diff options
| author | bsiegert <bsiegert@pkgsrc.org> | 2020-05-26 18:33:18 +0000 |
|---|---|---|
| committer | bsiegert <bsiegert@pkgsrc.org> | 2020-05-26 18:33:18 +0000 |
| commit | cc1509c77f9d78bd8af9f845c9690746b051f152 (patch) | |
| tree | 05cbde401562814e74f7cc824ac4bb93ea59fcb1 | |
| parent | f85325b2fa3cc0f71d0c4d1b27617bd9749a809e (diff) | |
| download | pkgsrc-cc1509c77f9d78bd8af9f845c9690746b051f152.tar.gz | |
Pullup ticket #6210 - requested by adam
www/py-httplib2: security fix
Revisions pulled up:
- www/py-httplib2/Makefile 1.24-1.25
- www/py-httplib2/distinfo 1.21-1.22
---
Module Name: pkgsrc
Committed By: adam
Date: Wed May 20 15:29:53 UTC 2020
Modified Files:
pkgsrc/www/py-httplib2: Makefile distinfo
Log Message:
py-httplib2: updated to 0.18.0
0.18.0
IMPORTANT security vulnerability CWE-93 CRLF injection
Force %xx quote of space, CR, LF characters in uri.
Special thanks to Recar https://github.com/Ciyfly for discrete notification.
https://cwe.mitre.org/data/definitions/93.html
0.17.4
Ship test suite in source dist
https://github.com/httplib2/httplib2/pull/168
---
Module Name: pkgsrc
Committed By: adam
Date: Thu May 21 06:19:59 UTC 2020
Modified Files:
pkgsrc/www/py-httplib2: Makefile distinfo
Log Message:
py-httplib2: updated to 0.18.1
0.18.1
explicit build-backend workaround for pip build isolation bug
"AttributeError: 'module' object has no attribute '__legacy__'" on pip install
| -rw-r--r-- | www/py-httplib2/Makefile | 4 | ||||
| -rw-r--r-- | www/py-httplib2/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/www/py-httplib2/Makefile b/www/py-httplib2/Makefile index 029bb6192e6..ac33f1983c6 100644 --- a/www/py-httplib2/Makefile +++ b/www/py-httplib2/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.20 2020/01/25 12:45:47 adam Exp $ +# $NetBSD: Makefile,v 1.20.2.1 2020/05/26 18:33:18 bsiegert Exp $ -DISTNAME= httplib2-0.17.0 +DISTNAME= httplib2-0.18.1 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= www python MASTER_SITES= ${MASTER_SITE_PYPI:=h/httplib2/} diff --git a/www/py-httplib2/distinfo b/www/py-httplib2/distinfo index a96d3ee1690..1ceaa239135 100644 --- a/www/py-httplib2/distinfo +++ b/www/py-httplib2/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.17 2020/01/25 12:45:47 adam Exp $ +$NetBSD: distinfo,v 1.17.2.1 2020/05/26 18:33:18 bsiegert Exp $ -SHA1 (httplib2-0.17.0.tar.gz) = 90670279a4ce86869c6d5506d1f03cd75c04a47c -RMD160 (httplib2-0.17.0.tar.gz) = 1823568e65f396c1ec76baaa07c71cdb05e4321d -SHA512 (httplib2-0.17.0.tar.gz) = 8724e5784990e7315762e5f8333197d6f6820aa6cc66aebbeb981ccedb57e35fa998e623d7e0cd8fcb18178895bc73b16bdf015c90d2adf208d6d5320f3551bb -Size (httplib2-0.17.0.tar.gz) = 220694 bytes +SHA1 (httplib2-0.18.1.tar.gz) = 70966545702a15d85b7aff8dba31cb9ef48d2a5d +RMD160 (httplib2-0.18.1.tar.gz) = b35ce49335613fdb2bb59b07c48b1633b9a1c6ba +SHA512 (httplib2-0.18.1.tar.gz) = a1bb527279bdc92fb75bffebc317ff549bb6efb678580cbe40d187921b7ace66b1a5bc1d98bdf065ec5667fe69632da086b0eb201ff911497324fd817bfe1b7a +Size (httplib2-0.18.1.tar.gz) = 262930 bytes |