• https://www.mirrorservice.org/sites/ftp.apache.org/subversion/ (Download)
• https://mirrors.dotsrc.org/apache/subversion/ (Download)
• https://downloads.apache.org/subversion/ (Download)
• https://archive.apache.org/dist/subversion/ (Download)
• http://ftp.meisei-u.ac.jp/mirror/apache/dist/subversion/ (Download)
• https://apache.belnet.be/subversion/ (Download)

• maintainer_mode
• no_bindings
• no_ap2
• no_perl
• no_python
• no_ruby
• no_gnome-keyring

• (2019-11-06) Updated to version: subversion-1.13.0
• (2019-07-24) Updated to version: subversion-1.12.2
• (2019-04-28) Updated to version: subversion-1.12.0
• (2019-01-11) Updated to version: subversion-1.11.1
• (2018-11-24) Updated to version: subversion-1.11.0
• (2018-10-16) Updated to version: subversion-1.10.3
• (2018-09-07) Updated to version: subversion-1.10.2
• (2018-04-24) Updated to version: subversion-1.10.0
• (2017-08-11) Updated to version: subversion-1.9.7
• (2017-07-06) Updated to version: subversion-1.9.6

Log message:
Move bash completions in their proper directory.
Regen all PLISTs while here.
ok stsp@ (maintainer)

Log message:
Make use of "find -exec {} +" (which is POSIX) and "find -delete"
(which is not) throughout the ports Makefiles.
* Replace find|xargs with find -exec {} +
* Replace -exec {} \; with -exec {} + if applicable.
* Use the -delete operator to remove files and empty directories.
* Combine and tweak some find(1) invocations while here.
ok kn@ rsadowski@ espie@

Log message:
Re-enable support for storing plaintext passwords in Subversion.
Subversion has disabled saving of plaintext passwords by default
and a compile-time option is now required to enable this feature.
OpenBSD has always disabled this feature at run-time in /etc/subversion
and left users the choice to enable it in their configuration files.
Unfortunately, the alternative password stores, gnome-keyring and
KDE wallet, do not work in non-X11 environments. And the gpg-agent
password store is not persistent. So there is no better solution
for unattended SVN password authentication in non-X11 environments
on OpenBSD, or pretty much any UNIX-like system for that matter.
ok sthen@

Log message:
Update to Subversion 1.13.0
ok sthen@

Log message:
Update devel/subversion to 1.12.2.

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
Update gettext to 0.20.1.
Follow the upstream recommendations for packagers and switch to
multi-packages:
devel/gettext       -> devel/gettext,-runtime
devel/gettext-tools -> devel/gettext,-tools
(new)                  devel/gettext,-textstyle

Log message:
Update devel/subversion to 1.12.0.
ok sthen@

Log message:
bump REVISION; apache-httpd pkgpath change
add missing RDEP on apache-httpd in php-apache packages

Log message:
Update to Apache Subversion 1.11.1 and patch a use-after-free which makes
mod_dav_svn crash on OpenBSD (will also be fixed in next upstream release).

Log message:
Update to Apache Subversion 1.11.0
ok sthen@

Log message:
Switch default ruby version to ruby 2.5.

Log message:
Update to Apache Subversion 1.10.3.

Log message:
Update to Apache Subversion 1.10.2

Log message:
Update Apache Subversion to 1.10.0.
Port of release candidate 1 tested by guenther@ and sthen@ some weeks ago.
Tweaks for earlier diffs + ok sthen@

Log message:
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.
discussed with and OK aja@
OK tb

Log message:
Bump to unbreak packaging:
-@comment lib/ruby/site_ruby/1.8/
-@comment lib/ruby/site_ruby/1.8/x86_64-openbsd/
+@comment lib/ruby/site_ruby/2.3/
+@comment lib/ruby/site_ruby/2.3/x86_64-openbsd/

Log message:
Make subversion's ruby bindings use the default ruby version instead of
ruby 1.8.
OK stsp@

Log message:
For 6.1-stable:
Update to Subversion 1.9.7. Fixes CVE-2017-9800, "Arbitrary code execution on
clients through malicious svn+ssh URLs in svn:externals and svn:sync-from-url"
See https://subversion.apache.org/security/CVE-2017-9800-advisory.txt

Log message:
Update to Subversion 1.9.7. Fixes CVE-2017-9800, "Arbitrary code execution on
clients through malicious svn+ssh URLs in svn:externals and svn:sync-from-url"
See https://subversion.apache.org/security/CVE-2017-9800-advisory.txt

Log message:
For 6.1-stable:
Update to Apache Subversion 1.9.6. Contains a server-side SHA1 collision fix.
Direct update for -stable discussed with danj@ and sthen@ a few days ago.

