21:16 ohauer 

- security update to 1.8.13
- remove pkg-install
- add pkg-message
- add dedicated apache module file

Version 1.8.13
(31 Mar 2015, from /branches/1.8.x)
http://svn.apache.org/repos/asf/subversion/tags/1.8.13

 User-visible changes:
  - Client-side bugfixes:
    * ra_serf: prevent abort of commits that have already succeeded (r1659867)
    * ra_serf: support case-insensitivity in HTTP headers (r1650481, r1650489)
    * better error message if an external is shadowed (r1655712, r1655738)
    * ra_svn: fix reporting of directory read errors (r1656713)
    * fix a redirect handling bug in 'svn log' over HTTP (r1650531)
    * properly copy tree conflict information (r1658115, r1659553, r1659554)
    * fix 'svn patch' output for reordered hunks (issue #4533)
    * svnrdump load: don't load wrong props with no-deltas dump (issue #4551)
    * fix working copy corruption with relative file external (issue #4411)
    * don't crash if config file is unreadable (r1590751, r1660350)
    * svn resolve: don't ask a question with only one answer (r1658417)
    * fix assertion failure in svn move (r1651963 et al)
    * working copy performance improvements (r1664531, r1664476, et al)
    * handle existing working copies which become externals (r1660071)
    * fix recording of WC meta-data for foreign repos copies (r1660593)
    * fix calculating repository path of replaced directories (r1660646)
    * fix calculating repository path after commit of switched nodes (r1663991)
    * svnrdump: don't provide HEAD+1 as base revision for deletes (r1664684)
    * don't leave conflict markers on files that are moved (r1660220, r1665874)
    * avoid unnecessary subtree mergeinfo recording (r1666690)
    * fix diff of a locally copied directory with props (r1619380 et al)

  - Server-side bugfixes:
    * fsfs: fix a problem verifying pre-1.4 repos used with 1.8 (r1561419)
    * svnadmin freeze: fix memory allocation error (r1653039)
    * svnadmin load: tolerate invalid mergeinfo at r0 (r1643074, issue #4476)
    * svnadmin load: strip references to r1 from mergeinfo (issue #4538)
    * svnsync: strip any r0 references from mergeinfo (issue #4476)
    * fsfs: reduce memory consumption when operating on dag nodes (r1655651)
    * reject invalid get-location-segments requests in mod_dav_svn and
      svnserve (r1667233)
    * mod_dav_svn: reject invalid txnprop change requests (r1667235)

  - Client-side and server-side bugfixes:
    * fix undefined behaviour in string buffer routines (r1650834)
    * fix consistency issues with APR r/w locks on Windows (r1611380 et al)
    * fix occasional SEGV if threads load DSOs in parallel (r1659013, r1659315)
    * properly duplicate svn error objects (r1651759)
    * fix use-after-free in config parser (1646785, r1646786, r1646797)

 Developer-visible changes:
  * add lock file config for testing against HTTPD 2.4+ (r1544302, r1544303)
  * make sqlite amalgamated build work with sqlite 3.8.x+ (r1659399)
  * fix build with Ruby 2 (r1596882)
  * process 'svnadmin dump' output as binary in the test suite (r1592987)
  * simplify Windows resource compilation to avoid warnings (r1532287)

Version 1.8.12
(Not released, see changes for 1.8.13.)

Security:	vid=8e887b71-d769-11e4-b1c2-20cf30e32f6d
Security:	CVE-2015-0202
Security:	CVE-2015-0248
Security:	CVE-2015-0251

Approved by:	lev@ (implicit)

 

13:12 lev 

  subversion port has been overhauled. Some optional parts was extracted
  to separate ports. These ports are:

  www/mod_dav_svn
    instead of option MOD_DAV_SVN.
  security/subversion-gnome-keyring
    instead of option GNOME_KEYRING.
  security/subversion-kwallet
    instead of option KDE_KWALLET.

  If you used devel/subversion with one (or more) of these non-standard
  options, you should install appropriate port after subversion upgrade.

  "mod_dontdothat" is installed unconditionally by www/mod_dav_svn
  port (it has been depended on TOOLS option), but is not activated by
  default, you may need to edit apache's configuration file.

  devel/subversion port now installs svndiff, svndiff3 and svndiff4
  commands if TOOLS option is enabled. They was skipped before.
  Official names "diff", "diff3" and "diff4" are prefixed with "svn" to
  avoid conflicts with base and other diff versions.

  All libraries and binaries are now stripped if MAINTAINER_DEBUG
  option is not selected (including all sub-ports, like bindings
  and mod_dav_svn).

 

16:06 lev 

  (1) Upgrade to 1.7.3
  (2) Return building od mod_dontdothat
  (3) Fix pkg-plist and remove strange binary files from installation
  (4) Make better install/deinstall scripts
  (5) Fix installation with SVNSERVE_WRAPPER, MOD_DAV_SVN and WITH_REPO_CREATION

PR:             [3, 4] ports/164033, [5] ports/164583

10:39 lev 

  Update to 1.6.11.
  Make new pkg-install/pkg-deinstall scripts, disabled if here is no
mod_dav_svn.
  Add option to build and install svnauthz-validate, a tool to test authz files.

PR:             ports/145809, with some changes
Submitted by:   olli hauer <ohauer@gmx.de>