Subject: CVS commit: [pkgsrc-2017Q1] pkgsrc/devel/py-mercurial
From: Benny Siegert
Date: 2017-04-29 21:31:54
Message id: 20170429193154.BFFB4FBE4@cvs.NetBSD.org

Log Message:
Pullup ticket #5326 - requested by sevan
devel/py-mercurial: security fix

Revisions pulled up:
- devel/py-mercurial/Makefile.version                           1.48
- devel/py-mercurial/distinfo                                   1.48

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Wed Apr 19 17:17:52 UTC 2017

   Modified Files:
           pkgsrc/devel/py-mercurial: Makefile.version distinfo

   Log Message:
   Updated py-mercurial to 4.1.3.

   Mercurial 4.1.3 (2017-4-18)

   This is an out of cycle release to address a security issue:

       hg serve --stdio could be tricked into granting authorized users
   access to the Python debugger. Thanks to Jonathan Claudius of Mozilla
   for reporting this issue

Files:
RevisionActionfile
1.46.2.1modifypkgsrc/devel/py-mercurial/Makefile.version
1.46.2.1modifypkgsrc/devel/py-mercurial/distinfo