Log message:
Update to Apache Subversion 1.9.6. Contains a server-side SHA1 collision fix.

Log message:
Tell devel/subversion regress tests to clean up after themselves. Avoids
running out of space in /usr/ports/pobj when running 'make regress' here.

Log message:
For 6.0-stable: Patch CVE-2016-8734.
Already fixed in -current as part of update to Subversion 1.9.5.

Log message:
Update to Apache Subversion 1.9.5.

Log message:
Cope with moving sqlite3 back to ports.

Log message:
sync WANTLIB, svn_fs_x-1

Log message:
add a pseudo flavour to allow building subversion without gnome-keyring, ok stsp

Log message:
fix user and group
from Johan Huldtgren via czarkoff

Log message:
update to subversion 1.9.4
OK sthen@, stsp@

Log message:
add a svnserve rc.d script
ok stsp ajacoutot

Log message:
For 5.9-stable: Add patches for Subversion security bugs CVE-2016-2167
and CVE-2016-2168 which were just released.
ok sthen@ aja@

Log message:
No ports hackathon without a ports commit: Add patches for Subversion
security bugs CVE-2016-2167 and CVE-2016-2168 which were just released.
An update to a newer release of SVN will come later.
ok sthen@ aja@

Log message:
trivial NO_SHARED_ARCHS and PROPERTIES:Mno_shared removal

Log message:
garbage collect CONFIGURE_SHARED

Log message:
Patch CVE-2015-5343 in Apache Subversion for 5.8-stable.

Log message:
Update to Apache Subversion 1.8.15. Fixes CVE-2015-5343.

Log message:
Bump affected ports after change to MODRUBY_WANTLIB
Help from and OK nigel@

Log message:
Patch several problems in devel/subversion for 5.7-stable:
CVE-2015-0202, CVE-2015-0248, CVE-2015-0251, CVE-2015-3187

Log message:
Update to Subversion 1.8.14. Fixes CVE-2015-3184 and CVE-2015-3187.
ok sthen@

Log message:
Bump after apache-http subpackaging.

Log message:
Bump after the recent changes in packaging dbus and dconf.

Log message:
5.6-stable patches for Apache Subversion CVE-2015-0202, CVE-2015-0248,
and CVS-2015-0251. test + ok jasper

Log message:
Update to Apache Subversion 1.8.13.
Fixes CVE-2015-0202, CVE-2015-0248, and CVE-2015-0251.
-stable patches will happen within the next few days.

Log message:
fold lib-only PFRAG.shared into PLIST, and some related cleanups

Log message:
remove accidentally added bogus files

Log message:
For 5.6-stable: Add Subversion patches for CVE-2014-3580 and CVE-2014-8108,
two remotely triggerable crashes in mod_dav_svn.

Log message:
Update to Subversion 1.8.11.
Fixes CVE-2014-3580 and CVE-2014-8108 (mod_dav_svn DoS in both cases).
Stop compiling in libmagic support since it is considered unsafe.

Log message:
missing bump for ruby directory change

Log message:
Bump after change to remove OpenBSD version from ruby SITEARCHDIR,
and use new MODRUBY_SITEDIR and MODRUBY_SITEARCHDIR variables in
PLIST.
OK landry@, jcs@

Log message:
bump revision for plist changes 4.9 -> 5.0

Log message:
bump after default python version switch

Log message:
Apply patches for CVE-2011-0715, CVE-2011-1752, CVE-2011-1783,
and CVE-2011-1921 to 4.9-stable branch.
ok landry jasper sthen

Log message:
Update to 1.6.17. Fixes CVE-2011-1752, CVE-2011-1783, and CVE-2011-1921.
ok landry jasper sthen

Log message:
Use the proper autoconf version for AUTOCONF_VERSION. From Brad.

Log message:
fix WANTLIB for -ruby subpackage; ok jasper

Log message:
SECURITY FIX (CVE-2011-0715)
http://subversion.apache.org/security/CVE-2011-0715-advisory.txt
ok jasper landry

Log message:
SECURITY FIX: Update to 1.6.16 (fixes CVE-2011-0715)
ok jasper landry

Log message:
bump revision for plist changes 4.8 -> 4.9

Log message:
Backport fixes for
bugs which can cause client-initiated crashes on the server.
Any server is affected, no matter which protocol (http[s]://,
svn[+ssh]://) is used.
original diff from stsp@.
ok sthen@

Log message:
newer depends with >=

Log message:
Update to 1.6.15. This release contains fixes for server-side crashes
which can be triggered by clients. Please update your servers (it doesn't
matter whether you use svnserve or mod_dav_svn, you need to update).
A corresponding update for -stable ports will follow.
ok jasper sthen dcoppa

Log message:
REVISION bump all ruby ports due to a change in the pkgspec.
Previously, we were using ruby->=1.8,<=1.9, instead of
ruby->=1.8,<1.9.  While this wouldn't cause an issue, since
our ruby-1.9.2 package isn't included in ruby->=1.8,<=1.9,
it's still wrong and should be fixed.  This also fixes the
following minor issues:
Switch from using FLAVOR to MODRUBY_FLAVOR for *_DEPENDS.
Currently we don't have a ruby port that uses FLAVORs that
would differ from MODRUBY_FLAVOR, but it's possible we will
in the future.
Switch from BASE_PKGPATH to BUILD_PKGPATH in a few cases in
REGRESS_DEPENDS.  This probably is not strictly necessary, but
BUILD_PKGPATH is used in more cases, so it is good for
consistency.
Switch to new style *_DEPENDS, with the version specification
at the end.  The remaining cases where this is not done is
because a specific version is used.
Some FULLPKGNAME added to REGRESS_DEPENDS, to make sure that if
the old version is installed when you run a regress test, it
will install the new version first.
Some conversion of spaces to tabs for consistency.
OK landry@

Log message:
Switch MODRUBY_REV to MODRUBY_LIBREV in PLIST.
OK landry@

Log message:
move depends to new style

Log message:
new WANTLIB. fix-up a bit.

Log message:
Handle the rest of the fallout from the splitting of MODRUBY_LIB_DEPENDS
into MODRUBY_WANTLIB and using CONFIGURE_STYLE = ruby gem ext.  Use the
lang/ruby module for all dependent ports, setting
MODRUBY_{BUILD,RUN}DEP=No if necessary.
ok landry, phessler, sthen

Log message:
Add MODPY_WANTLIB, adjust MODPY_LIB_DEPENDS to new-style LIB_DEPENDS,
update all ports to match. Plists don't change -> no bump.
Looks ok to jasper.

Log message:
USE_GROFF=Yes

Log message:
Update to 1.6.13.  Tested with latest neon/openssl by sthen, thanks!
Minor housekeeping in MESSAGE files for ap2 subpackage while here.
ok landry, jasper, sthen

Log message:
Unbreak after the libgnome-keyring upgrade.

Log message:
Handle changes caused by splitting the ruby port and bump
OK jcs@, landry@, jasper@, sthen@

Log message:
regenerate patches

Log message:
bumps

Log message:
bump PKGNAME for PLIST changes 4.7 -> 4.8

Log message:
No need to set MODPY_VERSION here, use the default one.
ok stsp@ (maintainer)

Log message:
Update to 1.6.12.
diff was quietly sitting on ports@ for a week

Log message:
Add libtool to BUILD_DEPENDS as autogen.sh checks for libtoolize.
Builds fine with ports libtool otherwise..

Log message:
Add MODGNU_AUTOCONF_DEPENDS to BUILD_DEPENDS. Fixes build if autoconf
isn't already installed. The dependency on autoconf used to be
implicit until CONFIGURE_STYLE was switched from autoconf to gnu
during the 1.6.11 update.
From Daniel Dickman.

Log message:
Update to 1.6.11 and update home page URL.
Also change the configure style to 'gnu' instead of 'autoconf'
to avoid running autoconf twice (autoconf is run by the autogen.sh
script in the pre-configure target). landy@ says this fixes the
build on hppa for some reason.
ok aja, landry (for the configure-style bit some time ago)

Log message:
Fix DEPENDS/WANTLIB after recent gnome-keyring split.

