Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id B555584E67 for ; Wed, 27 Sep 2023 12:15:12 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id QS9DYicP427r for ; Wed, 27 Sep 2023 12:15:12 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 346B784D08 for ; Wed, 27 Sep 2023 12:15:12 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 82A4FFBDB; Wed, 27 Sep 2023 12:14:52 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_169581689277720" MIME-Version: 1.0 Date: Wed, 27 Sep 2023 12:14:52 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/devel/py-gitpython To: pkgsrc-changes@NetBSD.org Approved: commit_and_comment Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20230927121452.82A4FFBDB@cvs.NetBSD.org> This is a multi-part message in MIME format. --_----------=_169581689277720 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Wed Sep 27 12:14:52 UTC 2023 Modified Files: pkgsrc/devel/py-gitpython: Makefile distinfo Log Message: py-gitpython: updated to 3.1.37 3.1.37 ====== This release contains another security fix that further improves validation of symbolic references and thus properly fixes this CVE: https://github.com/advisories/GHSA-cwvm-v4w8-q58c. To generate a diff of this commit: cvs rdiff -u -r1.19 -r1.20 pkgsrc/devel/py-gitpython/Makefile \ pkgsrc/devel/py-gitpython/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_169581689277720 Content-Disposition: inline Content-Length: 1611 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/devel/py-gitpython/Makefile diff -u pkgsrc/devel/py-gitpython/Makefile:1.19 pkgsrc/devel/py-gitpython/Makefile:1.20 --- pkgsrc/devel/py-gitpython/Makefile:1.19 Sat Sep 16 03:35:57 2023 +++ pkgsrc/devel/py-gitpython/Makefile Wed Sep 27 12:14:52 2023 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.19 2023/09/16 03:35:57 adam Exp $ +# $NetBSD: Makefile,v 1.20 2023/09/27 12:14:52 adam Exp $ -DISTNAME= GitPython-3.1.36 +DISTNAME= GitPython-3.1.37 PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl} CATEGORIES= devel python MASTER_SITES= ${MASTER_SITE_PYPI:=g/gitpython/} Index: pkgsrc/devel/py-gitpython/distinfo diff -u pkgsrc/devel/py-gitpython/distinfo:1.19 pkgsrc/devel/py-gitpython/distinfo:1.20 --- pkgsrc/devel/py-gitpython/distinfo:1.19 Sat Sep 16 03:35:57 2023 +++ pkgsrc/devel/py-gitpython/distinfo Wed Sep 27 12:14:52 2023 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.19 2023/09/16 03:35:57 adam Exp $ +$NetBSD: distinfo,v 1.20 2023/09/27 12:14:52 adam Exp $ -BLAKE2s (GitPython-3.1.36.tar.gz) = 9fabf3a2dcc2cbdcedf4d88b61db0fbf0e522dc16d5ad815be33d4a44df6ee37 -SHA512 (GitPython-3.1.36.tar.gz) = f81a62a224d85c26783e69bed7279e08e772a411a88bff398a979a3302a91f70e27c22fbe635dcf2bb8d4af2eaf1af49946f78b67a7cc909a5e67332da9fd74d -Size (GitPython-3.1.36.tar.gz) = 199490 bytes +BLAKE2s (GitPython-3.1.37.tar.gz) = 83b91d760edfe2381f79530c78d8e6071ac71a552bdea38e452ece66ec6297e9 +SHA512 (GitPython-3.1.37.tar.gz) = c036b5a12b2839a152d21cc6163445c067d70b18984888e799b0900449bea0a5290f6520fae5cab83fb8553af9c6bb0150c9b28103311deecb3686de30dd35f1 +Size (GitPython-3.1.37.tar.gz) = 200076 bytes --_----------=_169581689277720--