--- - branch: pkgsrc-2015Q4 date: Tue Jan 19 19:05:21 UTC 2016 files: - new: 1.20.6.1 old: '1.20' path: pkgsrc/textproc/py-pygments/Makefile pathrev: pkgsrc/textproc/py-pygments/Makefile@1.20.6.1 type: modified - new: 1.12.2.1 old: '1.12' path: pkgsrc/textproc/py-pygments/distinfo pathrev: pkgsrc/textproc/py-pygments/distinfo@1.12.2.1 type: modified - new: 1.1.2.2 old: '0' path: pkgsrc/textproc/py-pygments/patches/patch-img.py pathrev: pkgsrc/textproc/py-pygments/patches/patch-img.py@1.1.2.2 type: added id: 20160119T190521Z.a0decce96519f33b8f5a218b452499d53f4da184 log: | Pullup ticket #4900 - requested by wiz textproc/py-pygments: security fix Revisions pulled up: - textproc/py-pygments/Makefile 1.21-1.22 - textproc/py-pygments/distinfo 1.13 - textproc/py-pygments/patches/patch-img.py 1.1 --- Module Name: pkgsrc Committed By: wiz Date: Sun Jan 17 14:22:11 UTC 2016 Modified Files: pkgsrc/textproc/py-pygments: Makefile distinfo Added Files: pkgsrc/textproc/py-pygments/patches: patch-img.py Log Message: Fix for code-injection vulnerability (CVE-2015-8557) from upstream. From Rin Okuyama in PR 50661. --- Module Name: pkgsrc Committed By: wiz Date: Sun Jan 17 16:03:13 UTC 2016 Modified Files: pkgsrc/textproc/py-pygments: Makefile Log Message: Comment out py-sphinx build dependency since it introduces a cycle. module: pkgsrc subject: 'CVS commit: [pkgsrc-2015Q4] pkgsrc/textproc/py-pygments' unixtime: '1453230321' user: bsiegert