CVS commit: [pkgsrc-2016Q4] pkgsrc/www/viewvc

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Thu Feb  9 19:47:25 UTC 2017

Modified Files:
        pkgsrc/www/viewvc [pkgsrc-2016Q4]: Makefile distinfo

Log Message:
Pullup ticket #5209 - requested by wiz
www/viewvc: security fix

Revisions pulled up:
- www/viewvc/Makefile                                           1.27
- www/viewvc/distinfo                                           1.15

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Feb  8 20:00:34 UTC 2017

   Modified Files:
        pkgsrc/www/viewvc: Makefile distinfo

   Log Message:
   Updated viewvc to 1.1.26.

   Version 1.1.26 (released 24-Jan-2017)

    * security fix: escape nav_data name to avoid XSS attack

   Version 1.1.25 (released 15-Sep-2016)

    * fix _rev2optrev assertion on long input

   Version 1.1.24 (released 02-Oct-2015)

    * fix minor bug in human_readable boolean calculation
    * allow hr_funout option to apply to unidiff diffs, too
    * fix infinite loop in rcsparse
    * fix iso8601 timezone offset handling (issue #542)
    * add support for renamed roots (issue #544)
    * fix minor buglet in viewvc-install error message


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.25.4.1 pkgsrc/www/viewvc/Makefile
cvs rdiff -u -r1.14 -r1.14.10.1 pkgsrc/www/viewvc/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/viewvc/Makefile
diff -u pkgsrc/www/viewvc/Makefile:1.25 pkgsrc/www/viewvc/Makefile:1.25.4.1
--- pkgsrc/www/viewvc/Makefile:1.25     Sat Jul  9 13:04:16 2016
+++ pkgsrc/www/viewvc/Makefile  Thu Feb  9 19:47:25 2017
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.25 2016/07/09 13:04:16 wiz Exp $
+# $NetBSD: Makefile,v 1.25.4.1 2017/02/09 19:47:25 bsiegert Exp $
 
-DISTNAME=      viewvc-1.1.23
+DISTNAME=      viewvc-1.1.26
 CATEGORIES=    devel www
-MASTER_SITES=  http://viewvc.tigris.org/files/documents/3330/49392/
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=viewvc/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      http://www.viewvc.org/
@@ -10,7 +10,8 @@ COMMENT=      Viewing the content of CVS/SVN 
 LICENSE=       2-clause-bsd
 
 REPLACE_PYTHON=        viewvc-install bin/* bin/cgi/*.cgi lib/*.py
-PYTHON_VERSIONS_INCOMPATIBLE=  34 35 # not yet ported as of 1.1.20
+# https://github.com/viewvc/viewvc/issues/138
+PYTHON_VERSIONS_INCOMPATIBLE=  34 35 # not yet ported as of 1.1.26
 
 .if !exists(/usr/bin/rlog)
 DEPENDS+=      rcs-[0-9]*:../../devel/rcs

Index: pkgsrc/www/viewvc/distinfo
diff -u pkgsrc/www/viewvc/distinfo:1.14 pkgsrc/www/viewvc/distinfo:1.14.10.1
--- pkgsrc/www/viewvc/distinfo:1.14     Wed Nov  4 02:47:41 2015
+++ pkgsrc/www/viewvc/distinfo  Thu Feb  9 19:47:25 2017
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.14 2015/11/04 02:47:41 agc Exp $
+$NetBSD: distinfo,v 1.14.10.1 2017/02/09 19:47:25 bsiegert Exp $
 
-SHA1 (viewvc-1.1.23.tar.gz) = c4ffc06bdbb26a1dbb43e40ec3eb139968bf1302
-RMD160 (viewvc-1.1.23.tar.gz) = 331e7ef078214c1387ff3a4e19fda045dcf5428a
-SHA512 (viewvc-1.1.23.tar.gz) = e30dc21186eed4c11f9227fb51fffcfe84eeb2e0c872ca84673759a9bad25ca92c789db35b5c2c6470099b35182e8c190e7c5f1fdc2fdd5e68e0a935e59702f5
-Size (viewvc-1.1.23.tar.gz) = 617787 bytes
+SHA1 (viewvc-1.1.26.tar.gz) = 635a5a801adec8f2508a73450b900dae1cefe043
+RMD160 (viewvc-1.1.26.tar.gz) = defb4cf8c5c78a805d4aebc22c0d56f45eff9275
+SHA512 (viewvc-1.1.26.tar.gz) = 935a873166f67339ed6f5db46ffec1e04213aa1369a51da1100725f7dc34834fa8e62030253eaebc032676af75a7f912875c7804272b7c56dee1c865b6a9f80d
+Size (viewvc-1.1.26.tar.gz) = 666278 bytes
 SHA1 (patch-aa) = ff0a6e52ea66c838ba3ab7b1d055c27bf561a376
 SHA1 (patch-ab) = f5abf6bd824d121338882423c34e3464c8ba5fd4