mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
9975d28aa3
Fixes the following security vulnerabilities: CVE-2024-46901: mod_dav_svn denial-of-service via control characters in paths It has been discovered that the patch for CVE-2013-1968 was incomplete and unintentionally left mod_dav_svn vulnerable to control characters in filenames. https://subversion.apache.org/security/CVE-2024-46901-advisory.txt Subversion 1.14.4 also fixed a Windows-only vulnerability: https://subversion.apache.org/security/CVE-2024-45720-advisory.txt For change log, see: https://svn.apache.org/repos/asf/subversion/tags/1.14.5/CHANGES Signed-off-by: Peter Korsgaard <peter@korsgaard.com> [Julien: add link to change log] Signed-off-by: Julien Olivain <ju.o@free.fr>
39 lines
1.0 KiB
Makefile
39 lines
1.0 KiB
Makefile
################################################################################
|
|
#
|
|
# subversion
|
|
#
|
|
################################################################################
|
|
|
|
SUBVERSION_VERSION = 1.14.5
|
|
SUBVERSION_SOURCE = subversion-$(SUBVERSION_VERSION).tar.bz2
|
|
SUBVERSION_SITE = https://downloads.apache.org/subversion
|
|
SUBVERSION_LICENSE = Apache-2.0
|
|
SUBVERSION_LICENSE_FILES = LICENSE
|
|
SUBVERSION_CPE_ID_VENDOR = apache
|
|
SUBVERSION_DEPENDENCIES = \
|
|
host-pkgconf \
|
|
apr \
|
|
apr-util \
|
|
expat \
|
|
lz4 \
|
|
utf8proc \
|
|
zlib \
|
|
sqlite \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
SUBVERSION_CONF_OPTS = \
|
|
--with-expat=$(STAGING_DIR)/usr/include:$(STAGING_DIR)/usr/lib: \
|
|
--with-apr=$(STAGING_DIR)/usr \
|
|
--with-apr-util=$(STAGING_DIR)/usr \
|
|
--with-lz4=$(STAGING_DIR)/usr \
|
|
--with-utf8proc=$(STAGING_DIR)/usr \
|
|
--with-zlib=$(STAGING_DIR)/usr \
|
|
--without-serf \
|
|
--without-apxs \
|
|
--without-berkeley-db \
|
|
--without-sasl \
|
|
--without-gnome-keyring \
|
|
--without-libmagic
|
|
SUBVERSION_CONF_ENV = LIBS=$(TARGET_NLS_LIBS)
|
|
|
|
$(eval $(autotools-package))
|