Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Thu, 2 Apr 2015 15:28:25 +0000
From: "Thomas Klausner" <wiz@netbsd.org>
Subject: CVS commit: pkgsrc/devel/py-dulwich
To: pkgsrc-changes@NetBSD.org
Reply-To: wiz@netbsd.org
Message-Id: <20150402152825.791D798@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	wiz
Date:		Thu Apr  2 15:28:25 UTC 2015

Modified Files:
	pkgsrc/devel/py-dulwich: Makefile PLIST distinfo

Log Message:
Update to 0.10.1a for a security problem (see below).

0.10.1  2015-03-25

 BUG FIXES

  * Return `ApplyDeltaError` when encountering delta errors
    in both C extensions and native delta application code.
    (Jelmer Vernooij, #259)

0.10.0	2015-03-22

 BUG FIXES

  * In dulwich.index.build_index_from_tree, by default
    refuse to create entries that start with .git/.

  * Fix running of testsuite when installed.
    (Jelmer Vernooij, #223)

  * Use a block cache in _find_content_rename_candidates(),
    improving performance. (Mike Williams)

  * Add support for ``core.protectNTFS`` setting.
    (Jelmer Vernooij)

  * Fix TypeError when fetching empty updates.
    (Hwee Miin Koh)

  * Resolve delta refs when pulling into a MemoryRepo.
    (Max Shawabkeh, #256)

  * Fix handling of tags of non-commits in missing object finder.
    (Augie Fackler, #211)

  * Explicitly disable mmap on plan9 where it doesn't work.
    (Jeff Sickel)

 IMPROVEMENTS

  * New public method `Repo.reset_index`. (Jelmer Vernooij)

  * Prevent duplicate parsing of loose files in objects
    directory when reading. Thanks to David Keijser for the
    report. (Jelmer Vernooij, #231)

0.9.9	2015-03-20

 SECURITY BUG FIXES

  * Fix buffer overflow in C implementation of pack apply_delta().
    (CVE-2015-0838)

    Thanks to Ivan Fratric of the Google Security Team for
    reporting this issue.
    (Jelmer Vernooij)

0.9.8	2014-11-30

 BUG FIXES

  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)

  * Limit delta copy length to 64K in v2 pack files. (Robert Brown)

  * Strip newline from final ACKed SHA while fetching packs.
    (Michael Edgar)

  * Remove assignment to PyList_SIZE() that was causing segfaults on
    pypy. (Jelmer Vernooij, #196)

 IMPROVEMENTS

  * Add porcelain 'receive-pack' and 'upload-pack'. (Jelmer Vernooij)

  * Handle SIGINT signals in bin/dulwich. (Jelmer Vernooij)

  * Add 'status' support to bin/dulwich. (Jelmer Vernooij)

  * Add 'branch_create', 'branch_list', 'branch_delete' porcelain.
    (Jelmer Vernooij)

  * Add 'fetch' porcelain. (Jelmer Vernooij)

  * Add 'tag_delete' porcelain. (Jelmer Vernooij)

  * Add support for serializing/deserializing 'gpgsig' attributes in Commit.
    (Jelmer Vernooij)

 CHANGES

  * dul-web is now available as 'dulwich web-daemon'.
    (Jelmer Vernooij)

  * dulwich.porcelain.tag has been renamed to tag_create.
    dulwich.porcelain.list_tags has been renamed to tag_list.
    (Jelmer Vernooij)

 API CHANGES

  * Restore support for Python 2.6. (Jelmer Vernooij, Gary van der Merwe)

0.9.7	2014-06-08

 BUG FIXES

  * Fix tests dependent on hash ordering. (Michael Edgar)

  * Support staging symbolic links in Repo.stage.
    (Robert Brown)

  * Ensure that all files object are closed when running the test suite.
    (Gary van der Merwe)

  * When writing OFS_DELTA pack entries, write correct offset.
    (Augie Fackler)

  * Fix handler of larger copy operations in packs. (Augie Fackler)

  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)

  * Fix logic for extra adds of identical files in rename detector.
    (Robert Brown)

 IMPROVEMENTS

  * Add porcelain 'status'. (Ryan Faulkner)

  * Add porcelain 'daemon'. (Jelmer Vernooij)

  * Add `dulwich.greenthreads` module which provides support
    for concurrency of some object store operations.
    (Fabien Boucher)

  * Various changes to improve compatibility with Python 3.
    (Gary van der Merwe, Hannu Valtonen, michael-k)

  * Add OpenStack Swift backed repository implementation
    in dulwich.contrib. See README.swift for details. (Fabien Boucher)

API CHANGES

  * An optional close function can be passed to the Protocol class. This will
    be called by its close method. (Gary van der Merwe)

  * All classes with close methods are now context managers, so that they can
    be easily closed using a `with` statement. (Gary van der Merwe)

  * Remove deprecated `num_objects` argument to `write_pack` methods.
    (Jelmer Vernooij)

 OTHER CHANGES

  * The 'dul-daemon' script has been removed. The same functionality
    is now available as 'dulwich daemon'. (Jelmer Vernooij)

0.9.6	2014-04-23

 IMPROVEMENTS

 * Add support for recursive add in 'git add'.
   (Ryan Faulkner, Jelmer Vernooij)

 * Add porcelain 'list_tags'. (Ryan Faulkner)

 * Add porcelain 'push'. (Ryan Faulkner)

 * Add porcelain 'pull'. (Ryan Faulkner)

 * Support 'http.proxy' in HttpGitClient.
   (Jelmer Vernooij, #1096030)

 * Support 'http.useragent' in HttpGitClient.
   (Jelmer Vernooij)

 * In server, wait for clients to send empty list of
   wants when talking to empty repository.
   (Damien Tournoud)

 * Various changes to improve compatibility with
   Python 3. (Gary van der Merwe)

 BUG FIXES

 * Support unseekable 'wsgi.input' streams.
   (Jonas Haag)

 * Raise TypeError when passing unicode() object
   to Repo.__getitem__.
   (Jonas Haag)

 * Fix handling of `reset` command in dulwich.fastexport.
   (Jelmer Vernooij, #1249029)

 * In client, don't wait for server to close connection
   first. Fixes hang when used against GitHub
   server implementation. (Siddharth Agarwal)

 * DeltaChainIterator: fix a corner case where an object is inflated as an
   object already in the repository.
   (Damien Tournoud, #135)

 * Stop leaking file handles during pack reload. (Damien Tournoud)

 * Avoid reopening packs during pack cache reload. (Jelmer Vernooij)

 API CHANGES

  * Drop support for Python 2.6. (Jelmer Vernooij)

0.9.5	2014-02-23

 IMPROVEMENTS

 * Add porcelain 'tag'. (Ryan Faulkner)

 * New module `dulwich.objectspec` for parsing strings referencing
   objects and commit ranges. (Jelmer Vernooij)

 * Add shallow branch support. (milki)

 * Allow passing urllib2 `opener` into HttpGitClient.
   (Dov Feldstern, #909037)

 CHANGES

 * Drop support for Python 2.4 and 2.5. (Jelmer Vernooij)

 API CHANGES

 * Remove long deprecated ``Repo.commit``, ``Repo.get_blob``,
   ``Repo.tree`` and ``Repo.tag``. (Jelmer Vernooij)

 * Remove long deprecated ``Repo.revision_history`` and ``Repo.ref``.
   (Jelmer Vernooij)

 * Remove long deprecated ``Tree.entries``. (Jelmer Vernooij)

 BUG FIXES

 * Raise KeyError rather than TypeError when passing in
   unicode object of length 20 or 40 to Repo.__getitem__.
   (Jelmer Vernooij)

 * Use 'rm' rather than 'unlink' in tests, since the latter
   does not exist on OpenBSD and other platforms.
   (Dmitrij D. Czarkoff)


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 pkgsrc/devel/py-dulwich/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/devel/py-dulwich/PLIST
cvs rdiff -u -r1.6 -r1.7 pkgsrc/devel/py-dulwich/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.