[pkgsrc/trunk]: pkgsrc/devel/subversion Update to 1.6.4, a security release.

[gdt <gdt%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/209bc2076977
branches:  trunk
changeset: 396986:209bc2076977
user:      gdt <gdt%pkgsrc.org@localhost>
date:      Thu Aug 06 22:08:56 2009 +0000

description:
Update to 1.6.4, a security release.

Version 1.6.4
(06 Aug 2009, from /branches/1.6.x)
http://svn.collab.net/repos/svn/tags/1.6.4

 User-visible changes:
 * fixed: heap overflow vulnerability on server and client
          See CVE-2009-2411, and descriptive advisory at
          http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt


Version 1.6.3
(22 Jun 2009, from /branches/1.6.x)
http://svn.collab.net/repos/svn/tags/1.6.3

 User-visible changes:
  * fix segfault in WC->URL copy (r37646, -56)
  * let 'svnadmin load' tolerate mergeinfo with "\r\n" (r37768)
  * make svnsync normalize svn:* props to LF line endings (issue #3404)
  * better integration with external merge tools (r36178)
  * return a friendly error message for 'svn diff' (r37735)
  * update dsvn.el for 1.6 (r37774)
  * don't allow setting of props on out-of-date dirs under neon (r37745)
  * improve BASH completion (r36450, -52, -70, -79, -538)
  * always show tree conflicts with 'svn st' (issue #3382)
  * improve correctness of 'svn mergeinfo' (issue #3126)
  * decrease the amount of memory needed for large commits (r37894, -6)
  * work around an APR buffer overflow seen by svnsync (r37622)
  * ra_svn clients now use TCP keep-alives if available (issue #3347)
  * improve 'svn merge' perf by reducing server contact (r37491, -593, -618)
  * stop propagating self-referential mergeinfo in reintegrate merges (r37931)
  * fix NLS detection where -liconv is required for bindtextdomain() (r37827)
  * don't delete unversioned files with 'rm --keep-local' (r38015, -17, -19)
  * bump apr and apr-util versions included in deps to latest. (r37941)
  * avoid temp file name collisions with ra_serf, ra_neon (r37972)
  * fixed: potential segfault with noop file merges (r37779)
  * fixed: incorrect output with 'svn blame -g' (r37719, -23, -41)
  * fixed: bindings don't load FS libs when module search enabled (issue #3413)
  * fixed: DAV RA layers not properly handling update/switch working copy
    directory to revision/place in which it doesn't exist (issue #3414)
  * fixed: potential abort() in the working copy library (r37857)
  * fixed: memory leak in hash reading functions (r37868, -979)

 Developer-visible changes:
  * improve memory usage in file-to-stringbuf APIs (r37907)
  * reduce memory usage for temp string manipulation (r38010)

diffstat:

 devel/subversion/Makefile.common  |  4 ++--
 devel/subversion/Makefile.version |  4 ++--
 devel/subversion/distinfo         |  8 ++++----
 3 files changed, 8 insertions(+), 8 deletions(-)

diffs (49 lines):

diff -r 8ad59a662c04 -r 209bc2076977 devel/subversion/Makefile.common
--- a/devel/subversion/Makefile.common  Thu Aug 06 21:52:19 2009 +0000
+++ b/devel/subversion/Makefile.common  Thu Aug 06 22:08:56 2009 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.32 2009/05/19 08:59:12 wiz Exp $
+# $NetBSD: Makefile.common,v 1.33 2009/08/06 22:08:56 gdt Exp $
 # used by devel/java-subversion/Makefile
 # used by devel/p5-subversion/Makefile
 # used by devel/py-subversion/Makefile
@@ -9,7 +9,7 @@
 
 DISTNAME=              subversion-${SVNVER}
 CATEGORIES=            devel scm
-MASTER_SITES=          http://subversion.tigris.org/tarballs/
+MASTER_SITES=          http://subversion.tigris.org/downloads/
 
 MAINTAINER=            gdt%NetBSD.org@localhost
 HOMEPAGE=              http://subversion.tigris.org/
diff -r 8ad59a662c04 -r 209bc2076977 devel/subversion/Makefile.version
--- a/devel/subversion/Makefile.version Thu Aug 06 21:52:19 2009 +0000
+++ b/devel/subversion/Makefile.version Thu Aug 06 22:08:56 2009 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.version,v 1.50 2009/06/01 18:56:08 gdt Exp $
+# $NetBSD: Makefile.version,v 1.51 2009/08/06 22:08:56 gdt Exp $
 
 # When updating subversion, all packages are updated at the same time
 # to have a consistent set of packages.  A particularly tricky aspect
@@ -7,5 +7,5 @@
 # changing the version.
 
 .if !defined(SVNVER)
-SVNVER=                1.6.2
+SVNVER=                1.6.4
 .endif
diff -r 8ad59a662c04 -r 209bc2076977 devel/subversion/distinfo
--- a/devel/subversion/distinfo Thu Aug 06 21:52:19 2009 +0000
+++ b/devel/subversion/distinfo Thu Aug 06 22:08:56 2009 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.71 2009/05/30 00:16:47 gdt Exp $
+$NetBSD: distinfo,v 1.72 2009/08/06 22:08:56 gdt Exp $
 
-SHA1 (subversion-1.6.2.tar.gz) = 35964d8c00dd58e78a374a083a2347b97cc7be1d
-RMD160 (subversion-1.6.2.tar.gz) = c311c1b3e532b3e92bc2eba661b74e0764d41ea4
-Size (subversion-1.6.2.tar.gz) = 7506011 bytes
+SHA1 (subversion-1.6.4.tar.gz) = 0380c01229e5faa2f77236d0316abda292822303
+RMD160 (subversion-1.6.4.tar.gz) = 3944303e8ef744351fa2bcd7d905b7c208321495
+Size (subversion-1.6.4.tar.gz) = 7519245 bytes
 SHA1 (patch-ad) = 52da52e60e4d70266081d98ab0bf4ec312427bd6
 SHA1 (patch-ae) = 55982ded0a7cbb09a91545c7580021e8ed4947f0