Subject: CVS commit: [pkgsrc-2016Q4] pkgsrc/www/viewvc
From: Benny Siegert
Date: 2017-02-09 20:47:25
Message id: 20170209194725.C56E8FBE3@cvs.NetBSD.org

Log Message:
Pullup ticket #5209 - requested by wiz
www/viewvc: security fix

Revisions pulled up:
- www/viewvc/Makefile                                           1.27
- www/viewvc/distinfo                                           1.15

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Feb  8 20:00:34 UTC 2017

   Modified Files:
   	pkgsrc/www/viewvc: Makefile distinfo

   Log Message:
   Updated viewvc to 1.1.26.

   Version 1.1.26 (released 24-Jan-2017)

    * security fix: escape nav_data name to avoid XSS attack

   Version 1.1.25 (released 15-Sep-2016)

    * fix _rev2optrev assertion on long input

   Version 1.1.24 (released 02-Oct-2015)

    * fix minor bug in human_readable boolean calculation
    * allow hr_funout option to apply to unidiff diffs, too
    * fix infinite loop in rcsparse
    * fix iso8601 timezone offset handling (issue #542)
    * add support for renamed roots (issue #544)
    * fix minor buglet in viewvc-install error message

Files:
RevisionActionfile
1.25.4.1modifypkgsrc/www/viewvc/Makefile
1.14.10.1modifypkgsrc/www/viewvc/distinfo