Subject: CVS commit: pkgsrc/net/py-twisted
From: Thomas Klausner
Date: 2014-09-18 00:41:06
Message id: 20140917224106.29FE898@cvs.netbsd.org

Log Message:
Update to 14.0.1 -- security update:

On behalf of Twisted Matrix Laboratories, Iâm releasing Twisted
14.0.1, a security release for Twisted 14.0. It is strongly suggested
that users of 14.0.0 upgrade to this release.

This patches a bug in Twisted Webâs Agent, where BrowserLikePolicyForHTTPS
would not honour the trust root given, and would use the system
trust root instead. This would have broken, for example, attempting
to pin the issuer for your HTTPS application because you only trust
one issuer.

Note: on OS X, with the system OpenSSL, you still can't fully rely
on this API for issuer pinning, due to modifications by Apple â
please see https://hynek.me/articles/apple-openssl-verification-surprises/
for more details.

Files:
RevisionActionfile
1.17modifypkgsrc/net/py-twisted/Makefile.common
1.15modifypkgsrc/net/py-twisted/distinfo