CVS commit: pkgsrc

["Emmanuel Dreyfus" <manu%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   manu
Date:           Tue Jun  8 07:34:48 UTC 2021

Modified Files:
        pkgsrc/doc: CHANGES-2021
        pkgsrc/security/lasso: Makefile Makefile.common buildlink3.mk distinfo
Removed Files:
        pkgsrc/security/lasso/patches: patch-45581

Log Message:
Update lasso to 2.7.0

Changes from 2.6.1, from the NEWS file

2.7.0 - June 1st 2021
----------------------
36 commits, 45 files changed, 1945 insertions, 177 deletions

* CVE-2021-28091: Fix signature checking on unsigned response with multiple assertions

  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28091

  When AuthnResponse messages are not signed (which is
  permitted by the specifiation), all assertion's signatures should be
  checked, but currently after the first signed assertion is checked all
  following assertions are accepted without checking their signature, and
  the last one is considered the main assertion.

  This patch :
  * check signatures from all assertions if the message is not signed,
  * refuse messages with assertion from different issuers than the one on
    the message, to prevent assertion bundling event if they are signed.

* Python: improve display of warnings in the binding generator
* replace deprecated index() by strchr() (#51385)
* Fix: new provider reference count is incremented one time too many (#51420)
* docs: update gtk-doc-tools integration (#50441)
* bindings: disable java tests when java is disabled
* Fix: python3 bindings (#51249)
* configure.ac: disable java bindings
* build: update to use origin/main
* debian: add packaging for debian-buster
* jenkins.sh: build against all available python versions (#44287)
* python: do not leak out_pyvalue if method call protocol is not respected (#44287)
* python: do not raise in valid_seq() (#44287)
* python: return NULL if get_list_of_strings() fails (#44287)
* python: return NULL if get_list_of_pygobject fails (#44287)
* python: return NULL if get_list_of_xml_nodes fails (#44287)
* python: return NULL if set_list_of_pygobject fails (#44287)
* python: return NULL if set_list_of_xml_nodes fails (#44287)
* python: return NULL if set_list_of_strings fails (#44287)
* python: return NULL if set_hashtable_of_strings fails (#44287)
* python: return NULL if set_hashtable_of_pygobject fails (#44287)
* python: free internal string buffer if needed in set_list_of_strings (#44287)
* python: check if hashtable is NULL before deallocatio (#44287)n
* python: add a failure label to method wrappers (#44287)
* python: add macro for early return (#44287)
* python: remove newline before method call (#44287)
* python: simplify get_logger_object (#44287)
* python: fix warning about discarded const modifier (#44287)
* python: replace exception by warning on logging path (#44287)
* python: use simpler call format to prevent warning about PY_SSIZE_T_CLEAN (#44287)
* python: remove deprecated PyErr_Warn (#44287)
* python: remove unused PyString_Size (#44287)
* python: Exception.message was removed in python3 (#45995)
* tools: reimplement xmlURIEscapeStr to respect RFC3986 (#45581)
* configure.ac: support php7 interpreter on CentOS 8 (#42299)


To generate a diff of this commit:
cvs rdiff -u -r1.3309 -r1.3310 pkgsrc/doc/CHANGES-2021
cvs rdiff -u -r1.48 -r1.49 pkgsrc/security/lasso/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/security/lasso/Makefile.common
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/lasso/buildlink3.mk
cvs rdiff -u -r1.25 -r1.26 pkgsrc/security/lasso/distinfo
cvs rdiff -u -r1.1 -r0 pkgsrc/security/lasso/patches/patch-45581

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/CHANGES-2021
diff -u pkgsrc/doc/CHANGES-2021:1.3309 pkgsrc/doc/CHANGES-2021:1.3310
--- pkgsrc/doc/CHANGES-2021:1.3309      Tue Jun  8 07:26:52 2021
+++ pkgsrc/doc/CHANGES-2021     Tue Jun  8 07:34:47 2021
@@ -1,4 +1,4 @@
-$NetBSD: CHANGES-2021,v 1.3309 2021/06/08 07:26:52 manu Exp $
+$NetBSD: CHANGES-2021,v 1.3310 2021/06/08 07:34:47 manu Exp $
 
 Changes to the packages collection and infrastructure in 2021:
 
@@ -5317,3 +5317,4 @@ Changes to the packages collection and i
        Added graphics/R-thematic version 0.1.2 [mef 2021-06-08]
        Added www/R-bslib version 0.2.5.1 [mef 2021-06-08]
        Updated www/ap2-auth-mellon to 0.17.0 [manu 2021-06-08]
+       Updated security/lasso to 2.7.0 [manu 2021-06-08]

Index: pkgsrc/security/lasso/Makefile
diff -u pkgsrc/security/lasso/Makefile:1.48 pkgsrc/security/lasso/Makefile:1.49
--- pkgsrc/security/lasso/Makefile:1.48 Mon May 24 19:53:52 2021
+++ pkgsrc/security/lasso/Makefile      Tue Jun  8 07:34:48 2021
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.48 2021/05/24 19:53:52 wiz Exp $
+# $NetBSD: Makefile,v 1.49 2021/06/08 07:34:48 manu Exp $
 
