Path to this page:
Subject: CVS commit: [pkgsrc-2017Q1] pkgsrc/devel/py-mercurial
From: Benny Siegert
Date: 2017-04-29 21:31:54
Message id: 20170429193154.BFFB4FBE4@cvs.NetBSD.org
Log Message:
Pullup ticket #5326 - requested by sevan
devel/py-mercurial: security fix
Revisions pulled up:
- devel/py-mercurial/Makefile.version 1.48
- devel/py-mercurial/distinfo 1.48
---
Module Name: pkgsrc
Committed By: wiz
Date: Wed Apr 19 17:17:52 UTC 2017
Modified Files:
pkgsrc/devel/py-mercurial: Makefile.version distinfo
Log Message:
Updated py-mercurial to 4.1.3.
Mercurial 4.1.3 (2017-4-18)
This is an out of cycle release to address a security issue:
hg serve --stdio could be tricked into granting authorized users
access to the Python debugger. Thanks to Jonathan Claudius of Mozilla
for reporting this issue
Files: