import subversion-1.10.2-5.module+el8.6.0+15157+188c9801

3 years ago · 9c1f3feedf
commit 9c1f3feedf
18 changed files with 8025 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@ -0,0 +1 @@
+SOURCES/subversion-1.10.2.tar.bz2
--- a/.subversion.metadata
+++ b/.subversion.metadata
@ -0,0 +1 @@
+bc52ef2e671f821998ac9a5f7ebecbbcaaef83b8 SOURCES/subversion-1.10.2.tar.bz2
--- a/SOURCES/filter-requires.sh
+++ b/SOURCES/filter-requires.sh
@ -0,0 +1,13 @@
+#!/bin/sh
+# Munge Perl requirements:
+# - remove dependency on Config::Inifiles
+# - only require File::Path >= 1.04, not >= 1.404
+#   (since rpmvercmp thinks 04 < 1.404, not unreasonably)
+# - filter out requirements for SVN:: modules; otherwise
+#   subversion requires subversion-perl
+/usr/lib/rpm/perl.req $* | 
+sed -e '/perl(Config::IniFiles)/d' \
+    -e '/perl(SVN::/d' \
+    -e 's/perl(File::Path) >= 1.0404/perl(File::Path) >= 1.04/'
+
+    
--- a/SOURCES/psvn-init.el
+++ b/SOURCES/psvn-init.el
@ -0,0 +1,3 @@
+(defalias 'svn-examine 'svn-status)
+(autoload 'svn-status "psvn" "Examine the status of Subversion working copy in
+directory DIR.")
--- a/SOURCES/psvn.el
+++ b/SOURCES/psvn.el
--- a/SOURCES/subversion-1.10.0-pie.patch
+++ b/SOURCES/subversion-1.10.0-pie.patch
@ -0,0 +1,72 @@
+
+Link executables using -pie, link test executables using -no-install.
+
+diff -uap subversion-1.10.0/build.conf.pie subversion-1.10.0/build.conf
+--- subversion-1.10.0/build.conf.pie
+++ subversion-1.10.0/build.conf
+@@ -783,6 +783,7 @@
+ libs = libsvn_repos libsvn_fs libsvn_delta libsvn_subr aprutil apriconv apr
+ msvc-static = yes
+ undefined-lib-symbols = yes
+link-cmd = $(LINK_TEST_LIB)
+ 
+ # ----------------------------------------------------------------------------
+ # Tests for libsvn_fs_base
+diff -uap subversion-1.10.0/build/generator/gen_base.py.pie subversion-1.10.0/build/generator/gen_base.py
+--- subversion-1.10.0/build/generator/gen_base.py.pie
+++ subversion-1.10.0/build/generator/gen_base.py
+@@ -599,7 +599,7 @@
+     self.install = options.get('install')
+     self.compile_cmd = options.get('compile-cmd')
+     self.sources = options.get('sources', '*.c *.cpp')
+-    self.link_cmd = options.get('link-cmd', '$(LINK)')
+    self.link_cmd = options.get('link-cmd', '$(LINK_LIB)')
+ 
+     self.external_lib = options.get('external-lib')
+     self.external_project = options.get('external-project')
+@@ -659,6 +659,17 @@
+ 
+     self.msvc_force_static = options.get('msvc-force-static') == 'yes'
+ 
+    if self.install in ['test', 'bdb-test', 'sub-test', ]:
+      self.link_cmd = '$(LINK_TEST)'
+    elif self.install in ['cxxhl-tests', ]:
+      self.link_cmd = '$(LINK_TEST_CXX)'
+    elif self.link_cmd == '$(LINK_LIB)':
+      # Over-ride the default for TargetLinked.
+      self.link_cmd = '$(LINK_EXE)'
+    else:
+      raise GenError('ERROR: Unknown executable link type for ' + self.name + \
+                     ': ' + self.link_cmd + ' (' + self.install + ')')
+    
+   def add_dependencies(self):
+     TargetLinked.add_dependencies(self)
+ 
+diff -uap subversion-1.10.0/Makefile.in.pie subversion-1.10.0/Makefile.in
+--- subversion-1.10.0/Makefile.in.pie
+++ subversion-1.10.0/Makefile.in
+@@ -268,6 +268,11 @@
+ LINK_LIB = $(LINK) $(LT_SO_VERSION) -rpath $(libdir)
+ LINK_CXX = $(LIBTOOL) $(LTCXXFLAGS) --mode=link $(CXX) $(LT_LDFLAGS) $(CXXFLAGS) $(LDFLAGS)
+ LINK_CXX_LIB = $(LINK_CXX) $(LT_SO_VERSION) -rpath $(libdir)
+LINK_TEST = $(LINK) -no-install
+LINK_TEST_LIB = $(LINK) -avoid-version
+LINK_TEST_CXX_LIB = $(LINK_CXX) -avoid-version
+LINK_EXE = $(LINK) -pie
+LINK_CXX_EXE = $(LINK) -pie
+ 
+ # special link rule for mod_dav_svn
+ LINK_APACHE_MOD = $(LIBTOOL) $(LTFLAGS) --mode=link $(CC) $(LT_LDFLAGS) $(CFLAGS) $(LDFLAGS) -rpath $(APACHE_LIBEXECDIR) -avoid-version -module $(APACHE_LDFLAGS) -shared
+@@ -780,10 +785,10 @@
+ 	$(PYTHON) $(top_srcdir)/build/transform_sql.py $< $(top_srcdir)/$@
+ 
+ .c.o:
+-	$(COMPILE) -o $@ -c $<
+	$(COMPILE) -fPIE -o $@ -c $<
+ 
+ .cpp.o:
+-	$(COMPILE_CXX) -o $@ -c $<
+	$(COMPILE_CXX) -fPIE -o $@ -c $<
+ 
+ .c.lo:
+ 	$(LT_COMPILE) -o $@ -c $<
--- a/SOURCES/subversion-1.10.0-rpath.patch
+++ b/SOURCES/subversion-1.10.0-rpath.patch
@ -0,0 +1,42 @@
+
+Only link libraries using -rpath, to avoid unnecessary RPATH tags in executables.
+
+diff -uap subversion-1.10.0/build.conf.rpath subversion-1.10.0/build.conf
+--- subversion-1.10.0/build.conf.rpath
+++ subversion-1.10.0/build.conf
+@@ -568,7 +568,7 @@
+ path = subversion/bindings/swig/python/libsvn_swig_py
+ libs = libsvn_client libsvn_wc libsvn_ra libsvn_delta libsvn_subr
+        apriconv apr python swig
+-link-cmd = $(LINK)
+link-cmd = $(LINK_LIB)
+ install = swig-py-lib
+ # need special build rule to include -DSWIGPYTHON
+ compile-cmd = $(COMPILE_SWIG_PY)
+@@ -594,7 +594,7 @@
+ lang = ruby
+ path = subversion/bindings/swig/ruby/libsvn_swig_ruby
+ libs = libsvn_client libsvn_wc libsvn_delta libsvn_subr apriconv apr ruby swig
+-link-cmd = $(LINK) $(SWIG_RB_LIBS)
+link-cmd = $(LINK_LIB) $(SWIG_RB_LIBS)
+ install = swig-rb-lib
+ # need special build rule to include
+ compile-cmd = $(COMPILE_SWIG_RB)
+diff -uap subversion-1.10.0/Makefile.in.rpath subversion-1.10.0/Makefile.in
+--- subversion-1.10.0/Makefile.in.rpath
+++ subversion-1.10.0/Makefile.in
+@@ -264,10 +264,10 @@
+ COMPILE_GOOGLEMOCK_CXX = $(LT_COMPILE_CXX_NOWARN) $(GOOGLEMOCK_LIB_INCLUDES) -o $@ -c
+ COMPILE_CXXHL_GOOGLEMOCK_CXX = $(LT_COMPILE_CXX) $(CXXHL_INCLUDES) $(GOOGLEMOCK_INCLUDES) -o $@ -c
+ 
+-LINK = $(LIBTOOL) $(LTFLAGS) --mode=link $(CC) $(LT_LDFLAGS) $(CFLAGS) $(LDFLAGS) -rpath $(libdir)
+-LINK_LIB = $(LINK) $(LT_SO_VERSION)
+-LINK_CXX = $(LIBTOOL) $(LTCXXFLAGS) --mode=link $(CXX) $(LT_LDFLAGS) $(CXXFLAGS) $(LDFLAGS) -rpath $(libdir)
+-LINK_CXX_LIB = $(LINK_CXX) $(LT_SO_VERSION)
+LINK = $(LIBTOOL) $(LTFLAGS) --mode=link $(CC) $(LT_LDFLAGS) $(CFLAGS) $(LDFLAGS)
+LINK_LIB = $(LINK) $(LT_SO_VERSION) -rpath $(libdir)
+LINK_CXX = $(LIBTOOL) $(LTCXXFLAGS) --mode=link $(CXX) $(LT_LDFLAGS) $(CXXFLAGS) $(LDFLAGS)
+LINK_CXX_LIB = $(LINK_CXX) $(LT_SO_VERSION) -rpath $(libdir)
+ 
+ # special link rule for mod_dav_svn
+ LINK_APACHE_MOD = $(LIBTOOL) $(LTFLAGS) --mode=link $(CC) $(LT_LDFLAGS) $(CFLAGS) $(LDFLAGS) -rpath $(APACHE_LIBEXECDIR) -avoid-version -module $(APACHE_LDFLAGS) -shared
--- a/SOURCES/subversion-1.10.2-CVE-2018-11782.patch
+++ b/SOURCES/subversion-1.10.2-CVE-2018-11782.patch
@ -0,0 +1,221 @@
+
+https://bugzilla.redhat.com/show_bug.cgi?id=17330884
+
+https://subversion.apache.org/security/CVE-2018-11782-advisory.txt
+
+Fixes for CVE-2018-11782, svnserve get-deleted-rev assertion failure.
+
+The svn protocol prototype for get-deleted-rev does not allow for a reply of
+SVN_INVALID_REVNUM directly. A query having such an answer previously caused
+the server to raise an assertion failure which could crash the whole process
+or a thread or child process of it, depending on the build configuration of
+the server.
+
+To work around the problem without changing the protocol, we re-purpose the
+obsolete error code 'SVN_ERR_ENTRY_MISSING_REVISION' to communicate this
+'not deleted' reply to the client.
+
+  - With a new client against a new server, such queries are now handled
+    correctly.
+
+  - With an old client against a new server, the client will report a more
+    informative error message, and the server will not crash.
+
+  - With a new client against an old server, the behaviour is the same as
+    with an old client against an old server.
+
+In addition, this fixes a similar problem whereby any regular error response
+to a 'get-deleted-rev' query resulted in the server closing the connection,
+process and/or thread (again depending on the build configuration). Now such
+errors are correctly passed back to the client.
+
+* subversion/libsvn_ra_svn/client.c
+  (ra_svn_get_deleted_rev): Detect error SVN_ERR_ENTRY_MISSING_REVISION
+    and convert it to a response of SVN_INVALID_REVNUM.
+
+* subversion/svnserve/serve.c
+  (get_deleted_rev): Respond with error SVN_ERR_ENTRY_MISSING_REVISION
+    instead of an assertion failure if the answer is SVN_INVALID_REVNUM.
+    If svn_repos_deleted_rev() returns an error, pass that error back to
+    the client.
+
+* subversion/tests/libsvn_ra/ra-test.c
+  (commit_two_changes): New.
+  (test_get_deleted_rev_no_delete,
+   test_get_deleted_rev_errors): New tests.
+  (test_funcs): Run them.
+--This line, and those below, will be ignored--
+
+Index: subversion/libsvn_ra_svn/client.c
+===================================================================
+--- subversion-1.10.2/subversion/libsvn_ra_svn/client.c.cve11782
+++ subversion-1.10.2/subversion/libsvn_ra_svn/client.c
+@@ -3105,6 +3105,7 @@
+ {
+   svn_ra_svn__session_baton_t *sess_baton = session->priv;
+   svn_ra_svn_conn_t *conn = sess_baton->conn;
+  svn_error_t *err;
+ 
+   path = reparent_path(session, path, pool);
+ 
+@@ -3116,8 +3117,20 @@
+   SVN_ERR(handle_unsupported_cmd(handle_auth_request(sess_baton, pool),
+                                  N_("'get-deleted-rev' not implemented")));
+ 
+-  return svn_error_trace(svn_ra_svn__read_cmd_response(conn, pool, "r",
+-                                                       revision_deleted));
+  err = svn_error_trace(svn_ra_svn__read_cmd_response(conn, pool, "r",
+                                                      revision_deleted));
+  /* The protocol does not allow for a reply of SVN_INVALID_REVNUM directly.
+     Instead, a new enough server returns SVN_ERR_ENTRY_MISSING_REVISION to
+     indicate the answer to the query is SVN_INVALID_REVNUM. (An older server
+     closes the connection and returns SVN_ERR_RA_SVN_CONNECTION_CLOSED.) */
+  if (err && err->apr_err == SVN_ERR_ENTRY_MISSING_REVISION)
+    {
+      *revision_deleted = SVN_INVALID_REVNUM;
+      svn_error_clear(err);
+    }
+  else
+    SVN_ERR(err);
+  return SVN_NO_ERROR;
+ }
+ 
+ static svn_error_t *
+--- subversion-1.10.2/subversion/svnserve/serve.c.cve11782
+++ subversion-1.10.2/subversion/svnserve/serve.c
+@@ -3505,8 +3505,21 @@
+                                svn_relpath_canonicalize(path, pool), pool);
+   SVN_ERR(log_command(b, conn, pool, "get-deleted-rev"));
+   SVN_ERR(trivial_auth_request(conn, pool, b));
+-  SVN_ERR(svn_repos_deleted_rev(b->repository->fs, full_path, peg_revision,
+-                                end_revision, &revision_deleted, pool));
+  SVN_CMD_ERR(svn_repos_deleted_rev(b->repository->fs, full_path, peg_revision,
+                                    end_revision, &revision_deleted, pool));
+
+  /* The protocol does not allow for a reply of SVN_INVALID_REVNUM directly.
+     Instead, return SVN_ERR_ENTRY_MISSING_REVISION. A new enough client
+     knows that this means the answer to the query is SVN_INVALID_REVNUM.
+     (An older client reports this as an error.) */
+  if (revision_deleted == SVN_INVALID_REVNUM)
+    SVN_CMD_ERR(svn_error_createf(SVN_ERR_ENTRY_MISSING_REVISION, NULL,
+                                  "svn protocol command 'get-deleted-rev': "
+                                  "path '%s' was not deleted in r%ld-%ld; "
+                                  "NOTE: newer clients handle this case "
+                                  "and do not report it as an error",
+                                  full_path, peg_revision, end_revision));
+
+   SVN_ERR(svn_ra_svn__write_cmd_response(conn, pool, "r", revision_deleted));
+   return SVN_NO_ERROR;
+ }
+--- subversion-1.10.2/subversion/tests/libsvn_ra/ra-test.c.cve11782
+++ subversion-1.10.2/subversion/tests/libsvn_ra/ra-test.c
+@@ -94,6 +94,41 @@
+   return SVN_NO_ERROR;
+ }
+ 
+/* Commit two revisions: add 'B', then delete 'A' */
+static svn_error_t *
+commit_two_changes(svn_ra_session_t *session,
+                   apr_pool_t *pool)
+{
+  apr_hash_t *revprop_table = apr_hash_make(pool);
+  const svn_delta_editor_t *editor;
+  void *edit_baton;
+  void *root_baton, *dir_baton;
+
+  /* mkdir B */
+  SVN_ERR(svn_ra_get_commit_editor3(session, &editor, &edit_baton,
+                                    revprop_table,
+                                    NULL, NULL, NULL, TRUE, pool));
+  SVN_ERR(editor->open_root(edit_baton, SVN_INVALID_REVNUM,
+                            pool, &root_baton));
+  SVN_ERR(editor->add_directory("B", root_baton, NULL, SVN_INVALID_REVNUM,
+                               pool, &dir_baton));
+  SVN_ERR(editor->close_directory(dir_baton, pool));
+  SVN_ERR(editor->close_directory(root_baton, pool));
+  SVN_ERR(editor->close_edit(edit_baton, pool));
+
+  /* delete A */
+  SVN_ERR(svn_ra_get_commit_editor3(session, &editor, &edit_baton,
+                                    revprop_table,
+                                    NULL, NULL, NULL, TRUE, pool));
+  SVN_ERR(editor->open_root(edit_baton, SVN_INVALID_REVNUM,
+                            pool, &root_baton));
+  SVN_ERR(editor->delete_entry("A", SVN_INVALID_REVNUM, root_baton, pool));
+  SVN_ERR(editor->close_directory(root_baton, pool));
+  SVN_ERR(editor->close_edit(edit_baton, pool));
+
+  return SVN_NO_ERROR;
+}
+
+ static svn_error_t *
+ commit_tree(svn_ra_session_t *session,
+             apr_pool_t *pool)
+@@ -1784,6 +1819,56 @@
+   return SVN_NO_ERROR;
+ }
+ 
+/* Cases of 'get-deleted-rev' that should return SVN_INVALID_REVNUM. */
+static svn_error_t *
+test_get_deleted_rev_no_delete(const svn_test_opts_t *opts,
+                               apr_pool_t *pool)
+{
+  svn_ra_session_t *ra_session;
+  svn_revnum_t revision_deleted;
+
+  SVN_ERR(make_and_open_repos(&ra_session,
+                              "test-repo-get-deleted-rev-no-delete", opts,
+                              pool));
+  SVN_ERR(commit_changes(ra_session, pool));
+  SVN_ERR(commit_two_changes(ra_session, pool));
+
+  /* expect 'no deletion' in the range up to r2, when it is deleted in r3 */
+  /* This was failing over RA-SVN where the 'get-deleted-rev' wire command's
+     prototype cannot directly represent that result. A new enough client and
+     server collaborate on a work-around implemented using an error code. */
+  SVN_ERR(svn_ra_get_deleted_rev(ra_session, "A", 1, 2,
+                                 &revision_deleted, pool));
+  SVN_TEST_INT_ASSERT(revision_deleted, SVN_INVALID_REVNUM);
+
+  /* this connection should still be open: a simple case should still work */
+  SVN_ERR(svn_ra_get_deleted_rev(ra_session, "A", 1, 3,
+                                 &revision_deleted, pool));
+  SVN_TEST_INT_ASSERT(revision_deleted, 3);
+
+  return SVN_NO_ERROR;
+}
+
+/* Cases of 'get-deleted-rev' that should return an error. */
+static svn_error_t *
+test_get_deleted_rev_errors(const svn_test_opts_t *opts,
+                               apr_pool_t *pool)
+{
+  svn_ra_session_t *ra_session;
+  svn_revnum_t revision_deleted;
+
+  SVN_ERR(make_and_open_repos(&ra_session,
+                              "test-repo-get-deleted-rev-errors", opts, pool));
+  SVN_ERR(commit_changes(ra_session, pool));
+
+  /* expect an error when searching up to r3, when repository head is r1 */
+  SVN_TEST_ASSERT_ERROR(svn_ra_get_deleted_rev(ra_session, "A", 1, 3,
+                                               &revision_deleted, pool),
+                        SVN_ERR_FS_NO_SUCH_REVISION);
+
+  return SVN_NO_ERROR;
+}
+
+ 
+ /* The test table.  */
+ 
+@@ -1820,6 +1905,10 @@
+                        "check how last change applies to empty commit"),
+     SVN_TEST_OPTS_PASS(commit_locked_file,
+                        "check commit editor for a locked file"),
+    SVN_TEST_OPTS_PASS(test_get_deleted_rev_no_delete,
+                       "test get-deleted-rev no delete"),
+    SVN_TEST_OPTS_PASS(test_get_deleted_rev_errors,
+                       "test get-deleted-rev errors"),
+     SVN_TEST_NULL
+   };
+ 
--- a/SOURCES/subversion-1.10.2-CVE-2019-0203.patch
+++ b/SOURCES/subversion-1.10.2-CVE-2019-0203.patch
@ -0,0 +1,31 @@
+diff --git a/subversion/svnserve/serve.c b/subversion/svnserve/serve.c
+index 5192e7c..6159e22 100644
+--- a/subversion/svnserve/serve.c
+++ b/subversion/svnserve/serve.c
+@@ -4101,7 +4101,7 @@ construct_server_baton(server_baton_t **baton,
+                        serve_params_t *params,
+                        apr_pool_t *scratch_pool)
+ {
+-  svn_error_t *err, *io_err;
+  svn_error_t *err;
+   apr_uint64_t ver;
+   const char *client_url, *ra_client_string, *client_string;
+   svn_ra_svn__list_t *caplist;
+@@ -4239,11 +4239,12 @@ construct_server_baton(server_baton_t **baton,
+     }
+   if (err)
+     {
+-      log_error(err, b);
+-      io_err = svn_ra_svn__write_cmd_failure(conn, scratch_pool, err);
+-      svn_error_clear(err);
+-      SVN_ERR(io_err);
+-      return svn_ra_svn__flush(conn, scratch_pool);
+      /* Report these errors to the client before closing the connection. */
+      err = svn_error_compose_create(err,
+              svn_ra_svn__write_cmd_failure(conn, scratch_pool, err));
+      err = svn_error_compose_create(err,
+              svn_ra_svn__flush(conn, scratch_pool));
+      return err;
+     }
+ 
+   SVN_ERR(svn_fs_get_uuid(b->repository->fs, &b->repository->uuid,
--- a/SOURCES/subversion-1.10.2-CVE-2020-17525.patch
+++ b/SOURCES/subversion-1.10.2-CVE-2020-17525.patch
@ -0,0 +1,17 @@
+
+https://bugzilla.redhat.com/show_bug.cgi?id=1922303
+https://github.com/apache/subversion/commit/c83d9e5db564bdbbd91a7eb1c9399f66f481361c
+
+--- a/subversion/libsvn_repos/config_file.c
+++ b/subversion/libsvn_repos/config_file.c
+@@ -237,6 +237,10 @@ get_repos_config(svn_stream_t **stream,
+     {
+       /* Search for a repository in the full path. */
+       repos_root_dirent = svn_repos_find_root_path(dirent, scratch_pool);
+      if (repos_root_dirent == NULL)
+        return svn_error_trace(handle_missing_file(stream, checksum, access,
+                                                   url, must_exist,
+                                                   svn_node_none));
+ 
+       /* Attempt to open a repository at repos_root_dirent. */
+       SVN_ERR(svn_repos_open3(&access->repos, repos_root_dirent, NULL,
--- a/SOURCES/subversion-1.10.2-CVE-2022-24070.patch
+++ b/SOURCES/subversion-1.10.2-CVE-2022-24070.patch
@ -0,0 +1,41 @@
+--- subversion-1.10.2/subversion/libsvn_repos/authz.c	
+++ subversion-1.10.2/subversion/libsvn_repos/authz.c	
+@@ -130,6 +130,30 @@
+ static svn_object_pool__t *filtered_pool = NULL;
+ static svn_atomic_t authz_pool_initialized = FALSE;
+ 
+/*
+ * Ensure that we will initialize authz again if the pool which
+ * our authz caches depend on is cleared.
+ *
+ * HTTPD may run pre/post config hooks multiple times and clear
+ * its global configuration pool which our authz pools depend on.
+ * This happens in a non-threaded context during HTTPD's intialization
+ * and HTTPD's main loop, so it is safe to reset static variables here.
+ * (And any applications which cleared this pool while SVN threads
+ * were running would crash no matter what.)
+ *
+ * See issue #4880, "Use-after-free of object-pools in
+ * subversion/libsvn_repos/authz.c when used as httpd module"
+ */
+static apr_status_t
+deinit_authz(void *data)
+{
+  /* The two object pools run their own cleanup handlers. */
+  authz_pool = NULL;
+  filtered_pool = NULL;
+  authz_pool_initialized = FALSE;
+  return APR_SUCCESS;
+}
+
+ /* Implements svn_atomic__err_init_func_t. */
+ static svn_error_t *
+ synchronized_authz_initialize(void *baton, apr_pool_t *pool)
+@@ -143,6 +167,7 @@
+   SVN_ERR(svn_object_pool__create(&authz_pool, multi_threaded, pool));
+   SVN_ERR(svn_object_pool__create(&filtered_pool, multi_threaded, pool));
+ 
+  apr_pool_cleanup_register(pool, NULL, deinit_authz, apr_pool_cleanup_null);
+   return SVN_NO_ERROR;
+ }
+ 
--- a/SOURCES/subversion-1.8.0-rubybind.patch
+++ b/SOURCES/subversion-1.8.0-rubybind.patch
@ -0,0 +1,24 @@
+
+Try a little harder to avoid svnserve() bind failures.
+
+--- subversion-1.8.0/subversion/bindings/swig/ruby/test/util.rb.rubybind
+++ subversion-1.8.0/subversion/bindings/swig/ruby/test/util.rb
+@@ -39,7 +39,8 @@ module SvnTestUtil
+     @realm = "sample realm"
+ 
+     @svnserve_host = "127.0.0.1"
+-    @svnserve_ports = (64152..64282).collect{|x| x.to_s}
+    sport = (50000 + rand(100) * 100)
+    @svnserve_ports = (sport..sport + 99).collect{|x| x.to_s}
+ 
+     @tmp_path = Dir.mktmpdir
+     @wc_path = File.join(@tmp_path, "wc")
+@@ -252,6 +253,8 @@ realm = #{@realm}
+                "--listen-port", port,
+                "-d", "--foreground")
+         }
+        # wait a while for svnserve to attempt a bind() and possibly fail
+        sleep(1)
+         pid, status = Process.waitpid2(@svnserve_pid, Process::WNOHANG)
+         if status and status.exited?