Log message:
Missed this in previous gnome-keyring coping.
reminded by stsp@

Log message:
fix FULLPKGPATH

Log message:
bump PKGNAME for PLIST changes 4.6 -> 4.7

Log message:
SECURITY FIX
Resolves CVE-2009-2411
ok stsp@

Log message:
Update to 1.6.6.
ok sthen@

Log message:
- convert gnome-shared-keyring to a true FLAVOR rather than a
pseudo-flavour, it affects the -main package by building with pthread
(we don't want that by default, it affects e.g. svn diff | less).
- roll various PFRAG.shared-foo for the subpackages into PLIST-foo
- add a comment noting that autoconf should be 2.63
- bump PKGNAMEs
ok stsp (maintainer).

Log message:
Update to 1.6.5.
Also:
* Native make now works fine so don't use gmake.
* Disable storing of plaintext passwords for all servers in the system-wide
'servers' config file, instead of disabling storage of all kinds of
passwords in the system-wide 'config' config file.
The new store-plaintext-passwords=no option, which has existed since 1.6.0,
overrides a yes/no prompt which subversion now usually presents before
storing passwords in plaintext. gnome-keyring stores passwords encrypted.
* Update the main DESCR to reflect current reality.
* Add a patch which fixes a broken regression test in the ruby bindings
which accidentally slipped into 1.6.5 release.
* Put the gnome-keyring subpackage into REGRESS_DEPENDS to make
auth-test pass (it loads DSOs at runtime and can't find them if
the gnome-keyring subpackage isn't installed).
Tested on i386 by me and alek@, on i386/amd64 by steven@,
and on sparc64 by Edd Barrett.
ok steven@

Log message:
SECURITY FIX
Resolves CVE-2009-2411
from Stefan Sperling
ok robert@

Log message:
respect MODRUBY_LIB_DEPENDS, no plist change
ok sthen@

Log message:
security update to 1.6.4
http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt
from Stefan Sperling (maintainer)

Log message:
bump PKGNAME for PLIST changes 4.5 -> 4.6

Log message:
Update to 1.6.1.
Help by ajacoutot@ and steven@

Log message:
Bump for python deps.

Log message:
Woops, forgot to reset patch level for ruby subpackage during update to 1.5.6.

Log message:
Update to 1.5.6.
ok steven@

Log message:
bump PKGNAME for PLIST changes 4.4 -> 4.5

Log message:
update to 1.5.5
also,
- add various utilities from contrib/ and tools/
- update svn2cl to version 0.11 (has a fix for OpenBSD ksh)
- install SVN::Fs man page
from maintainer Stefan Sperling, tweaked a bit by me

Log message:
fix build with no_bindings flavor
from maintainer Stefan Sperling

Log message:
- fix WANTLIB after neon update

Log message:
add some guidance to enable/disable the svn modules for apache2
slightly tweaked diff from Brad Walker, also reminded by Stefan Sperling.

Log message:
update to 1.5.4
joint work with new maintainer Stefan Sperling
and Brad Walker (me at bradwalker.com)
tested by several

Log message:
bump p5-SVN so that it gets rebuilt with perl 5.10

Log message:
bump PKGNAME for PLIST changes 4.3 -> 4.4

Log message:
bump PKGNAMEs after lang/ruby module change.
Fix CATEGORIES in rdt eclipse plugin.
in subversion, only bump subpackages that use lang/ruby module.

Log message:
Adjust WANTLIB after net/neon switched from libxml2 to system expat.
Noticed by Markus Lude.

Log message:
bump PKGNAME for PLIST changes 4.2 -> 4.3

Log message:
do the same thing with REGRESS_FLAGS as FAKE_FLAGS

Log message:
tweak FAKE_FLAGS semantics to saner defaults.

Log message:
make this use the python module, and switch to python 2.5

Log message:
bump PKGNAME after python version switch

Log message:
Remove quotes surrounding COMMENT*/PERMIT_*/BROKEN

Log message:
bump package name to accommodate OpenBSD 4.1 -> 4.2 change in MODRUBY_ARCH

Log message:
update to subversion 1.4.4
ok kili@, simon@
maintainer timeout

Log message:
Use xenocara expat.

Log message:
mention the -ap2 package here too

Log message:
Add -ap2 subpackage that allows building of mod_dav_svn and
mod_authz_svn, for use with www/apache-httpd (apache2).
>From dlg@, ok steven@, maintainer timeout.

