Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by www.NetBSD.org (Postfix) with ESMTP id 7F9B763BB0A
	for <mhonarc+pkgsrc-changes@mail-index.netbsd.org>; Tue, 27 Jul 2010 20:12:25 +0000 (UTC)
Received: by mail.netbsd.org (Postfix, from userid 0)
	id ED95A63B104; Tue, 27 Jul 2010 20:12:24 +0000 (UTC)
Received: from nef.pbox.org (nef.pbox.org [IPv6:2001:7a8:202:1::1:1])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client did not present a certificate)
	by mail.netbsd.org (Postfix) with ESMTPS id C7FF063B101
	for <pkgsrc-changes@netbsd.org>; Tue, 27 Jul 2010 20:12:23 +0000 (UTC)
Received: from nef.pbox.org (localhost [127.0.0.1])
	by nef.pbox.org (8.13.8/8.13.8/) with ESMTP id o6RKCBPD023554
	for <pkgsrc-changes@netbsd.org>; Tue, 27 Jul 2010 22:12:11 +0200 (CEST)
Received: (from agc@localhost)
	by nef.pbox.org (8.13.8/8.13.8/Submit) id o6RKCA4O023553
	for pkgsrc-changes@netbsd.org; Tue, 27 Jul 2010 22:12:10 +0200 (CEST)
Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd])
	by mail.netbsd.org (Postfix) with ESMTP id 677B163B100
	for <pkgsrc-changes@NetBSD.org>; Tue, 27 Jul 2010 18:07:44 +0000 (UTC)
Received: by cvs.netbsd.org (Postfix, from userid 500)
	id 466CA175DD; Tue, 27 Jul 2010 18:07:44 +0000 (UTC)
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
Date: Tue, 27 Jul 2010 18:07:44 +0000
From: Matthias Scheler <tron@netbsd.org>
Subject: CVS commit: [pkgsrc-2010Q2] pkgsrc/www/py-paste
To: pkgsrc-changes@netbsd.org
Reply-To: tron@netbsd.org
X-Mailer: log_accum
Message-Id: <20100727180744.466CA175DD@cvs.netbsd.org>
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.3 (nef.pbox.org [127.0.0.1]); Tue, 27 Jul 2010 22:12:11 +0200 (CEST)
Sender: pkgsrc-changes-owner@NetBSD.org
List-Id: pkgsrc-changes.NetBSD.org
Precedence: list

Module Name:	pkgsrc
Committed By:	tron
Date:		Tue Jul 27 18:07:44 UTC 2010

Modified Files:
	pkgsrc/www/py-paste [pkgsrc-2010Q2]: Makefile PLIST distinfo

Log Message:
Pullup ticket #3190 - requested by obache
www/py-paste: security update

Revisions pulled up:
- www/py-paste/Makefile			1.7
- www/py-paste/PLIST			1.5
- www/py-paste/distinfo			1.3
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Mon Jul 26 12:38:42 UTC 2010

Modified Files:
	pkgsrc/www/py-paste: Makefile PLIST distinfo

Log Message:
Update py-Paste to 1.7.4.
While here, set LICENSE=mit.

1.7.4
-----

* Fix XSS bug (security issue) with not found handlers for
   :class:`paste.urlparser.StaticURLParser` and
   :class:`paste.urlmap.URLMap`.  If you ask for a path with
   ``/--><script>...`` that will be inserted in the error page and can
   execute Javascript.  Reported by Tim Wintle.

* Replaced :func:`paste.util.mimeparse.desired_match`

1.7.3.1
-------

* Removed directory name from 404 errors in
   :class:`paste.urlparser.StaticURLParser`.

* Fixed packaging to include Javascript and images for
   :mod:`paste.evalexception`

1.7.3
-----

* I got a fever and the only prescription is more :mod:`paste.cowbell`!

* Fix :mod:`paste.httpserver` on Python 2.6.

* Fix :mod:`paste.auth.cookie`, which would insert newlines for long
   cookies.

* :mod:`paste.util.mimeparse` parses a single ``*`` in Accept headers
   (sent by IE 6).

* Fix some problems with the ``wdg_validate`` middleware.

* Improvements to :mod:`paste.auth.auth_tkt`: add httponly support,
   don't always aggressively set cookies without the
   ``wildcard_cookie`` option.  Also on logout, make cookies expire.

* In :class:`paste.proxy.Proxy` handle Content-Length of -1.

* In :mod:`paste.httpexceptions` avoid some unicode errors.

* In :mod:`paste.httpserver` handle ``.read()`` from 100 Continue
   properly (because of a typo it was doing a readline).

* Update ``paste.util.mimeparse`` from `upstream
   <http://code.google.com/p/mimeparse/>`_.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.6.6.1 pkgsrc/www/py-paste/Makefile
cvs rdiff -u -r1.4 -r1.4.10.1 pkgsrc/www/py-paste/PLIST
cvs rdiff -u -r1.2 -r1.2.6.1 pkgsrc/www/py-paste/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.