1.9.2 +SUBVERSION_VERSION = 1.9.3 SUBVERSION_SOURCE = subversion-$(SUBVERSION_VERSION).tar.bz2 SUBVERSION_SITE = http://mirror.catn.com/pub/apache/subversion SUBVERSION_LICENSE = Apache-2.0