 CONFIGURE_ARGS+=       --disable-python
 CONFIGURE_ARGS+=       --disable-php5
+CONFIGURE_ARGS+=       --disable-php7
 CONFIGURE_ARGS+=       --disable-perl
 
 PYTHON_VERSIONS_ACCEPTED=      27 # not yet ported as of 2.4.1
@@ -10,5 +11,4 @@ PYTHON_FOR_BUILD_ONLY=                yes
 EXTRACT_USING=         bsdtar
 
 #PKGREVISION= 1
-PKGREVISION= 5
 .include "../../security/lasso/Makefile.common"

Index: pkgsrc/security/lasso/Makefile.common
diff -u pkgsrc/security/lasso/Makefile.common:1.16 pkgsrc/security/lasso/Makefile.common:1.17
--- pkgsrc/security/lasso/Makefile.common:1.16  Wed Aug 12 14:15:33 2020
+++ pkgsrc/security/lasso/Makefile.common       Tue Jun  8 07:34:48 2021
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.16 2020/08/12 14:15:33 manu Exp $
+# $NetBSD: Makefile.common,v 1.17 2021/06/08 07:34:48 manu Exp $
 #
 # used by security/lasso/Makefile
 # used by security/py-lasso/Makefile
 
-DISTNAME=      lasso-2.6.1
+DISTNAME=      lasso-2.7.0
 CATEGORIES=    security
 MASTER_SITES=  https://dev.entrouvert.org/lasso/
 

Index: pkgsrc/security/lasso/buildlink3.mk
diff -u pkgsrc/security/lasso/buildlink3.mk:1.19 pkgsrc/security/lasso/buildlink3.mk:1.20
--- pkgsrc/security/lasso/buildlink3.mk:1.19    Wed Apr 21 11:40:37 2021
+++ pkgsrc/security/lasso/buildlink3.mk Tue Jun  8 07:34:48 2021
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.19 2021/04/21 11:40:37 adam Exp $
+# $NetBSD: buildlink3.mk,v 1.20 2021/06/08 07:34:48 manu Exp $
 
 BUILDLINK_TREE+=       lasso
 
@@ -6,7 +6,7 @@ BUILDLINK_TREE+=        lasso
 LASSO_BUILDLINK3_MK:=
 
 BUILDLINK_API_DEPENDS.lasso+=  lasso>=2.2.1
-BUILDLINK_ABI_DEPENDS.lasso+=  lasso>=2.6.1nb4
+BUILDLINK_ABI_DEPENDS.lasso+=  lasso>=2.5.1nb6
 BUILDLINK_PKGSRCDIR.lasso?=    ../../security/lasso
 
 .include "../../security/xmlsec1/buildlink3.mk"

Index: pkgsrc/security/lasso/distinfo
diff -u pkgsrc/security/lasso/distinfo:1.25 pkgsrc/security/lasso/distinfo:1.26
--- pkgsrc/security/lasso/distinfo:1.25 Wed Aug 12 14:15:33 2020
+++ pkgsrc/security/lasso/distinfo      Tue Jun  8 07:34:48 2021
@@ -1,7 +1,6 @@
-$NetBSD: distinfo,v 1.25 2020/08/12 14:15:33 manu Exp $
+$NetBSD: distinfo,v 1.26 2021/06/08 07:34:48 manu Exp $
 
-SHA1 (lasso-2.6.1.tar.gz) = 0ab89b159d52cd503182cbbeff0327c80e3ed93d
-RMD160 (lasso-2.6.1.tar.gz) = 775d74fccf62afea9f8d587a1a7801e15ad7d986
-SHA512 (lasso-2.6.1.tar.gz) = 768e577ccf650d61305cbb2d8be0d3e13a5c8b6b05f6b0a8419fcd23030eb7530740e8ca785f0279331d7e31743b2e0ab234de50eb87d41cfda5d692a1583d4b
-Size (lasso-2.6.1.tar.gz) = 4514418 bytes
-SHA1 (patch-45581) = ea1a3c47ed61cce376d3998cdc195dfcfc881061
+SHA1 (lasso-2.7.0.tar.gz) = 7a4175eb925427504ac5d42bb3644a97fc188409
+RMD160 (lasso-2.7.0.tar.gz) = 6660050075bdd4c7dc64ed7a1f5203ca84097d20
+SHA512 (lasso-2.7.0.tar.gz) = 98615d6166cdec52abef4f5346119040f310dbee624c2cd168d2f95b5fe3e0e1437ec6bfc2cd8b680044438afa15770402f5aef87d1885f7bc61528617c17a74
+Size (lasso-2.7.0.tar.gz) = 6332202 bytes