Hiran CHAUDHURI wrote on Thu, 31 Aug 2017 12:01 +0000: > From: Daniel Shahaf [mailto:d...@daniel.shahaf.name] > >Hiran CHAUDHURI wrote on Mon, 14 Aug 2017 14:25 +0000: > >> I am building subversion from source but always see the output files > >> depend on the system-supplied zlib which is way older than the one I want > >> to use. > > > >I gather you build 1.9.5. > > Confirmed. That is the version I build, based on Apache httpd 2.4.27 and APR > 1.6.2.
1.9.5 has a known security issue (https://subversion.apache.org/security/ -> CVE-2017-9800); you should use 1.9.7 instead. > It seems this helps to set the run path in the executables and > libraries, but I am still trying to figure out whether Subversion was > compiled using the correct libraries. 'svn --version --verbose' prints the build-time and run-time versions of zlib.