+           if $DEBUG
--- a/SOURCES/subversion-1.8.5-swigplWall.patch
+++ b/SOURCES/subversion-1.8.5-swigplWall.patch
@ -0,0 +1,16 @@
+
+Don't drop -Wall in the swig Perl bindings, otherwise building with
+e.g. -Wformat-security might break.
+
+https://bugzilla.redhat.com/show_bug.cgi?id=1037341
+
+--- subversion-1.8.5/subversion/bindings/swig/perl/native/Makefile.PL.in.swigplWall
+++ subversion-1.8.5/subversion/bindings/swig/perl/native/Makefile.PL.in
+@@ -54,7 +54,6 @@ my $includes = ' -I/usr/include/apr-1
+ # SWIG is using C++ style comments in an extern "C" code.
+ $cflags =~ s/-ansi\s+//g;
+ $cflags =~ s/-std=c89\s+//g;
+-$cflags =~ s/-Wall//g;
+ $cflags =~ s/-Wunused//g;
+ $cflags =~ s/-Wshadow//g;
+ $cflags =~ s/-Wstrict-prototypes//g;
--- a/SOURCES/subversion.conf
+++ b/SOURCES/subversion.conf
@ -0,0 +1,41 @@
+
+LoadModule dav_svn_module     modules/mod_dav_svn.so
+LoadModule authz_svn_module   modules/mod_authz_svn.so
+LoadModule dontdothat_module  modules/mod_dontdothat.so
+
+#
+# Example configuration to enable HTTP access for a directory
+# containing Subversion repositories, "/var/www/svn".  Each repository
+# must be both:
+#
+#   a) readable and writable by the 'apache' user, and
+#
+#   b) labelled with the 'httpd_sys_content_t' context if using
+#   SELinux
+#
+
+#
+# To create a new repository "http://localhost/repos/stuff" using
+# this configuration, run as root:
+#
+#   # cd /var/www/svn
+#   # svnadmin create stuff   
+#   # chown -R apache:apache stuff
+#   # chcon -R -t httpd_sys_content_t stuff
+#
+
+#<Location /repos>
+#   DAV svn
+#   SVNParentPath /var/www/svn
+#
+#   # Limit write permission to list of valid users.
+#   <LimitExcept GET PROPFIND OPTIONS REPORT>
+#      # Require SSL connection for password protection.
+#      # SSLRequireSSL
+#
+#      AuthType Basic
+#      AuthName "Authorization Realm"
+#      AuthUserFile /path/to/passwdfile
+#      Require valid-user
+#   </LimitExcept>
+#</Location>
--- a/SOURCES/svnserve.service
+++ b/SOURCES/svnserve.service
@ -0,0 +1,13 @@
+[Unit]
+Description=Subversion protocol daemon
+After=syslog.target network.target
+Documentation=man:svnserve(8)
+
+[Service]
+Type=forking
+EnvironmentFile=/etc/sysconfig/svnserve
+ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS
+PrivateTmp=yes
+
+[Install]
+WantedBy=multi-user.target
--- a/SOURCES/svnserve.sysconf
+++ b/SOURCES/svnserve.sysconf
@ -0,0 +1,4 @@
+# OPTIONS is used to pass command-line arguments to svnserve.
+# 
+# Specify the repository location in -r parameter:
+OPTIONS="-r /var/svn"
--- a/SOURCES/svnserve.tmpfiles
+++ b/SOURCES/svnserve.tmpfiles
@ -0,0 +1 @@
+D /run/svnserve 0700 root root -
--- a/SPECS/subversion.spec
+++ b/SPECS/subversion.spec
@ -0,0 +1,922 @@
+# set to zero to avoid running test suite
+
+%bcond_without kwallet
+%bcond_without python2
+%bcond_with python3
+%bcond_without bdb
+%bcond_without tests
+%bcond_without pyswig
+
+%ifarch %{power64} s390x
+%global with_java 0
+%else
+%global with_java 1
+%endif
+
+%if %{with python2} == %{with python3}
+%error Pick exactly one Python version
+%endif
+
+# set JDK path to build javahl; default for JPackage
+%define jdk_path /usr/lib/jvm/java
+
+%{!?_httpd_mmn: %{expand: %%global _httpd_mmn %%(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo 0-0)}}
+
+%define perl_vendorarch %(eval "`%{__perl} -V:installvendorarch`"; echo $installvendorarch)
+
+%if %{with python2}
+%global svn_python_sitearch %{python2_sitearch}
+%global svn_python %{__python2}
+%global svn_python_br python2-devel
+%else
+%global svn_python_sitearch %{python3_sitearch}
+%global svn_python %{__python3}
+%global svn_python_br python3-devel
+%endif
+
+Summary: A Modern Concurrent Version Control System
+Name: subversion
+Version: 1.10.2
+Release: 5%{?dist}
+License: ASL 2.0
+Group: Development/Tools
+URL: https://subversion.apache.org/
+
+Source0: https://www.apache.org/dist/subversion/subversion-%{version}.tar.bz2
+Source1: subversion.conf
+Source3: filter-requires.sh
+Source4: http://www.xsteve.at/prg/emacs/psvn.el
+Source5: psvn-init.el
+Source6: svnserve.service
+Source7: svnserve.tmpfiles
+Source8: svnserve.sysconf
+Patch1: subversion-1.10.0-rpath.patch
+Patch2: subversion-1.10.0-pie.patch
+Patch4: subversion-1.8.0-rubybind.patch
+Patch5: subversion-1.8.5-swigplWall.patch
+Patch6: subversion-1.10.2-CVE-2019-0203.patch
+Patch7: subversion-1.10.2-CVE-2018-11782.patch
+Patch8: subversion-1.10.2-CVE-2020-17525.patch
+Patch9: subversion-1.10.2-CVE-2022-24070.patch
+
+BuildRequires: autoconf, libtool, texinfo, which
+BuildRequires: swig >= 1.3.24, gettext
+%if %{with bdb}
+BuildRequires: libdb-devel >= 4.1.25
+%endif
+BuildRequires: %{svn_python_br}
+BuildRequires: apr-devel >= 1.3.0, apr-util-devel >= 1.3.0
+BuildRequires: libserf-devel >= 1.3.0, cyrus-sasl-devel
+BuildRequires: sqlite-devel >= 3.4.0, file-devel, systemd-units
+BuildRequires: utf8proc-devel, lz4-devel
+# Any apr-util crypto backend needed
+BuildRequires: apr-util-openssl
+# For systemctl scriptlets
+Requires(post): systemd
+Requires(preun): systemd
+Requires(postun): systemd
+Provides: svn = %{version}-%{release}
+Requires: subversion-libs%{?_isa} = %{version}-%{release}
+
+%define __perl_requires %{SOURCE3}
+
+# Put Python bindings in site-packages
+%define swigdirs swig_pydir=%{svn_python_sitearch}/libsvn swig_pydir_extra=%{svn_python_sitearch}/svn
+
+%description
+Subversion is a concurrent version control system which enables one
+or more users to collaborate in developing and maintaining a
+hierarchy of files and directories while keeping a history of all
+changes.  Subversion only stores the differences between versions,
+instead of every complete file.  Subversion is intended to be a
+compelling replacement for CVS.
+
+%package libs
+Group: Development/Tools
+Summary: Libraries for Subversion Version Control system
+# APR 1.3.x interfaces are required
+Conflicts: apr%{?_isa} < 1.3.0
+# Enforced at run-time by ra_serf
+Conflicts: libserf%{?_isa} < 1.3.0
+
+%description libs
+The subversion-libs package includes the essential shared libraries
+used by the Subversion version control tools.
+
+%if %{with python2} && %{with pyswig}
+%package -n python2-subversion
+%{?python_provide:%python_provide python2-subversion}
+# Remove before F30
+Provides: %{name}-python = %{version}-%{release}
+Provides: %{name}-python%{?_isa} = %{version}-%{release}
+Obsoletes: %{name}-python < %{version}-%{release}
+BuildRequires: python2-devel
+Group: Development/Libraries
+Summary: Python bindings for Subversion Version Control system
+
+%description -n python2-subversion
+The python2-subversion package includes the Python 2.x bindings to the
+Subversion libraries.
+%endif
+%if %{with python3} && %{with pyswig}
+%package -n python3-subversion
+%{?python_provide:%python_provide python3-subversion}
+Group: Development/Libraries
+Summary: Python bindings for Subversion Version Control system
+BuildRequires: python3-devel
+
+%description -n python3-subversion
+The python3-subversion package includes the Python 3.x bindings to the
+Subversion libraries.
+%endif
+
+%package devel
+Group: Development/Tools
+Summary: Development package for the Subversion libraries
+Requires: subversion%{?_isa} = %{version}-%{release}
+Requires: apr-devel%{?_isa}, apr-util-devel%{?_isa}
+
+%description devel
+The subversion-devel package includes the libraries and include files
+for developers interacting with the subversion package.
+
+%package gnome
+Group: Development/Tools
+Summary: GNOME Keyring support for Subversion
+Requires: subversion%{?_isa} = %{version}-%{release}
+BuildRequires: dbus-devel, libsecret-devel
+
+%description gnome
+The subversion-gnome package adds support for storing Subversion
+passwords in the GNOME Keyring.
+
+%if %{with kwallet}
+%package kde
+Group: Development/Tools
+Summary: KDE Wallet support for Subversion
+Requires: subversion%{?_isa} = %{version}-%{release}
+BuildRequires: kdelibs-devel >= 4.0.0
+
+%description kde
+The subversion-kde package adds support for storing Subversion
+passwords in the KDE Wallet.
+%endif
+
+%package -n mod_dav_svn
+Group: System Environment/Daemons
+Summary: Apache httpd module for Subversion server
+Requires: httpd-mmn = %{_httpd_mmn}
+Requires: subversion-libs%{?_isa} = %{version}-%{release}
+BuildRequires: httpd-devel >= 2.0.45
+
+%description -n mod_dav_svn
+The mod_dav_svn package allows access to a Subversion repository
+using HTTP, via the Apache httpd server.
+
+%package perl
+Group: Development/Libraries
+Summary: Perl bindings to the Subversion libraries
+BuildRequires: perl-devel >= 2:5.8.0, perl-generators, perl(ExtUtils::MakeMaker)
+BuildRequires: perl(Test::More), perl(ExtUtils::Embed)
+Requires: %(eval `perl -V:version`; echo "perl(:MODULE_COMPAT_$version)")
+Requires: subversion%{?_isa} = %{version}-%{release}
+
+%description perl
+This package includes the Perl bindings to the Subversion libraries.
+
+%if %{with_java}
+%package javahl
+Group: Development/Libraries
+Summary: JNI bindings to the Subversion libraries
+Requires: subversion = %{version}-%{release}
+BuildRequires: java-devel-openjdk
+# JAR repacking requires both zip and unzip in the buildroot
+BuildRequires: zip, unzip
+# For the tests
+BuildRequires: junit
+BuildArch: noarch
+
+%description javahl
+This package includes the JNI bindings to the Subversion libraries.
+%endif
+
+%package ruby
+Group: Development/Libraries
+Summary: Ruby bindings to the Subversion libraries
+BuildRequires: ruby-devel >= 1.9.1, ruby >= 1.9.1
+BuildRequires: rubygem(test-unit)
+Requires: subversion%{?_isa} = %{version}-%{release}
+Conflicts: ruby-libs%{?_isa} < 1.8.2
+
+%description ruby
+This package includes the Ruby bindings to the Subversion libraries.
+
+%package tools
+Group: Development/Tools
+Summary: Supplementary tools for Subversion
+Requires: subversion%{?_isa} = %{version}-%{release}
+
+%description tools
+This package includes supplementary tools for use with Subversion.
+
+%prep
+%setup -q
+%patch1 -p1 -b .rpath
+%patch2 -p1 -b .pie
+%patch4 -p1 -b .rubybind
+%patch5 -p1 -b .swigplWall
+%patch6 -p1 -b .cve0203
+%patch7 -p1 -b .cve11782
+%patch8 -p1 -b .cve17525
+%patch9 -p1 -b .cve24070
+
+%build
+# Regenerate the buildsystem, so that:
+#  1) patches applied to configure.in take effect
+#  2) the swig bindings are regenerated using the system swig
+# (2) is not ideal since typically upstream test with a different
+# swig version
+# This PATH order makes the fugly test for libtoolize work...
+mv build-outputs.mk build-outputs.mk.old
+export PYTHON=%{svn_python}
+
+PATH=/usr/bin:$PATH ./autogen.sh --release
+
+# fix shebang lines, #111498
+perl -pi -e 's|/usr/bin/env perl -w|/usr/bin/perl -w|' tools/hook-scripts/*.pl.in
+# fix python executable
+perl -pi -e 's|/usr/bin/env python.*|%{svn_python}|' subversion/tests/cmdline/svneditor.py
+
+# override weird -shrext from ruby
+export svn_cv_ruby_link="%{__cc} -shared"
+export svn_cv_ruby_sitedir_libsuffix=""
+export svn_cv_ruby_sitedir_archsuffix=""
+
+#export EXTRA_CFLAGS="$RPM_OPT_FLAGS -DSVN_SQLITE_MIN_VERSION_NUMBER=3007012 \
+#       -DSVN_SQLITE_MIN_VERSION=\\\"3.7.12\\\""
+export APACHE_LDFLAGS="-Wl,-z,relro,-z,now"
+export CC=gcc CXX=g++ JAVA_HOME=%{jdk_path}
+
+%configure --with-apr=%{_prefix} --with-apr-util=%{_prefix} \
+        --disable-debug \
+        --with-swig --with-serf=%{_prefix} \
+        --with-ruby-sitedir=%{ruby_vendorarchdir} \
+        --with-ruby-test-verbose=verbose \
+        --with-apxs=%{_httpd_apxs} --disable-mod-activation \
+        --with-apache-libexecdir=%{_httpd_moddir} \
+        --disable-static --with-sasl=%{_prefix} \
+        --with-libmagic=%{_prefix} \
+        --with-gnome-keyring \
+%if %{with_java}
+        --enable-javahl \
+        --with-junit=%{_prefix}/share/java/junit.jar \
+%endif
+%if %{with kwallet}
+        --with-kwallet=%{_includedir}/kde4:%{_libdir}/kde4/devel \
+%endif
+%if %{with bdb}
+        --with-berkeley-db \
+%else
+        --without-berkeley-db \
+%endif
+        || (cat config.log; exit 1)
+make %{?_smp_mflags} all tools
+%if %{with pyswig}
+make swig-py swig-py-lib %{swigdirs}
+%endif
+make swig-pl swig-pl-lib swig-rb swig-rb-lib
+%if %{with_java}
+# javahl-javah does not parallel-make with javahl
+#make javahl-java javahl-javah
+make javahl
+%endif
+
+%install
+make install DESTDIR=$RPM_BUILD_ROOT
+%if %{with pyswig}
+make install-swig-py %{swigdirs} DESTDIR=$RPM_BUILD_ROOT
+%endif
+make install-swig-pl-lib install-swig-rb DESTDIR=$RPM_BUILD_ROOT
+make pure_vendor_install -C subversion/bindings/swig/perl/native \
+        PERL_INSTALL_ROOT=$RPM_BUILD_ROOT
+%if %{with_java}
+make install-javahl-java install-javahl-lib javahl_javadir=%{_javadir} DESTDIR=$RPM_BUILD_ROOT
+%endif
+
+install -m 755 -d ${RPM_BUILD_ROOT}%{_sysconfdir}/subversion
+
+mkdir -p ${RPM_BUILD_ROOT}{%{_httpd_modconfdir},%{_httpd_confdir}}
+
+%if "%{_httpd_modconfdir}" == "%{_httpd_confdir}"
+# httpd <= 2.2.x
+install -p -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_httpd_confdir}
+%else
+sed -n /^LoadModule/p %{SOURCE1} > 10-subversion.conf
+sed    /^LoadModule/d %{SOURCE1} > example.conf
+touch -r %{SOURCE1} 10-subversion.conf example.conf
+install -p -m 644 10-subversion.conf ${RPM_BUILD_ROOT}%{_httpd_modconfdir}
+%endif
+
+# Remove unpackaged files
+rm -rf ${RPM_BUILD_ROOT}%{_includedir}/subversion-*/*.txt \
+       ${RPM_BUILD_ROOT}%{svn_python_sitearch}/*/*.{a,la}
+
+# The SVN build system is broken w.r.t. DSO support; it treats
+# normal libraries as DSOs and puts them in $libdir, whereas they
+# should go in some subdir somewhere, and be linked using -module,
+# etc.  So, forcibly nuke the .so's for libsvn_auth_{gnome,kde},
+# since nothing should ever link against them directly.
+rm -f ${RPM_BUILD_ROOT}%{_libdir}/libsvn_auth_*.so
+
+# remove stuff produced with Perl modules
+find $RPM_BUILD_ROOT -type f \
+    -a \( -name .packlist -o \( -name '*.bs' -a -empty \) \) \
+    -print0 | xargs -0 rm -f
+
+# make Perl modules writable so they get stripped
+find $RPM_BUILD_ROOT%{_libdir}/perl5 -type f -perm 555 -print0 |
+        xargs -0 chmod 755
+
+# unnecessary libraries for swig bindings
+rm -f ${RPM_BUILD_ROOT}%{_libdir}/libsvn_swig_*.{so,la,a}
+
+# Remove unnecessary ruby libraries
+rm -f ${RPM_BUILD_ROOT}%{ruby_vendorarchdir}/svn/ext/*.*a
+
+# Trim what goes in docdir
+rm -rvf tools/*/*.in tools/hook-scripts/mailer/tests
+
+# Install psvn for emacs and xemacs
+for f in emacs/site-lisp xemacs/site-packages/lisp; do
+  install -m 755 -d ${RPM_BUILD_ROOT}%{_datadir}/$f
+  install -m 644 $RPM_SOURCE_DIR/psvn.el ${RPM_BUILD_ROOT}%{_datadir}/$f
+done
+
+install -m 644 $RPM_SOURCE_DIR/psvn-init.el \
+        ${RPM_BUILD_ROOT}%{_datadir}/emacs/site-lisp
+
+# Rename authz_svn INSTALL doc for docdir
+ln -f subversion/mod_authz_svn/INSTALL mod_authz_svn-INSTALL
+
+# Trim exported dependencies to APR libraries only:
+sed -i "/^dependency_libs/{
+     s, -l[^ ']*, ,g;
+     s, -L[^ ']*, ,g;
+     s,%{_libdir}/lib[^a][^p][^r][^ ']*.la, ,g;
+     }"  $RPM_BUILD_ROOT%{_libdir}/*.la
+
+# Install bash completion
+install -Dpm 644 tools/client-side/bash_completion \
+        $RPM_BUILD_ROOT%{_datadir}/bash-completion/completions/svn
+for comp in svnadmin svndumpfilter svnlook svnsync svnversion; do
+    ln -s svn \
+        $RPM_BUILD_ROOT%{_datadir}/bash-completion/completions/${comp}
+done
+
+# Install svnserve bits
+mkdir -p %{buildroot}%{_unitdir} \
+      %{buildroot}/run/svnserve \
+      %{buildroot}%{_prefix}/lib/tmpfiles.d \
+      %{buildroot}%{_sysconfdir}/sysconfig
+
+install -p -m 644 $RPM_SOURCE_DIR/svnserve.service \
+        %{buildroot}%{_unitdir}/svnserve.service
+install -p -m 644 $RPM_SOURCE_DIR/svnserve.tmpfiles \
+        %{buildroot}%{_prefix}/lib/tmpfiles.d/svnserve.conf
+install -p -m 644 $RPM_SOURCE_DIR/svnserve.sysconf \
+        %{buildroot}%{_sysconfdir}/sysconfig/svnserve
+
+# Install tools ex diff*, x509-parser
+make install-tools DESTDIR=$RPM_BUILD_ROOT toolsdir=%{_bindir}
+rm -f $RPM_BUILD_ROOT%{_bindir}/diff* $RPM_BUILD_ROOT%{_bindir}/x509-parser
+
+# Don't add spurious dependency in libserf-devel
+sed -i "/^Requires.private/s, serf-1, ," \
+    $RPM_BUILD_ROOT%{_datadir}/pkgconfig/libsvn_ra_serf.pc
+
+# Make svnauthz-validate a symlink
+rm $RPM_BUILD_ROOT%{_bindir}/svnauthz-validate
+ln -s svnauthz $RPM_BUILD_ROOT%{_bindir}/svnauthz-validate
+
+for f in svn-populate-node-origins-index fsfs-access-map \
+    svnauthz svnauthz-validate svnmucc svnraisetreeconflict svnbench \
+    svn-mergeinfo-normalizer fsfs-stats svnmover svnconflict; do
+    echo %{_bindir}/$f
+    if test -f $RPM_BUILD_ROOT%{_mandir}/man?/${f}.*; then
+       echo %{_mandir}/man?/${f}.*
+    fi
+done | tee tools.files | sed 's/^/%%exclude /' > exclude.tools.files
+
+%find_lang %{name}
+
+cat %{name}.lang exclude.tools.files >> %{name}.files
+
+%if %{with tests}
+%check
+export LANG=C LC_ALL=C
+export LD_LIBRARY_PATH=$RPM_BUILD_ROOT%{_libdir}
+export MALLOC_PERTURB_=171 MALLOC_CHECK_=3
+export LIBC_FATAL_STDERR_=1
+export PYTHON=%{svn_python}
+if ! make check CLEANUP=yes; then
+   : Test suite failure.
+   cat fails.log
+   exit 1
+fi
+if ! make check-swig-pl check-swig-rb; then
+   : Swig test failure.
+   exit 1
+fi
+%if %{with pyswig}
+if ! make check-swig-py; then
+   : Python swig test failure.
+   exit 1
+fi
+%endif
+# check-swig-rb omitted: it runs svnserve
+%if %{with_java}
+make check-javahl
+%endif
+%endif
+
+%post
+%systemd_post svnserve.service
+
+%preun
+%systemd_preun svnserve.service
+
+%postun
+%systemd_postun_with_restart svnserve.service
+
+%post libs -p /sbin/ldconfig
+
+%postun libs -p /sbin/ldconfig
+
+%post perl -p /sbin/ldconfig
+
+%postun perl -p /sbin/ldconfig
+
+%post ruby -p /sbin/ldconfig
+
+%postun ruby -p /sbin/ldconfig
+
+%if %{with_java}
+%post javahl -p /sbin/ldconfig
+
+%postun javahl -p /sbin/ldconfig
+%endif
+
+%files -f %{name}.files
+%{!?_licensedir:%global license %%doc}
+%license LICENSE NOTICE
+%doc BUGS COMMITTERS INSTALL README CHANGES
+%doc mod_authz_svn-INSTALL
+%{_bindir}/*
+%{_mandir}/man*/*
+%{_datadir}/emacs/site-lisp/*.el
+%{_datadir}/xemacs/site-packages/lisp/*.el
+%{_datadir}/bash-completion/
+%config(noreplace) %{_sysconfdir}/sysconfig/svnserve
+%dir %{_sysconfdir}/subversion
+%exclude %{_mandir}/man*/*::*
+%{_unitdir}/*.service
+%attr(0700,root,root) %dir /run/svnserve
+%{_prefix}/lib/tmpfiles.d/svnserve.conf
+
+%files tools -f tools.files
+%doc tools/hook-scripts tools/backup tools/bdb tools/examples tools/xslt
+
+%files libs
+%{!?_licensedir:%global license %%doc}
+%license LICENSE NOTICE
+%{_libdir}/libsvn*.so.*
+%exclude %{_libdir}/libsvn_swig_perl*
+%exclude %{_libdir}/libsvn_swig_ruby*
+%if %{with_java}
+%{_libdir}/libsvnjavahl-*.so
+%endif
+%if %{with kwallet}
+%exclude %{_libdir}/libsvn_auth_kwallet*
+%endif
+%exclude %{_libdir}/libsvn_auth_gnome*
+
+%if %{with python2} && %{with pyswig}
+%files -n python2-subversion
+%{python2_sitearch}/svn
+%{python2_sitearch}/libsvn
+%endif
+
+%if %{with python3} && %{with pyswig}
+%files -n python3-subversion
+%{python3_sitearch}/svn
+%{python3_sitearch}/libsvn
+%endif
+
+%files gnome
+%{_libdir}/libsvn_auth_gnome_keyring-*.so.*
+
+%if %{with kwallet}
+%files kde
+%{_libdir}/libsvn_auth_kwallet-*.so.*
+%endif
+
+%files devel
+%{_includedir}/subversion-1
+%{_libdir}/libsvn*.*a
+%{_libdir}/libsvn*.so
+%{_datadir}/pkgconfig/*.pc
+%exclude %{_libdir}/libsvn_swig_perl*
+%exclude %{_libdir}/libsvnjavahl-*.so
+
+%files -n mod_dav_svn
+%config(noreplace) %{_httpd_modconfdir}/*.conf
+%{_libdir}/httpd/modules/mod_*.so
+%if "%{_httpd_modconfdir}" != "%{_httpd_confdir}"
+%doc example.conf
+%endif
+
+%files perl
+%{perl_vendorarch}/auto/SVN
+%{perl_vendorarch}/SVN
+%{_libdir}/libsvn_swig_perl*
+%{_mandir}/man*/*::*
+
+%files ruby
+%{_libdir}/libsvn_swig_ruby*
+%{ruby_vendorarchdir}/svn
+
+%if %{with_java}
+%files javahl
+%{_javadir}/svn-javahl.jar
+%endif
+
+%changelog
+* Wed May 04 2022 Richard Lescak <rlescak@gmail.com> - 1.10.2-5
+- add security fix for CVE-2022-24070
+
+* Wed Feb 10 2021 Joe Orton <jorton@redhat.com> - 1.10.2-4
+- add security fix for CVE-2020-17525
+
+* Mon May 18 2020 Joe Orton <jorton@redhat.com> - 1.10.2-3
+- add security fix for CVE-2018-11782
+
+* Thu Aug 01 2019 Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
+- Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
+  unauthenticated denial-of-service in subversion svnserve
+
+* Fri Jul 20 2018 Joe Orton <jorton@redhat.com> - 1.10.2-1
+- update to 1.10.2 (#1603197)
+
+* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.10.0-10
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Fri Jun 29 2018 Jitka Plesnikova <jplesnik@redhat.com> - 1.10.0-9
+- Perl 5.28 rebuild
+
+* Thu Jun 28 2018 Joe Orton <jorton@redhat.com> - 1.10.0-8
+- fix test suite invocation
+
+* Thu Jun 28 2018 Joe Orton <jorton@redhat.com> - 1.10.0-7
+- switch build conditional to disable only python bindings
+
+* Thu May  3 2018 Joe Orton <jorton@redhat.com> - 1.10.0-6
+- really disable Berkeley DB support if required by bcond
+- add build conditional to disable swig binding subpackages
+
+* Tue May  1 2018 Joe Orton <jorton@redhat.com> - 1.10.0-5
+- remove build and -devel deps on libgnome-keyring-devel
+
+* Tue May  1 2018 Joe Orton <jorton@redhat.com> - 1.10.0-4
+- drop -devel dep on libserf-devel
+
+* Tue Apr 24 2018 Joe Orton <jorton@redhat.com> - 1.10.0-3
+- add bdb, tests as build conditional
+
+* Tue Apr 17 2018 Joe Orton <jorton@redhat.com> - 1.10.0-2
+- move new tools to -tools
+
+* Mon Apr 16 2018 Joe Orton <jorton@redhat.com> - 1.10.0-1
+- update to 1.10.0 (#1566493)
+
+* Tue Mar 27 2018 Joe Orton <jorton@redhat.com> - 1.9.7-7
+- add build conditionals for python2, python3 and kwallet
+
+* Thu Feb  8 2018 Joe Orton <jorton@redhat.com> - 1.9.7-6
+- force use of Python2 in test suite
+
+* Thu Feb 01 2018 Iryna Shcherbina <ishcherb@redhat.com> - 1.9.7-5
+- Update Python 2 dependency declarations to new packaging standards
+  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
+
+* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1.9.7-4
+- Rebuilt for switch to libxcrypt
+
+* Fri Jan 05 2018 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.7-3
+- F-28: rebuild for ruby25
+
+* Sun Dec 17 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.9.7-2
+- Python 2 binary package renamed to python2-subversion
+  See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
+
+* Fri Aug 11 2017 Joe Orton <jorton@redhat.com> - 1.9.7-1
+- update to 1.9.7 (CVE-2017-9800, #1480402)
+- add Documentation= to svnserve.service
+
+* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.6-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.6-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Mon Jul 17 2017 Joe Orton <jorton@redhat.com> - 1.9.6-2
+- move javahl .so to -libs (#1469158)
+
+* Thu Jul  6 2017 Joe Orton <jorton@redhat.com> - 1.9.6-1
+- update to 1.9.6 (#1467890)
+- update to latest upstream psvn.el
+- move libsvnjavahl to -libs, build -javahl noarch
+- fix javahl Requires
+
+* Sun Jun 04 2017 Jitka Plesnikova <jplesnik@redhat.com> - 1.9.5-4
+- Perl 5.26 rebuild
+
+* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.5-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Fri Jan 13 2017 Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.5-2
+- F-26: rebuild for ruby24
+
+* Mon Jan  2 2017 Joe Orton <jorton@redhat.com> - 1.9.5-1
+- update to 1.9.5 (#1400040, CVE-2016-8734)
+
+* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.4-4
+- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
+
+* Wed May 25 2016 Jitka Plesnikova <jplesnik@redhat.com> - 1.9.4-3
+- Enable tests
+- Revert one of Ruby 2.2 fixes
+
+* Tue May 17 2016 Jitka Plesnikova <jplesnik@redhat.com> - 1.9.4-2
+- Perl 5.24 rebuild
+
+* Sun May  8 2016 Peter Robinson <pbrobinson@fedoraproject.org> 1.9.4-1
+- Update to 1.9.4 (#1331222) CVE-2016-2167 CVE-2016-2168
+- Move tools in docs to tools subpackage (rhbz 1171757 1199761)
+- Disable make check to work around FTBFS
+
+* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.3-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Thu Jan 21 2016 Joe Orton <jorton@redhat.com> - 1.9.3-2
+- rebuild for Ruby 2.3
+
+* Tue Dec 15 2015 Joe Orton <jorton@redhat.com> - 1.9.3-1
+- update to 1.9.3 (#1291683)
+- use private /tmp in svnserve.service
+
+* Thu Sep 24 2015 Joe Orton <jorton@redhat.com> - 1.9.2-1
+- update to 1.9.2 (#1265447)
+
+* Mon Sep 14 2015 Joe Orton <jorton@redhat.com> - 1.9.1-1
+- update to 1.9.1 (#1259099)
+
+* Mon Aug 24 2015 Joe Orton <jorton@redhat.com> - 1.9.0-1
+- update to 1.9.0 (#1207835)
+- package pkgconfig files
+
+* Tue Jul 14 2015 Joe Orton <jorton@redhat.com> - 1.8.13-7
+- move svnauthz to -tools; make svnauthz-validate a symlink
+- move svnmucc man page to -tools
+- restore dep on systemd (#1183873)
+
+* Fri Jul 10 2015 Joe Orton <jorton@redhat.com> - 1.8.13-6
+- rebuild with tests enabled
+
+* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.13-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Mon Jun 15 2015 Ville Skyttä <ville.skytta@iki.fi> - 1.8.13-4
+- Own bash-completion dirs not owned by anything in dep chain
+
+* Sat Jun 06 2015 Jitka Plesnikova <jplesnik@redhat.com> - 1.8.13-3
+- Perl 5.22 rebuild
+
+* Tue Apr 21 2015 Peter Robinson <pbrobinson@fedoraproject.org> 1.8.13-2
+- Disable tests to fix swig test issues
+
+* Wed Apr 08 2015 <vondruch@redhat.com> - 1.8.13-1
+- Fix Ruby's test suite.
+
+* Tue Apr  7 2015 Joe Orton <jorton@redhat.com> - 1.8.13-1
+- update to 1.8.13 (#1207835)
+- attempt to patch around SWIG issues
+
+* Tue Dec 16 2014 Joe Orton <jorton@redhat.com> - 1.8.11-1
+- update to 1.8.11 (#1174521)
+- require newer libserf (#1155670)
+
+* Tue Sep 23 2014 Joe Orton <jorton@redhat.com> - 1.8.10-6
+- prevents assert()ions in library code (#1058693)
+
+* Tue Sep 23 2014 Joe Orton <jorton@redhat.com> - 1.8.10-5
+- drop sysv conversion trigger (#1133786)
+
+* Tue Sep 23 2014 Joe Orton <jorton@redhat.com> - 1.8.10-4
+- move svn-bench, fsfs-* to -tools
+
+* Tue Aug 26 2014 Jitka Plesnikova <jplesnik@redhat.com> - 1.8.10-3
+- Perl 5.20 rebuild
+
+* Thu Aug 21 2014 Kevin Fenzi <kevin@scrye.com> - 1.8.10-2
+- Rebuild for rpm bug 1131960
+
+* Mon Aug 18 2014 Joe Orton <jorton@redhat.com> - 1.8.10-1
+- update to 1.8.10 (#1129100, #1128884, #1125800)
+
+* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.9-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.9-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Wed May 28 2014 Joe Orton <jorton@redhat.com> - 1.8.9-1
+- update to 1.8.9 (#1100779)
+
+* Tue Apr 29 2014 Vít Ondruch <vondruch@redhat.com> - 1.8.8-3
+- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1
+
+* Tue Apr 22 2014 Joe Orton <jorton@redhat.com> - 1.8.8-2
+- require minitest 4 to fix tests for Ruby bindings (#1089252)
+
+* Fri Feb 28 2014 Joe Orton <jorton@redhat.com> - 1.8.8-1
+- update to 1.8.8
+
+* Thu Jan 23 2014 Joe Orton <jorton@redhat.com> - 1.8.5-4
+- fix _httpd_mmn expansion in absence of httpd-devel
+
+* Mon Jan  6 2014 Joe Orton <jorton@redhat.com> - 1.8.5-3
+- fix permissions of /run/svnserve (#1048422)
+
+* Tue Dec 10 2013 Joe Orton <jorton@redhat.com> - 1.8.5-2
+- don't drop -Wall when building swig Perl bindings (#1037341)
+
+* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 1.8.5-1
+- update to 1.8.5 (#1034130)
+- add fix for wc-queries-test breakage (h/t Andreas Stieger, r1542774)
+
+* Mon Nov 18 2013 Joe Orton <jorton@redhat.com> - 1.8.4-2
+- add fix for ppc breakage (Andreas Stieger, #985582)
+
+* Tue Oct 29 2013 Joe Orton <jorton@redhat.com> - 1.8.4-1
+- update to 1.8.4
+
+* Tue Sep  3 2013 Joe Orton <jorton@redhat.com> - 1.8.3-1
+- update to 1.8.3
+- move bash completions out of /etc (#922993)
+
+* Tue Aug 06 2013 Adam Williamson <awilliam@redhat.com> - 1.8.1-2
+- rebuild for perl 5.18 (again; 1.8.1-1 beat out 1.8.0-2)
+
+* Thu Jul 25 2013 Joe Orton <jorton@redhat.com> - 1.8.1-1
+- update to 1.8.1
+
+* Fri Jul 19 2013 Joe Orton <jorton@redhat.com> - 1.8.0-3
+- temporarily ignore test suite failures on ppc* (#985582)
+
+* Wed Jul 17 2013 Petr Pisar <ppisar@redhat.com> - 1.8.0-2
+- Perl 5.18 rebuild
+
+* Tue Jun 18 2013 Joe Orton <jorton@redhat.com> - 1.8.0-1
+- update to 1.8.0; switch to serf
+- use full relro in mod_dav_svn build (#973694)
+
+* Mon Jun  3 2013 Joe Orton <jorton@redhat.com> - 1.7.10-1
+- update to 1.7.10 (#970014)
+- fix aarch64 build issues (Dennis Gilmore, #926578)
+
+* Thu May  9 2013 Joe Orton <jorton@redhat.com> - 1.7.9-3
+- fix spurious failures in ruby test suite (upstream r1327373)
+
+* Thu May  9 2013 Joe Orton <jorton@redhat.com> - 1.7.9-2
+- try harder to avoid svnserve bind failures in ruby binding tests
+- enable verbose output for ruby binding tests
+
+* Tue Apr  9 2013 Joe Orton <jorton@redhat.com> - 1.7.9-1
+- update to 1.7.9
+
+* Wed Mar 27 2013 Vít Ondruch <vondruch@redhat.com> - 1.7.8-6
+- Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
+- Drop Ruby version checks from configuration script.
+- Fix and enable Ruby test suite.
+
+* Thu Mar 14 2013 Joe Orton <jorton@redhat.com> - 1.7.8-5
+- drop specific dep on ruby(abi)
+
+* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.8-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
+
+* Tue Jan  8 2013 Joe Orton <jorton@redhat.com> - 1.7.8-3
+- update to latest psvn.el
+
+* Tue Jan  8 2013 Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.8-2
+- Scriptlets replaced with new systemd macros (#850410)
+
+* Fri Jan  4 2013 Joe Orton <jorton@redhat.com> - 1.7.8-1
+- update to 1.7.8
+
+* Thu Oct 11 2012 Joe Orton <jorton@redhat.com> - 1.7.7-1
+- update to 1.7.7
+
+* Fri Aug 17 2012 Joe Orton <jorton@redhat.com> - 1.7.6-1
+- update to 1.7.6
+
+* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.5-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Mon Jul 16 2012 Joe Orton <jorton@redhat.com> - 1.7.5-5
+- switch svnserve pidfile to use /run, use /usr/lib/tmpfiles.d (#840195)
+
+* Thu Jun 28 2012 Petr Pisar <ppisar@redhat.com> - 1.7.5-4
+- Perl 5.16 rebuild
+
+* Mon Jun 18 2012 Dan Horák <dan[at]danny.cz - 1.7.5-3
+- fix build with recent gcc 4.7 (svn rev 1345740)
+
+* Fri Jun 08 2012 Petr Pisar <ppisar@redhat.com> - 1.7.5-2
+- Perl 5.16 rebuild
+
+* Tue May 22 2012 Joe Orton <jorton@redhat.com> - 1.7.5-1
+- update to 1.7.5
+
+* Tue Apr 24 2012 Joe Orton <jorton@redhat.com> - 1.7.4-6
+- drop strict sqlite version requirement (#815396)
+
+* Mon Apr 23 2012 Joe Orton <jorton@redhat.com> - 1.7.4-5
+- switch to libdb-devel (#814090)
+
+* Thu Apr 19 2012 Joe Orton <jorton@redhat.com> - 1.7.4-4
+- adapt for conf.modules.d with httpd 2.4
+- add possible workaround for kwallet crasher (#810861)
+
+* Fri Mar 30 2012 Joe Orton <jorton@redhat.com> - 1.7.4-3
+- re-enable test suite
+
+* Fri Mar 30 2012 Joe Orton <jorton@redhat.com> - 1.7.4-2
+- fix build with httpd 2.4
+
+* Mon Mar 12 2012 Joe Orton <jorton@redhat.com> - 1.7.4-1
+- update to 1.7.4
+- fix build with httpd 2.4
+
+* Thu Mar  1 2012 Joe Orton <jorton@redhat.com> - 1.7.3-7
+- re-enable kwallet (#791031)
+
+* Wed Feb 29 2012 Joe Orton <jorton@redhat.com> - 1.7.3-6
+- update psvn
+
+* Wed Feb 29 2012 Joe Orton <jorton@redhat.com> - 1.7.3-5
+- add tools subpackage (#648015)
+
+* Tue Feb 28 2012 Joe Orton <jorton@redhat.com> - 1.7.3-4
+- trim contents of doc dic (#746433)
+
+* Tue Feb 28 2012 Joe Orton <jorton@redhat.com> - 1.7.3-3
+- re-enable test suite
+
+* Tue Feb 28 2012 Joe Orton <jorton@redhat.com> - 1.7.3-2
+- add upstream test suite fixes for APR hash change (r1293602, r1293811)
+- use ruby vendorlib directory (#798203)
+- convert svnserve to systemd (#754074)
+
+* Mon Feb 13 2012 Joe Orton <jorton@redhat.com> - 1.7.3-1
+- update to 1.7.3
+- ship, enable mod_dontdothat
+
+* Mon Feb 13 2012 Joe Orton <jorton@redhat.com> - 1.7.2-2
+- require ruby 1.9.1 abi
+
+* Thu Feb  9 2012 Joe Orton <jorton@redhat.com> - 1.7.2-1
+- update to 1.7.2
+- add Vincent Batts' Ruby 1.9 fixes from dev@
+
+* Sun Feb  5 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 1.7.1-3
+- fix gnome-keyring build deps 
+
+* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Mon Nov 28 2011 Joe Orton <jorton@redhat.com> - 1.7.1-1
+- update to 1.7.1
+- (temporarily) disable failing kwallet support
+
+* Sun Nov 27 2011 Ville Skyttä <ville.skytta@iki.fi> - 1.7.0-3
+- Build with libmagic support.
+
+* Sat Oct 15 2011 Ville Skyttä <ville.skytta@iki.fi> - 1.7.0-2
+- Fix apr Conflicts syntax in -libs.
+- Fix obsolete chown syntax in subversion.conf.
+- Fix use of spaces vs tabs in specfile.
+
+* Wed Oct 12 2011 Joe Orton <jorton@redhat.com> - 1.7.0-1
+- update to 1.7.0
+- drop svn2cl (no longer shipped in upstream tarball)
				`@ -0,0 +1 @@`
				`bc52ef2e671f821998ac9a5f7ebecbbcaaef83b8 SOURCES/subversion-1.10.2.tar.bz2`