Path to this page:
Subject: CVS commit: [pkgsrc-2020Q1] pkgsrc/www/py-httplib2
From: Benny Siegert
Date: 2020-05-26 20:33:19
Message id: 20200526183319.25739FB27@cvs.NetBSD.org
Log Message:
Pullup ticket #6210 - requested by adam
www/py-httplib2: security fix
Revisions pulled up:
- www/py-httplib2/Makefile 1.24-1.25
- www/py-httplib2/distinfo 1.21-1.22
---
Module Name: pkgsrc
Committed By: adam
Date: Wed May 20 15:29:53 UTC 2020
Modified Files:
pkgsrc/www/py-httplib2: Makefile distinfo
Log Message:
py-httplib2: updated to 0.18.0
0.18.0
IMPORTANT security vulnerability CWE-93 CRLF injection
Force %xx quote of space, CR, LF characters in uri.
Special thanks to Recar https://github.com/Ciyfly for discrete notification.
https://cwe.mitre.org/data/definitions/93.html
0.17.4
Ship test suite in source dist
https://github.com/httplib2/httplib2/pull/168
---
Module Name: pkgsrc
Committed By: adam
Date: Thu May 21 06:19:59 UTC 2020
Modified Files:
pkgsrc/www/py-httplib2: Makefile distinfo
Log Message:
py-httplib2: updated to 0.18.1
0.18.1
explicit build-backend workaround for pip build isolation bug
"AttributeError: 'module' object has no attribute '__legacy__'" on \
pip install
Files: