Subject: CVS commit: pkgsrc/devel/py-hg-git
From: Thomas Klausner
Date: 2017-09-03 16:16:43
Message id: 20170903141643.864F3FA97@cvs.NetBSD.org

Log Message:
Updated py-hg-git to 0.8.9.

hg-git 0.8.9 has just been tagged and uploaded to PyPI. This release
is compatible with the just-released Mercurial 4.3.

This release includes a fix for CVE-2017-1000116. From the Mercurial
release announcement:

Mercurial was not sanitizing hostnames passed to ssh, allowing shell
injection attacks by specifying a hostname starting with -oProxyCommand.
This is also present in Git (CVE-2017-1000117) and Subversion
(CVE-2017-9800), so please patch those tools as well if you have
them installed. All three tools are doing their security release
today.

Files:
RevisionActionfile
1.8modifypkgsrc/devel/py-hg-git/Makefile
1.5modifypkgsrc/devel/py-hg-git/distinfo