From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id KMvWK9KeHGQHfwEASxT56A (envelope-from ) for ; Thu, 23 Mar 2023 19:47:46 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id IAjUK9KeHGSM5gAAauVa8A (envelope-from ) for ; Thu, 23 Mar 2023 19:47:46 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78AF223D32 for ; Thu, 23 Mar 2023 19:47:46 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pfPy8-0002n0-3c; Thu, 23 Mar 2023 14:47:24 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pfPxn-0002ZY-6h for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:05 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pfPxm-0004Kh-TN for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pfPxm-0001YO-F6 for guix-patches@gnu.org; Thu, 23 Mar 2023 14:47:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#62410] [staging PATCH] gnu: subversion: Update to 1.14.2 [security fixes]. Resent-From: Greg Hogan Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 23 Mar 2023 18:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 62410 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 62410@debbugs.gnu.org Cc: Greg Hogan X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16795972105952 (code B ref -1); Thu, 23 Mar 2023 18:47:02 +0000 Received: (at submit) by debbugs.gnu.org; 23 Mar 2023 18:46:50 +0000 Received: from localhost ([127.0.0.1]:39321 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pfPxZ-0001Xw-Li for submit@debbugs.gnu.org; Thu, 23 Mar 2023 14:46:49 -0400 Received: from lists.gnu.org ([209.51.188.17]:44986) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pfPxY-0001Xp-B2 for submit@debbugs.gnu.org; Thu, 23 Mar 2023 14:46:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pfPxO-0002Oa-8b for guix-patches@gnu.org; Thu, 23 Mar 2023 14:46:40 -0400 Received: from mail-io1-xd31.google.com ([2607:f8b0:4864:20::d31]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pfPxM-00048Z-9E for guix-patches@gnu.org; Thu, 23 Mar 2023 14:46:37 -0400 Received: by mail-io1-xd31.google.com with SMTP id bl9so3945379iob.8 for ; Thu, 23 Mar 2023 11:46:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=greghogan-com.20210112.gappssmtp.com; s=20210112; t=1679597194; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=IdshKxY8Edw04NsuRqzrG2gS3ofaKD9oBVBM7SWlqp8=; b=IvHc6InzmOcOmw6NkMJKWkfkwNJArPpkNC/dA+KkY+/Wqfj+66uzK/Wn16pcgTvByR JlSaR/gLnZk9tqHR86RLHfOf4D2Q9GWfU6h8emWSGJ3tGY22HOC/WdsavgbRDb0XSIQp 67nK1fcuG645vYLI0TSoW59YHrRayCGIBgS1ys6B1rg+T5l9SzLM2RRgtsz+25Qfo4Ir ZjPzXtnuSdA0tfxaaVi57TK7f0coNETdnz33K08fSYxFsBI45uUjeqPqkuFH8TQtZ0zz T1BJYzN94LPYeleE8Ntn2oBT5F6Ki4FkwDLc1M5lKWb0la91vm2m35qdS74xlfA1Xi8p c9Yg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679597194; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=IdshKxY8Edw04NsuRqzrG2gS3ofaKD9oBVBM7SWlqp8=; b=zrHk2kWr999qWV89Y4txFGtSa4nNhtVYOJCttvCzI8aUZwnBc63GTuWl7D7SD/vB5N +Zve/2TbSzQDAUrZkpsJ3uNoAA5AdPFqkJrwLds8QKQN+UPkw7YvpUKMm1O0gAjoG/+Y W7jUiCcif4CSZGhJxUTPunNrRCQHyN81XM7ovVWMTJKU5AUOT5vFU43nc3ffgGI0yZ7b w+6rmKe0o4ZJhgrTf0TYseI51juIhmoEzlEufT9GQfQOPvgAPDj9i7QDhvrvC/6Z5Epu n8nGQy4hh1GFXsJXDptZcGvqtPOr7lcalaJR2B6gxjDBWRS9/OqbIjBp3tzxSgc9XEAL ZwNg== X-Gm-Message-State: AO0yUKVnBKy6U/KxkYIf2oynCYDURfLkNtpyPdk808GlQ/jGLQFmKUHu dSnUOXo94r8tPfIqMmPnDNjjXpKNpQg7hUUvPk8= X-Google-Smtp-Source: AK7set/RC3dL0kkx76KTqI1/xM58nxBjvIT/1w00olLAaCrm6CfUsdVK0PLGLWftrTljingFg9Xoow== X-Received: by 2002:a6b:7018:0:b0:74c:fe71:5808 with SMTP id l24-20020a6b7018000000b0074cfe715808mr212842ioc.6.1679597194186; Thu, 23 Mar 2023 11:46:34 -0700 (PDT) Received: from ip-172-31-24-233.us-east-2.compute.internal (ec2-3-145-209-148.us-east-2.compute.amazonaws.com. [3.145.209.148]) by smtp.gmail.com with ESMTPSA id f12-20020a6be80c000000b00746c717e922sm1181904ioh.43.2023.03.23.11.46.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 23 Mar 2023 11:46:33 -0700 (PDT) From: Greg Hogan Date: Thu, 23 Mar 2023 18:46:31 +0000 Message-Id: <20230323184631.1171191-1-code@greghogan.com> X-Mailer: git-send-email 2.40.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: none client-ip=2607:f8b0:4864:20::d31; envelope-from=code@greghogan.com; helo=mail-io1-xd31.google.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Seal: i=1; s=key1; d=yhetil.org; t=1679597266; a=rsa-sha256; cv=none; b=j7SBLDjrMyCjA7uIjdvrhMEvONr0BgDJQz6WV2j/3dbEIvYn0XE7BAVcIvD0HPKs8cSMvH LdDm4aeVsuOgmDoYr+JgVCOqT5TmbVDca3d8w9r/8G0Ap56l5EPFKpSoVUPR2BSzqmL5nD y448qGqjpis/dEwYZnge69P/ad74o0K623FVf6HETKLvbr0AKC+T/FnI4VpX7n3HMFT+UG 7iI+AQhTHP/X3sV6sAaX7v35iaciz6bkeaagC1JLJCCVbLnLRzwjv5qgWXOuuUhUUh923s yiBQXJ/Z4uoUdbs1ayVOrb8GcEnzxSHluTh7B1AuZRK5x0i8rYvqF7+vRFJA9Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=greghogan-com.20210112.gappssmtp.com header.s=20210112 header.b=IvHc6Inz; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1679597266; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=IdshKxY8Edw04NsuRqzrG2gS3ofaKD9oBVBM7SWlqp8=; b=gG431KdQRZSAJk+CmQFnyzJwRGqPyP8ZftdTIXX4jilMaFLpwEhvv4fKjJ8PsKTM96OeN8 PiiWwp5ZL1OX2kTz2UQeviKQZ9yIPeatA4ktrrQ1cg9Sd010Y80zL1G5WvQzGCRaa/LrhQ iReWSZBw88U6oLct6t7NEtA8dHWPJM6Uer1WAgzess793KeRL437jcOi2w/iqQUM8mxV4S I+nxKj1RLs2sSN7GHIJ1bvahUd7miL/YT/qRMEhSsQqaF3t5H+gT9Nn5atxsQaAeeVL4EL DTaSmKKpjPmWCkGdmM1pSFjtivlqorl1zJYgmiRMt88s/LCQknHLfgzVB7w8Bg== Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=greghogan-com.20210112.gappssmtp.com header.s=20210112 header.b=IvHc6Inz; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Scanner: scn1.migadu.com X-Migadu-Spam-Score: 0.55 X-Spam-Score: 0.55 X-Migadu-Queue-Id: 78AF223D32 X-TUID: HZdEHsMRsRiX This release contains fixes for CVE-2021-28544 and CVE-2022-24070. * gnu/packages/version-control.scm (subversion): Update to 1.14.2. --- gnu/packages/version-control.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index 12e21336ce..526b6bbb2b 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -1995,14 +1995,14 @@ (define-public neon (define-public subversion (package (name "subversion") - (version "1.14.1") + (version "1.14.2") (source (origin (method url-fetch) (uri (string-append "mirror://apache/subversion/" "subversion-" version ".tar.bz2")) (sha256 (base32 - "1ag1hvcm9q92kgalzbbgcsq9clxnzmbj9nciz9lmabjx4lyajp9c")))) + "0a6csc84hfymm8b5cnvq1n1p3rjjf33qy0z7y1k8lwkm1f6hw4y9")))) (build-system gnu-build-system) (arguments '(#:parallel-tests? #f ; TODO Seems to cause test failures on -- 2.40.0