Log message:
base64 distinfo with SHA256

Log message:
note that we're changing the default for auth credential caching in our
package.
steven requested i add ruby to the list of subpackages while im here.
ok robert@

Log message:
by default subversion caches passwords in cleartext under ~/.subversion.
the doco claims this is safe cos the directory has extremely restricted
permissions, but noone i know agrees with this or feels safe. this change
installs a config under /etc/subversion/config that disables this
behaviour.
discussed with pval@ ckuethe@ ok robert@ sturm@ ajacoutot@

Log message:
bump PKGNAME due to PLIST changes after 4.0 -> 4.1
"feel free to bump whatever is needed" espie@

Log message:
maintenance update to subversion 1.4.3
tested/ok simon@, maintainer timeout

Log message:
fix a type (RUB_DEPENDS->RUN_DEPENDS) and remove some whitespaces
at the end of lines; bump PKGNAME because of the dependency change;
noticed by dlg@

Log message:
update to subversion 1.4.2
maintainer didn't have time
also tested by simon.

Log message:
make only the ruby bindings depend on ruby.
pointed out by sturm@

Log message:
build ruby bindings and put them in their own subpackage.
ok steven@

Log message:
new MULTI_PACKAGES

Log message:
update to subversion 1.4.0
for details, read http://subversion.tigris.org/svn_1.4_releasenotes.html
from maintainer Sigfred Haversen <bsdlist at mumak.com>
go ahead pval

Log message:
zap unneeded 0.0

Log message:
The following diff removes a call to utf_initialize() used in Core.pm by
the swig-generated perl modules, which is causing a Segmentation Fault,
as reported in PR #5071 .
ok naddy@ , Sigfred Haversen

Log message:
new libspecs

Log message:
Update to 1.3.2; from Sigfred Haversen <bsdlist@mumak.com>

Log message:
switch to python 2.4 and bump py-subversion PKGNAME.

Log message:
update to subversion 1.3.1
enable python regression tests
from maintainer Sigfred Haversen
ok alek@

Log message:
Update to 1.3.0
>From Sigfred Haversen <bsdlist@mumak.com>
ok steven@

Log message:
remove old libtool patch
noticed by aanriot@

Log message:
- pass MAKE_ENV and MAKE_FLAGS/FAKE_FLAGS when calling make in
post-build, post-install and post-regress targets.
- SHARED_LIBS (which definitely requires the above...)

Log message:
work around around a bug on alpha (in binutils?), where some relocations
end up in .rodata
solution from kurt@, closes ports/4569

Log message:
remove bullshit BROKEN on alpha -- fix it instead!!!

Log message:
Mark broken on alpha; svnversion segfaults during fake;
from Michael Knudsen

Log message:
- USE_LIBTOOL
- Bump PKGNAME
>From Sigfred Haversen <bsdlist@mumak.com> (MAINTAINER)

Log message:
Update to 1.2.3
>From Sigfred Haversen <bsdlist@mumak.com> (MAINTAINER)

Log message:
Fix a buglet in bsd.port.mk where the PSEUDO_FLAVORS get encoded into
the FULLPKGPATH, thus providing changes to packing-lists which shouldn't
happen, and making update more difficult.
Accordingly, bump all pkgnames with PSEUDO_FLAVORS, and provide an
update @pkgpath for the bug for most of them (left out the ones with 3
or 4 pseudo flavors for space constraints...)

Log message:
Update to 1.2.1
>From steven mestdagh <steven.mestdagh@esat.kuleuven.be>
ok Sigfred Haversen <bsdlist@mumak.com> (MAINTAINER)

Log message:
Fix WANTLIB marker
Problem spotted by Sigfred Haversen <bsdlist@mumak.com>

Log message:
Update to 1.2.0
>From Sigfred Haversen <bsdlist@mumak.com> (MAINTAINER)
ok msf@

Log message:
oops, forgot to add swig dependency

Log message:
remove libswig dependencies after updating swig to 1.3.24.
Pointed out by msf@

Log message:
- Update to 1.1.4: http://svn.collab.net/repos/svn/tags/1.1.4/CHANGES
- New maintainer
>From steven mestdagh <steven.mestdagh@esat.kuleuven.ac.be> and
Sigfred Haversen <bsdlist@mumak.com>

Log message:
- Fix WANTLIB marker
- Better *DEPENDS
- Bump PKGNAME
ok naddy@

Log message:
- Update to 1.1.3 (patch from Steven Mestdagh)
- Enable perl regression tests
help & ok msf@

Log message:
SIZE