rpms/subversion
5
0
Fork 0
Code Issues Pull Requests Releases Activity

fix mod_authz_svn, mod_dontdothat (#2250182)

Browse Source
This commit is contained in:
Joe Orton 2023-11-20 09:42:37 +00:00
parent bff2e895c1
commit 75534963a4
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
subversion-1.14.2-modsyms.patch
View File

@ -13,12 +13,12 @@ Don't expose private symbols for the Apache modules DSO.
tfile = name + self.gen_obj._extension_map['lib', 'target']
self.filename = build_path_join(self.path, tfile)
+ modname = name[4:] + '_module'
+ modsyms = name[4:] + '_[^_].*'
# we have a custom linking rule
### hmm. this is Makefile-specific
self.compile_cmd = '$(COMPILE_APACHE_MOD)'
- self.link_cmd = '$(LINK_APACHE_MOD)'
+ self.link_cmd = '$(LINK_APACHE_MOD) -export-symbols-regex ' + modname
+ self.link_cmd = '$(LINK_APACHE_MOD) -export-symbols-regex ' + modsyms
class TargetSharedOnlyLib(TargetLib):

5
subversion.spec
View File

@ -63,7 +63,7 @@
Summary: A Modern Concurrent Version Control System
Name: subversion
Version: 1.14.2
Release: 21%{?dist}
Release: 22%{?dist}
License: Apache-2.0
URL: https://subversion.apache.org/
Source0: https://downloads.apache.org/subversion/subversion-%{version}.tar.bz2
@ -593,6 +593,9 @@ make check-javahl
%endif
%changelog
* Mon Nov 20 2023 Joe Orton <jorton@redhat.com> - 1.14.2-22
- fix mod_authz_svn, mod_dontdothat (#2250182)
* Wed Nov 8 2023 Joe Orton <jorton@redhat.com> - 1.14.2-21
- restore plaintext password storage by default (per upstream)
- restrict symbols exposed by DSOs built for httpd