Received: by mail.netbsd.org (Postfix, from userid 605) id 2133584DBB; Mon, 4 Sep 2017 14:44:00 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id A815B84D46 for ; Mon, 4 Sep 2017 14:43:59 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id x90A8V9Qa_Au for ; Mon, 4 Sep 2017 14:43:59 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 382F884CDE for ; Mon, 4 Sep 2017 14:43:59 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 367CDFA97; Mon, 4 Sep 2017 14:43:59 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_150453623979140" MIME-Version: 1.0 Date: Mon, 4 Sep 2017 14:43:59 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/misc/py-anki2 To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20170904144359.367CDFA97@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_150453623979140 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Mon Sep 4 14:43:59 UTC 2017 Modified Files: pkgsrc/misc/py-anki2: Makefile distinfo Log Message: Updated py-anki2 to 2.0.47. Fixes an issue that could allow a specially crafted .apkg file to write files outside the media folder during import. AnkiWeb shared decks were not affected, but upgrading is strongly recommended if you import .apkg files from third party sources. A big thanks to David Bailey for discovering this issue. To generate a diff of this commit: cvs rdiff -u -r1.40 -r1.41 pkgsrc/misc/py-anki2/Makefile cvs rdiff -u -r1.35 -r1.36 pkgsrc/misc/py-anki2/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_150453623979140 Content-Disposition: inline Content-Length: 1751 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/misc/py-anki2/Makefile diff -u pkgsrc/misc/py-anki2/Makefile:1.40 pkgsrc/misc/py-anki2/Makefile:1.41 --- pkgsrc/misc/py-anki2/Makefile:1.40 Mon Aug 14 19:23:06 2017 +++ pkgsrc/misc/py-anki2/Makefile Mon Sep 4 14:43:59 2017 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.40 2017/08/14 19:23:06 wiz Exp $ +# $NetBSD: Makefile,v 1.41 2017/09/04 14:43:59 wiz Exp $ -DISTNAME= anki-2.0.46-source +DISTNAME= anki-2.0.47-source PKGNAME= ${PYPKGPREFIX}-${DISTNAME:C/anki/anki2/:C/-source//} CATEGORIES= misc x11 MASTER_SITES= https://apps.ankiweb.net/downloads/current/ Index: pkgsrc/misc/py-anki2/distinfo diff -u pkgsrc/misc/py-anki2/distinfo:1.35 pkgsrc/misc/py-anki2/distinfo:1.36 --- pkgsrc/misc/py-anki2/distinfo:1.35 Mon Aug 14 19:23:06 2017 +++ pkgsrc/misc/py-anki2/distinfo Mon Sep 4 14:43:59 2017 @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.35 2017/08/14 19:23:06 wiz Exp $ +$NetBSD: distinfo,v 1.36 2017/09/04 14:43:59 wiz Exp $ -SHA1 (anki-2.0.46-source.tgz) = ede248c896aa8e8f4a2b78fcf626009c00935867 -RMD160 (anki-2.0.46-source.tgz) = ae1bb02c16453207fc35dc12f835054be7f0fe82 -SHA512 (anki-2.0.46-source.tgz) = cf564b73555482999bf1042f8f71573fcd98892480125a6b198971565ee49657b6f84713f857af45101850518c98b7e9e2e1fe0a190489f063c3bc295418b092 -Size (anki-2.0.46-source.tgz) = 3422119 bytes +SHA1 (anki-2.0.47-source.tgz) = 04b11ba8f25f8e86b549e7fa73ee81751e154116 +RMD160 (anki-2.0.47-source.tgz) = fa8aaae0a8d4e57fbd805466cd61f5af17900ac8 +SHA512 (anki-2.0.47-source.tgz) = 5e4bbaac6d60506f43adfec1c4ff83285ac423405bfba57b566e7a9d632a22cf0f9ca7fe3eff3ce56c516a6cbb0112e5251319f11ba984d74bffd2c25e04c64a +Size (anki-2.0.47-source.tgz) = 3422231 bytes SHA1 (patch-Makefile) = 7148ed542b1f1be4e75274a82fda4863bf40f861 --_----------=_150453623979140--