Received: by mail.netbsd.org (Postfix, from userid 605) id 7729A84E9E; Tue, 26 May 2020 18:33:20 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id F10E584DD0 for ; Tue, 26 May 2020 18:33:19 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id PbUSQHp1wPd2 for ; Tue, 26 May 2020 18:33:19 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 5D47384CDC for ; Tue, 26 May 2020 18:33:19 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 25739FB27; Tue, 26 May 2020 18:33:19 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1590517999108040" MIME-Version: 1.0 Date: Tue, 26 May 2020 18:33:19 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2020Q1] pkgsrc/www/py-httplib2 To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20200526183319.25739FB27@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1590517999108040 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Tue May 26 18:33:19 UTC 2020 Modified Files: pkgsrc/www/py-httplib2 [pkgsrc-2020Q1]: Makefile distinfo Log Message: Pullup ticket #6210 - requested by adam www/py-httplib2: security fix Revisions pulled up: - www/py-httplib2/Makefile 1.24-1.25 - www/py-httplib2/distinfo 1.21-1.22 --- Module Name: pkgsrc Committed By: adam Date: Wed May 20 15:29:53 UTC 2020 Modified Files: pkgsrc/www/py-httplib2: Makefile distinfo Log Message: py-httplib2: updated to 0.18.0 0.18.0 IMPORTANT security vulnerability CWE-93 CRLF injection Force %xx quote of space, CR, LF characters in uri. Special thanks to Recar https://github.com/Ciyfly for discrete notification. https://cwe.mitre.org/data/definitions/93.html 0.17.4 Ship test suite in source dist https://github.com/httplib2/httplib2/pull/168 --- Module Name: pkgsrc Committed By: adam Date: Thu May 21 06:19:59 UTC 2020 Modified Files: pkgsrc/www/py-httplib2: Makefile distinfo Log Message: py-httplib2: updated to 0.18.1 0.18.1 explicit build-backend workaround for pip build isolation bug "AttributeError: 'module' object has no attribute '__legacy__'" on pip install To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.20.2.1 pkgsrc/www/py-httplib2/Makefile cvs rdiff -u -r1.17 -r1.17.2.1 pkgsrc/www/py-httplib2/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1590517999108040 Content-Disposition: inline Content-Length: 1690 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/py-httplib2/Makefile diff -u pkgsrc/www/py-httplib2/Makefile:1.20 pkgsrc/www/py-httplib2/Makefile:1.20.2.1 --- pkgsrc/www/py-httplib2/Makefile:1.20 Sat Jan 25 12:45:47 2020 +++ pkgsrc/www/py-httplib2/Makefile Tue May 26 18:33:18 2020 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.20 2020/01/25 12:45:47 adam Exp $ +# $NetBSD: Makefile,v 1.20.2.1 2020/05/26 18:33:18 bsiegert Exp $ -DISTNAME= httplib2-0.17.0 +DISTNAME= httplib2-0.18.1 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= www python MASTER_SITES= ${MASTER_SITE_PYPI:=h/httplib2/} Index: pkgsrc/www/py-httplib2/distinfo diff -u pkgsrc/www/py-httplib2/distinfo:1.17 pkgsrc/www/py-httplib2/distinfo:1.17.2.1 --- pkgsrc/www/py-httplib2/distinfo:1.17 Sat Jan 25 12:45:47 2020 +++ pkgsrc/www/py-httplib2/distinfo Tue May 26 18:33:18 2020 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.17 2020/01/25 12:45:47 adam Exp $ +$NetBSD: distinfo,v 1.17.2.1 2020/05/26 18:33:18 bsiegert Exp $ -SHA1 (httplib2-0.17.0.tar.gz) = 90670279a4ce86869c6d5506d1f03cd75c04a47c -RMD160 (httplib2-0.17.0.tar.gz) = 1823568e65f396c1ec76baaa07c71cdb05e4321d -SHA512 (httplib2-0.17.0.tar.gz) = 8724e5784990e7315762e5f8333197d6f6820aa6cc66aebbeb981ccedb57e35fa998e623d7e0cd8fcb18178895bc73b16bdf015c90d2adf208d6d5320f3551bb -Size (httplib2-0.17.0.tar.gz) = 220694 bytes +SHA1 (httplib2-0.18.1.tar.gz) = 70966545702a15d85b7aff8dba31cb9ef48d2a5d +RMD160 (httplib2-0.18.1.tar.gz) = b35ce49335613fdb2bb59b07c48b1633b9a1c6ba +SHA512 (httplib2-0.18.1.tar.gz) = a1bb527279bdc92fb75bffebc317ff549bb6efb678580cbe40d187921b7ace66b1a5bc1d98bdf065ec5667fe69632da086b0eb201ff911497324fd817bfe1b7a +Size (httplib2-0.18.1.tar.gz) = 262930 bytes --_----------=_1590517999108040--