Sat Oct 12 14:14:59 2013 UTC ()
Pullup ticket #4244 - requested by obache
www/py-genshi: security update

Revisions pulled up:
- www/py-genshi/Makefile                                        1.8
- www/py-genshi/distinfo                                        1.3

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Oct 11 10:54:15 UTC 2013

   Modified Files:
   	pkgsrc/www/py-genshi: Makefile distinfo

   Log Message:
   Update genshi to 0.6.1.

   Version 0.6.1
   http://svn.edgewall.org/repos/genshi/tags/0.6.1/
   (Jan 27 2013, from branches/stable/0.6.x)

     * Security fix to enhance sanitizing of CSS in style attributes. Genshi's
       `HTMLSanitizer` disallows style attributes by default (this remains
       unchanged) and warns against such attacks in its documentation, but
       the provided CSS santizing is now less lacking (see #455).
     * Fix for error in how `HTMLFormFiller` would handle `textarea` elements if
       no value was not supplied form them.
     * The `HTMLFormFiller` now correctly handles check boxes and radio buttons
       with an empty `value` attribute.
     * Template `Context` objects now have a `.copy` method.
     * Added a simple `tox.ini` file for using tox to test against multiple
       verions of Python.
     * Fix for bug in `QName` comparison (see #413).
     * Fix for bug in handling of trailing events in match template matches
       (see #399).
     * Fix i18n namespace declaration in documentation (see #400).
     * Fix for bug in caching of events in serializers by no longer caching
       `(TEXT, Markup)` events (see #429).
     * Fix handling of `None` by `Markup.escape` in `_speedups.c` (see #439).
     * Fix handling of internal state by match templates (relevant when multiple
       templates match the same part of the stream, see #370).
     * Fix handling of multiple events between or on either side of start and end
       tags in translated messages (see #404).
     * Fix test failures caused by changes in HTMLParser in Python 2.7 (see #501).
     * Fix infinite loop in interplotation lexing that was introduced by a change
       in Python 2.7's tokenizer (see #540).
     * Fix handling of processing instructions without data (see #368).
     * Updated MANIFEST.in so as not to rely on build from Subersion 1.6.


(tron)
diff -r1.7 -r1.7.8.1 pkgsrc/www/py-genshi/Makefile
diff -r1.2 -r1.2.28.1 pkgsrc/www/py-genshi/distinfo

cvs diff -r1.7 -r1.7.8.1 pkgsrc/www/py-genshi/Makefile (expand / switch to unified diff)

--- pkgsrc/www/py-genshi/Makefile 2012/10/28 06:31:01 1.7
+++ pkgsrc/www/py-genshi/Makefile 2013/10/12 14:14:59 1.7.8.1
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.7 2012/10/28 06:31:01 asau Exp $ 1# $NetBSD: Makefile,v 1.7.8.1 2013/10/12 14:14:59 tron Exp $
2# 2#
3 3
4DISTNAME= Genshi-0.6 4DISTNAME= Genshi-0.6.1
5PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl} 5PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl}
6CATEGORIES= www python 6CATEGORIES= www python
7MASTER_SITES= http://ftp.edgewall.com/pub/genshi/ 7MASTER_SITES= http://ftp.edgewall.com/pub/genshi/
8 8
9MAINTAINER= obache@NetBSD.org 9MAINTAINER= obache@NetBSD.org
10HOMEPAGE= http://genshi.edgewall.org/ 10HOMEPAGE= http://genshi.edgewall.org/
11COMMENT= Python toolkit for generation of output for the web 11COMMENT= Python toolkit for generation of output for the web
12LICENSE= modified-bsd 12LICENSE= modified-bsd
13 13
14DEPENDS+= ${PYPKGPREFIX}-babel>=0.8:../../devel/py-babel 14DEPENDS+= ${PYPKGPREFIX}-babel>=0.8:../../devel/py-babel
15DEPENDS+= ${PYPKGPREFIX}-expat-[0-9]*:../../textproc/py-expat 15DEPENDS+= ${PYPKGPREFIX}-expat-[0-9]*:../../textproc/py-expat
16 16
17USE_LANGUAGES= # empty 17USE_LANGUAGES= # empty

cvs diff -r1.2 -r1.2.28.1 pkgsrc/www/py-genshi/distinfo (expand / switch to unified diff)

--- pkgsrc/www/py-genshi/distinfo 2010/05/08 13:51:01 1.2
+++ pkgsrc/www/py-genshi/distinfo 2013/10/12 14:14:59 1.2.28.1
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.2 2010/05/08 13:51:01 obache Exp $ 1$NetBSD: distinfo,v 1.2.28.1 2013/10/12 14:14:59 tron Exp $
2 2
3SHA1 (Genshi-0.6.tar.gz) = 8b4d5d43dc614bc83de49c5be1c3b8a3908a8062 3SHA1 (Genshi-0.6.1.tar.gz) = 8cba4cfdab8346f6f3f815515bf62410ae829dbf
4RMD160 (Genshi-0.6.tar.gz) = bca068da7956f03358d2f46cb4616e06506b8ae9 4RMD160 (Genshi-0.6.1.tar.gz) = d5a010cdcbb01ee106566445d0ae1993b8e6e6f0
5Size (Genshi-0.6.tar.gz) = 433946 bytes 5Size (Genshi-0.6.1.tar.gz) = 486230 bytes