summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authortm <tm@pkgsrc.org>2021-11-02 18:42:01 +0000
committertm <tm@pkgsrc.org>2021-11-02 18:42:01 +0000
commit81cc102b085520dd053ca69e4ce9e8c0d3963680 (patch)
tree6f52296168448f45feb02e02e714b4291d316d5a
parent78ca360649000a7a9a3ede4734ba7e4c2f36611d (diff)
downloadpkgsrc-81cc102b085520dd053ca69e4ce9e8c0d3963680.tar.gz
Pullup ticket #6523 - requested by david
lang/python27: bugfix Revisions pulled up: - lang/python27/Makefile 1.95 - lang/python27/distinfo 1.87 - lang/python27/patches/patch-Lib_urlparse.py 1.2 --- Module Name: pkgsrc Committed By: gutteridge Date: Wed Oct 27 23:58:55 UTC 2021 Modified Files: pkgsrc/lang/python27: Makefile distinfo pkgsrc/lang/python27/patches: patch-Lib_urlparse.py Log Message: python27: fix definition of variable added in security patch Correct a merge botch introduced in a previous commit. It was intended that a variable be redefined, but it was committed in an incomplete testing state.
-rw-r--r--lang/python27/Makefile10
-rw-r--r--lang/python27/distinfo4
-rw-r--r--lang/python27/patches/patch-Lib_urlparse.py4
3 files changed, 12 insertions, 6 deletions
diff --git a/lang/python27/Makefile b/lang/python27/Makefile
index 92f224f68fa..709aa0bab9e 100644
--- a/lang/python27/Makefile
+++ b/lang/python27/Makefile
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.93.8.1 2021/10/13 21:04:00 tm Exp $
+# $NetBSD: Makefile,v 1.93.8.2 2021/11/02 18:42:01 tm Exp $
.include "dist.mk"
PKGNAME= python27-${PY_DISTVERSION}
-PKGREVISION= 4
+PKGREVISION= 5
CATEGORIES= lang python
MAINTAINER= pkgsrc-users@NetBSD.org
@@ -188,6 +188,12 @@ SUBST_FILES.pkgversion= Lib/lib2to3/pgen2/driver.py
SUBST_FILES.pkgversion+=Lib/distutils/command/install_egg_info.py
SUBST_VARS.pkgversion= PKGVERSION_NOREV
+SUBST_CLASSES+= urllib
+SUBST_MESSAGE.urllib= Fixing path to urllib.cfg.
+SUBST_STAGE.urllib= pre-configure
+SUBST_FILES.urllib= Lib/urlparse.py
+SUBST_VARS.urllib= PKG_SYSCONFDIR
+
.include "options.mk"
SUBST_CLASSES+= sslbase
diff --git a/lang/python27/distinfo b/lang/python27/distinfo
index 1bb93e83b90..283a62904ff 100644
--- a/lang/python27/distinfo
+++ b/lang/python27/distinfo
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.82.2.1 2021/10/13 21:04:00 tm Exp $
+$NetBSD: distinfo,v 1.82.2.2 2021/11/02 18:42:01 tm Exp $
SHA1 (Python-2.7.18.tar.xz) = 678d4cf483a1c92efd347ee8e1e79326dc82810b
RMD160 (Python-2.7.18.tar.xz) = 40a514bb05c9e631454ea8466e28f5bb229428ad
@@ -35,7 +35,7 @@ SHA1 (patch-Lib_test_test__unicode.py) = 1bd182bdbd880d0a847f9d8b69277a607f9f052
SHA1 (patch-Lib_test_test__urllib2.py) = 89baa57daf2f3282e4fc5009915dbc4910b96ef1
SHA1 (patch-Lib_test_test__urlparse.py) = 257cb3bf7a0e9b5e0dcb204f675959b10953ba7b
SHA1 (patch-Lib_urllib2.py) = 0cc0dc811bb9544496962e08b040b5c96fb9073c
-SHA1 (patch-Lib_urlparse.py) = ec45dd48966eb806a5c0e79af6a7369fb45b9859
+SHA1 (patch-Lib_urlparse.py) = 69db5325a19474113e72c1feeb895a25534412c4
SHA1 (patch-Mac_Tools_pythonw.c) = 2b9a60d4b349c240471fd305be69c28e0f654cdc
SHA1 (patch-Makefile.pre.in) = ceaf34237588b527478ce1f9163c9168382fa201
SHA1 (patch-Modules___ctypes_callbacks.c) = 8c335edfc9d2ef47988c5bdf1c3dd8473757637b
diff --git a/lang/python27/patches/patch-Lib_urlparse.py b/lang/python27/patches/patch-Lib_urlparse.py
index 2aa4645ec49..87379d6856f 100644
--- a/lang/python27/patches/patch-Lib_urlparse.py
+++ b/lang/python27/patches/patch-Lib_urlparse.py
@@ -1,4 +1,4 @@
-$NetBSD: patch-Lib_urlparse.py,v 1.1.2.2 2021/10/13 21:04:01 tm Exp $
+$NetBSD: patch-Lib_urlparse.py,v 1.1.2.3 2021/11/02 18:42:01 tm Exp $
Fix CVE-2021-23336: Add `separator` argument to parse_qs; warn with default
Via Fedora:
@@ -42,7 +42,7 @@ https://src.fedoraproject.org/rpms/python2.7/blob/rawhide/f/00359-CVE-2021-23336
+
+# The default "separator" for parse_qsl can be specified in a config file.
+# It's cached after first read.
-+#_QS_SEPARATOR_CONFIG_FILENAME = '/etc/python/urllib.cfg'
++_QS_SEPARATOR_CONFIG_FILENAME = '@PKG_SYSCONFDIR@/python/urllib.cfg'
+_default_qs_separator = None
+
+def parse_qsl(qs, keep_blank_values=0, strict_parsing=0, max_num_fields=None,