Pullup ticket #3190 - requested by obache

www/py-paste: security update

Revisions pulled up:
- www/py-paste/Makefile			1.7
- www/py-paste/PLIST			1.5
- www/py-paste/distinfo			1.3
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Mon Jul 26 12:38:42 UTC 2010

Modified Files:
	pkgsrc/www/py-paste: Makefile PLIST distinfo

Log Message:
Update py-Paste to 1.7.4.
While here, set LICENSE=mit.

1.7.4
-----

* Fix XSS bug (security issue) with not found handlers for
   :class:`paste.urlparser.StaticURLParser` and
   :class:`paste.urlmap.URLMap`.  If you ask for a path with
   ``/--><script>...`` that will be inserted in the error page and can
   execute Javascript.  Reported by Tim Wintle.

* Replaced :func:`paste.util.mimeparse.desired_match`

1.7.3.1
-------

* Removed directory name from 404 errors in
   :class:`paste.urlparser.StaticURLParser`.

* Fixed packaging to include Javascript and images for
   :mod:`paste.evalexception`

1.7.3
-----

* I got a fever and the only prescription is more :mod:`paste.cowbell`!

* Fix :mod:`paste.httpserver` on Python 2.6.

* Fix :mod:`paste.auth.cookie`, which would insert newlines for long
   cookies.

* :mod:`paste.util.mimeparse` parses a single ``*`` in Accept headers
   (sent by IE 6).

* Fix some problems with the ``wdg_validate`` middleware.

* Improvements to :mod:`paste.auth.auth_tkt`: add httponly support,
   don't always aggressively set cookies without the
   ``wildcard_cookie`` option.  Also on logout, make cookies expire.

* In :class:`paste.proxy.Proxy` handle Content-Length of -1.

* In :mod:`paste.httpexceptions` avoid some unicode errors.

* In :mod:`paste.httpserver` handle ``.read()`` from 100 Continue
   properly (because of a typo it was doing a readline).

* Update ``paste.util.mimeparse`` from `upstream
   <http://code.google.com/p/mimeparse/>`_.

3 files changed, 12 insertions, 9 deletions

diff --git a/www/py-paste/Makefile b/www/py-paste/Makefile
index 5fabc032b98..5ad38602e22 100644
--- a/www/py-paste/Makefile
+++ b/www/py-paste/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.6 2009/11/10 17:08:24 epg Exp $
+# $NetBSD: Makefile,v 1.6.6.1 2010/07/27 18:07:43 tron Exp $
 
-DISTNAME=	Paste-1.7.2
+DISTNAME=	Paste-1.7.4
 PKGNAME=	${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=	www
 MASTER_SITES=	http://pypi.python.org/packages/source/P/Paste/
@@ -8,6 +8,7 @@ MASTER_SITES=	http://pypi.python.org/packages/source/P/Paste/
 MAINTAINER=	pkgsrc-users@NetBSD.org
 HOMEPAGE=	http://pythonpaste.org/
 COMMENT=	Middleware for Python WSGI applications
+LICENSE=	mit
 
 PKG_DESTDIR_SUPPORT=		user-destdir
 
diff --git a/www/py-paste/PLIST b/www/py-paste/PLIST
index e36b88d1059..b3e0b68b366 100644
--- a/www/py-paste/PLIST
+++ b/www/py-paste/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.4 2009/06/14 22:00:32 joerg Exp $
+@comment $NetBSD: PLIST,v 1.4.10.1 2010/07/27 18:07:43 tron Exp $
 ${PYSITELIB}/${EGG_NAME}-nspkg.pth
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
 ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
@@ -50,6 +50,9 @@ ${PYSITELIB}/paste/cgitb_catcher.pyo
 ${PYSITELIB}/paste/config.py
 ${PYSITELIB}/paste/config.pyc
 ${PYSITELIB}/paste/config.pyo
+${PYSITELIB}/paste/cowbell/__init__.py
+${PYSITELIB}/paste/cowbell/__init__.pyc
+${PYSITELIB}/paste/cowbell/__init__.pyo
 ${PYSITELIB}/paste/debug/__init__.py
 ${PYSITELIB}/paste/debug/__init__.pyc
 ${PYSITELIB}/paste/debug/__init__.pyo
@@ -86,14 +89,13 @@ ${PYSITELIB}/paste/evalexception/__init__.pyo
 ${PYSITELIB}/paste/evalexception/evalcontext.py
 ${PYSITELIB}/paste/evalexception/evalcontext.pyc
 ${PYSITELIB}/paste/evalexception/evalcontext.pyo
+${PYSITELIB}/paste/evalexception/media/MochiKit.packed.js
 ${PYSITELIB}/paste/evalexception/media/debug.js
 ${PYSITELIB}/paste/evalexception/media/minus.jpg
 ${PYSITELIB}/paste/evalexception/media/plus.jpg
 ${PYSITELIB}/paste/evalexception/middleware.py
 ${PYSITELIB}/paste/evalexception/middleware.pyc
 ${PYSITELIB}/paste/evalexception/middleware.pyo
-${PYSITELIB}/paste/evalexception/mochikit/MochiKit.js
-${PYSITELIB}/paste/evalexception/mochikit/__package__.js
 ${PYSITELIB}/paste/exceptions/__init__.py
 ${PYSITELIB}/paste/exceptions/__init__.pyc
 ${PYSITELIB}/paste/exceptions/__init__.pyo
diff --git a/www/py-paste/distinfo b/www/py-paste/distinfo
index d9226aec9f6..b6dfe7cfbe7 100644
--- a/www/py-paste/distinfo
+++ b/www/py-paste/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.2 2009/11/10 17:08:24 epg Exp $
+$NetBSD: distinfo,v 1.2.6.1 2010/07/27 18:07:43 tron Exp $
 
-SHA1 (Paste-1.7.2.tar.gz) = 4c7d6d76ec0fe76d57c525101c6f9ff6ebf4a93c
-RMD160 (Paste-1.7.2.tar.gz) = 10deddbb5ef3ccd220c6c0cdb594efd35045fdea
-Size (Paste-1.7.2.tar.gz) = 373556 bytes
+SHA1 (Paste-1.7.4.tar.gz) = df6114f419ce5b162a6e6e29d5a824d699448346
+RMD160 (Paste-1.7.4.tar.gz) = 35bf95f00a687f619717a2ba571dbc5aae137429
+Size (Paste-1.7.4.tar.gz) = 517556 bytes