fix mod_authz_svn, mod_dontdothat (#2250182)

This commit is contained in:
Joe Orton 2023-11-20 09:42:37 +00:00
parent bff2e895c1
commit 75534963a4
2 changed files with 6 additions and 3 deletions

View File

@ -13,12 +13,12 @@ Don't expose private symbols for the Apache modules DSO.
tfile = name + self.gen_obj._extension_map['lib', 'target'] tfile = name + self.gen_obj._extension_map['lib', 'target']
self.filename = build_path_join(self.path, tfile) self.filename = build_path_join(self.path, tfile)
+ modname = name[4:] + '_module' + modsyms = name[4:] + '_[^_].*'
# we have a custom linking rule # we have a custom linking rule
### hmm. this is Makefile-specific ### hmm. this is Makefile-specific
self.compile_cmd = '$(COMPILE_APACHE_MOD)' self.compile_cmd = '$(COMPILE_APACHE_MOD)'
- self.link_cmd = '$(LINK_APACHE_MOD)' - self.link_cmd = '$(LINK_APACHE_MOD)'
+ self.link_cmd = '$(LINK_APACHE_MOD) -export-symbols-regex ' + modname + self.link_cmd = '$(LINK_APACHE_MOD) -export-symbols-regex ' + modsyms
class TargetSharedOnlyLib(TargetLib): class TargetSharedOnlyLib(TargetLib):

View File

@ -63,7 +63,7 @@
Summary: A Modern Concurrent Version Control System Summary: A Modern Concurrent Version Control System
Name: subversion Name: subversion
Version: 1.14.2 Version: 1.14.2
Release: 21%{?dist} Release: 22%{?dist}
License: Apache-2.0 License: Apache-2.0
URL: https://subversion.apache.org/ URL: https://subversion.apache.org/
Source0: https://downloads.apache.org/subversion/subversion-%{version}.tar.bz2 Source0: https://downloads.apache.org/subversion/subversion-%{version}.tar.bz2
@ -593,6 +593,9 @@ make check-javahl
%endif %endif
%changelog %changelog
* Mon Nov 20 2023 Joe Orton <jorton@redhat.com> - 1.14.2-22
- fix mod_authz_svn, mod_dontdothat (#2250182)
* Wed Nov 8 2023 Joe Orton <jorton@redhat.com> - 1.14.2-21 * Wed Nov 8 2023 Joe Orton <jorton@redhat.com> - 1.14.2-21
- restore plaintext password storage by default (per upstream) - restore plaintext password storage by default (per upstream)
- restrict symbols exposed by DSOs built for httpd - restrict symbols exposed by DSOs built for httpd