---
- branch: pkgsrc-2016Q4
  date: Sun Jan 22 18:34:51 UTC 2017
  files:
  - new: 1.9.2.1
    old: '1.9'
    path: pkgsrc/sysutils/py-borgbackup/Makefile
    pathrev: pkgsrc/sysutils/py-borgbackup/Makefile@1.9.2.1
    type: modified
  - new: 1.5.2.1
    old: '1.5'
    path: pkgsrc/sysutils/py-borgbackup/distinfo
    pathrev: pkgsrc/sysutils/py-borgbackup/distinfo@1.5.2.1
    type: modified
  id: 20170122T183451Z.7ca0caccbe2a49ed988b645f125a45f9adef6a6c
  log: "Pullup ticket #5184 - requested by bsiegert\nsysutils/py-borgbackup: security
    update\n\nRevisions pulled up:\n- sysutils/py-borgbackup/Makefile                               1.11\n-
    sysutils/py-borgbackup/distinfo                               1.6\n\n-------------------------------------------------------------------\n
    \  Module Name:    pkgsrc\n   Committed By:   wiz\n   Date:           Thu Jan
    \ 5 16:33:16 UTC 2017\n\n   Modified Files:\n           pkgsrc/sysutils/py-borgbackup:
    Makefile distinfo\n\n   Log Message:\n   Updated py-borgbackup to 1.0.9.\n\n   Version
    1.0.9 (2016-12-20)\n\n   Security fixes:\n\n       A flaw in the cryptographic
    authentication scheme in Borg\n       allowed an attacker to spoof the manifest.
    See Pre-1.0.9 manifest\n       spoofing vulnerability above for the steps you
    should take.\n       borg check: When rebuilding the manifest (which should only
    be\n       needed very rarely) duplicate archive names would be handled\n       on
    a �ｿｽfirst come first serve�ｿｽ basis, allowing an attacker to\n       apparently
    replace archives.\n\n   Bug fixes:\n\n       borg check:\n           rebuild manifest
    if it窶å\x86± corrupted\n           skip corrupted chunks during manifest rebuild\n
    \      fix TypeError in integrity error handler, #1903, #1894\n       fix location
    parser for archives with @ char (regression\n   introduced in 1.0.8), #1930\n
    \      fix wrong duration/timestamps if system clock jumped during a create\n
    \      fix progress display not updating if system clock jumps backwards\n       fix
    checkpoint interval being incorrect if system clock jumps\n\n   Other changes:\n\n
    \      docs:\n           add python3-devel as a dependency for cygwin-based installation\n
    \          clarify extract is relative to current directory\n           FAQ: fix
    link to changelog\n           markup fixes\n       tests:\n           test_get_(cache|keys)_dir:
    clean env state, #1897\n           get back pytest窶å\x86± pretty assertion failures,
    #1938\n       setup.py build_usage:\n           fixed build_usage not processing
    all commands\n           fixed build_usage not generating includes for debug commands\n\n
    \  Version 1.0.9rc1 (2016-11-27)\n\n   Bug fixes:\n\n       files cache: fix determination
    of newest mtime in backup set\n       (which is used in cache cleanup and led
    to wrong �ｿｽA�ｿｽ [added]\n       status for unchanged files in next
    backup), #1860.\n       borg check:\n           fix incorrectly reporting attic
    0.13 and earlier archives as corrupt\n           handle repo w/o objects gracefully
    and also bail out early if\n   repo is completely empty, #1815.\n       fix tox/pybuild
    in 1.0-maint\n       at xattr module import time, loggers are not initialized
    yet\n\n   New features:\n\n       borg umount <mountpoint> exposed already existing
    umount code\n       via the CLI api, so users can use it, which is more consistent\n
    \      than using borg to mount and fusermount -u (or umount) to\n       un-mount,
    #1855.\n       implement borg create 窶渡oatime 窶渡octime, fixes #1853\n\n
    \  Other changes:\n\n       docs:\n           display README correctly on PyPI\n
    \          improve cache / index docs, esp. files cache docs, fixes #1825\n           different
    pattern matching for 窶å\N\x8Exclude, #1779\n           datetime formatting examples
    for {now} placeholder, #1822\n           clarify passphrase mode attic repo upgrade,
    #1854\n           clarify 窶砥mask usage, #1859\n           clarify how to choose
    PR target branch\n           clarify prune behavior for different archive contents,
    #1824\n           fix PDF issues, add logo, fix authors, headings, TOC\n           move
    security verification to support section\n           fix links in standalone README
    (:ref: tags)\n           add link to security contact in README\n           add
    FAQ about security\n           move fork differences to FAQ\n           add more
    details about resource usage\n       tests: skip remote tests on cygwin, #1268\n
    \      travis:\n           allow OS X failures until the brew cask osxfuse issue
    is fixed\n           caskroom osxfuse-beta gone, it窶å\x86± osxfuse now (3.5.3)\n
    \      vagrant:\n           upgrade OSXfuse / FUSE for macOS to 3.5.3\n           remove
    llfuse from tox.ini at a central place\n           do not try to install llfuse
    on centos6\n           fix fuse test for darwin, #1546\n           add windows
    virtual machine with cygwin\n           Vagrantfile cleanup / code deduplication\n\n
    \  To generate a diff of this commit:\n   cvs rdiff -u -r1.10 -r1.11 pkgsrc/sysutils/py-borgbackup/Makefile\n
    \  cvs rdiff -u -r1.5 -r1.6 pkgsrc/sysutils/py-borgbackup/distinfo\n"
  module: pkgsrc
  subject: 'CVS commit: [pkgsrc-2016Q4] pkgsrc/sysutils/py-borgbackup'
  unixtime: '1485110091'
  user: spz