Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id 45DC37A1FE for ; Tue, 9 May 2017 08:13:52 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id E586384DE5; Tue, 9 May 2017 08:13:51 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 73B4284D78 for ; Tue, 9 May 2017 08:13:51 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id ZQAOKisa_thd for ; Tue, 9 May 2017 08:13:51 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id EF37C84CDC for ; Tue, 9 May 2017 08:13:50 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id EAD85FBE4; Tue, 9 May 2017 08:13:50 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1494317630207800" MIME-Version: 1.0 Date: Tue, 9 May 2017 08:13:50 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/www/py-django-cms To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20170509081350.EAD85FBE4@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1494317630207800 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Tue May 9 08:13:50 UTC 2017 Modified Files: pkgsrc/www/py-django-cms: Makefile PLIST distinfo Log Message: Changes 3.4.3: * Fixed a security vulnerability in the page redirect field which allowed users to insert JavaScript code. * Fixed a security vulnerability where the ``next`` parameter for the toolbar login was not sanitised and could point to another domain. To generate a diff of this commit: cvs rdiff -u -r1.43 -r1.44 pkgsrc/www/py-django-cms/Makefile cvs rdiff -u -r1.29 -r1.30 pkgsrc/www/py-django-cms/PLIST cvs rdiff -u -r1.34 -r1.35 pkgsrc/www/py-django-cms/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1494317630207800 Content-Disposition: inline Content-Length: 2588 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/py-django-cms/Makefile diff -u pkgsrc/www/py-django-cms/Makefile:1.43 pkgsrc/www/py-django-cms/Makefile:1.44 --- pkgsrc/www/py-django-cms/Makefile:1.43 Thu Feb 2 07:54:11 2017 +++ pkgsrc/www/py-django-cms/Makefile Tue May 9 08:13:50 2017 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.43 2017/02/02 07:54:11 adam Exp $ +# $NetBSD: Makefile,v 1.44 2017/05/09 08:13:50 adam Exp $ -DISTNAME= django-cms-3.4.2 +DISTNAME= django-cms-3.4.3 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= www python MASTER_SITES= ${MASTER_SITE_GITHUB:=divio/} Index: pkgsrc/www/py-django-cms/PLIST diff -u pkgsrc/www/py-django-cms/PLIST:1.29 pkgsrc/www/py-django-cms/PLIST:1.30 --- pkgsrc/www/py-django-cms/PLIST:1.29 Thu Feb 2 07:54:11 2017 +++ pkgsrc/www/py-django-cms/PLIST Tue May 9 08:13:50 2017 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.29 2017/02/02 07:54:11 adam Exp $ +@comment $NetBSD: PLIST,v 1.30 2017/05/09 08:13:50 adam Exp $ ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt @@ -110,6 +110,9 @@ ${PYSITELIB}/cms/forms/fields.pyo ${PYSITELIB}/cms/forms/utils.py ${PYSITELIB}/cms/forms/utils.pyc ${PYSITELIB}/cms/forms/utils.pyo +${PYSITELIB}/cms/forms/validators.py +${PYSITELIB}/cms/forms/validators.pyc +${PYSITELIB}/cms/forms/validators.pyo ${PYSITELIB}/cms/forms/widgets.py ${PYSITELIB}/cms/forms/widgets.pyc ${PYSITELIB}/cms/forms/widgets.pyo Index: pkgsrc/www/py-django-cms/distinfo diff -u pkgsrc/www/py-django-cms/distinfo:1.34 pkgsrc/www/py-django-cms/distinfo:1.35 --- pkgsrc/www/py-django-cms/distinfo:1.34 Thu Feb 2 07:54:11 2017 +++ pkgsrc/www/py-django-cms/distinfo Tue May 9 08:13:50 2017 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.34 2017/02/02 07:54:11 adam Exp $ +$NetBSD: distinfo,v 1.35 2017/05/09 08:13:50 adam Exp $ -SHA1 (django-cms-3.4.2.tar.gz) = f5fcbc7f27f20d3ef84a557e5fb33e52eb7f1f8c -RMD160 (django-cms-3.4.2.tar.gz) = 0b2ce4431a665979c4a274ae83b4039e8ed8551e -SHA512 (django-cms-3.4.2.tar.gz) = 5265f50edd2d84d361bdc98e03f20bb7da3a379efa1eada633eb6ccd04ed5a1facb45d8f04c2545c373ede2dd731ef2abdea1ab944e0d656640e508e537ff330 -Size (django-cms-3.4.2.tar.gz) = 5236544 bytes +SHA1 (django-cms-3.4.3.tar.gz) = 8af432d7083ba5daa23e55a0b0a8bca41591a563 +RMD160 (django-cms-3.4.3.tar.gz) = f7dd71ad389c84e39acedb70862d8b80ab3e3d14 +SHA512 (django-cms-3.4.3.tar.gz) = 0c6b418bf025b042cefc4bb89fb663cc419a8e806a3c6e436198b7bb595d8012f79c7f02d08cee891e5e1ef83bd4f52f0e2adcc4ebd1d22325a674cbc7e69be9 +Size (django-cms-3.4.3.tar.gz) = 5234748 bytes --_----------=_1494317630207800--