Skip to content

Commit

Permalink
Pullup ticket #6210 - requested by adam
Browse files Browse the repository at this point in the history
www/py-httplib2: security fix

Revisions pulled up:
- www/py-httplib2/Makefile                                      1.24-1.25
- www/py-httplib2/distinfo                                      1.21-1.22

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Wed May 20 15:29:53 UTC 2020

   Modified Files:
           pkgsrc/www/py-httplib2: Makefile distinfo

   Log Message:
   py-httplib2: updated to 0.18.0

   0.18.0
   IMPORTANT security vulnerability CWE-93 CRLF injection
   Force %xx quote of space, CR, LF characters in uri.
   Special thanks to Recar https://github.com/Ciyfly for discrete notification.
   https://cwe.mitre.org/data/definitions/93.html

   0.17.4
   Ship test suite in source dist
   httplib2/httplib2#168

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu May 21 06:19:59 UTC 2020

   Modified Files:
           pkgsrc/www/py-httplib2: Makefile distinfo

   Log Message:
   py-httplib2: updated to 0.18.1

   0.18.1
   explicit build-backend workaround for pip build isolation bug
   "AttributeError: 'module' object has no attribute '__legacy__'" on pip install
  • Loading branch information
bsiegert committed May 26, 2020
1 parent 2de21ce commit 269e243
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 7 deletions.
4 changes: 2 additions & 2 deletions www/py-httplib2/Makefile
@@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.20 2020/01/25 12:45:47 adam Exp $
# $NetBSD: Makefile,v 1.20.2.1 2020/05/26 18:33:18 bsiegert Exp $

DISTNAME= httplib2-0.17.0
DISTNAME= httplib2-0.18.1
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
CATEGORIES= www python
MASTER_SITES= ${MASTER_SITE_PYPI:=h/httplib2/}
Expand Down
10 changes: 5 additions & 5 deletions www/py-httplib2/distinfo
@@ -1,6 +1,6 @@
$NetBSD: distinfo,v 1.17 2020/01/25 12:45:47 adam Exp $
$NetBSD: distinfo,v 1.17.2.1 2020/05/26 18:33:18 bsiegert Exp $

SHA1 (httplib2-0.17.0.tar.gz) = 90670279a4ce86869c6d5506d1f03cd75c04a47c
RMD160 (httplib2-0.17.0.tar.gz) = 1823568e65f396c1ec76baaa07c71cdb05e4321d
SHA512 (httplib2-0.17.0.tar.gz) = 8724e5784990e7315762e5f8333197d6f6820aa6cc66aebbeb981ccedb57e35fa998e623d7e0cd8fcb18178895bc73b16bdf015c90d2adf208d6d5320f3551bb
Size (httplib2-0.17.0.tar.gz) = 220694 bytes
SHA1 (httplib2-0.18.1.tar.gz) = 70966545702a15d85b7aff8dba31cb9ef48d2a5d
RMD160 (httplib2-0.18.1.tar.gz) = b35ce49335613fdb2bb59b07c48b1633b9a1c6ba
SHA512 (httplib2-0.18.1.tar.gz) = a1bb527279bdc92fb75bffebc317ff549bb6efb678580cbe40d187921b7ace66b1a5bc1d98bdf065ec5667fe69632da086b0eb201ff911497324fd817bfe1b7a
Size (httplib2-0.18.1.tar.gz) = 262930 bytes

0 comments on commit 269e243

Please sign in to comment.