CVS commit: pkgsrc/shells/fish

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Dec  8 19:59:47 UTC 2023

Modified Files:
        pkgsrc/shells/fish: Makefile distinfo

Log Message:
fish: update to 3.6.2.

fish 3.6.2 (released December 4, 2023)
======================================

This release of fish contains a security fix for CVE-2023-49284, a minor security problem identified
in fish 3.6.1 and previous versions (thought to affect all released versions of fish).

fish uses certain Unicode non-characters internally for marking wildcards and expansions. It
incorrectly allowed these markers to be read on command substitution output, rather than
transforming them into a safe internal representation.

For example, ``echo \UFDD2HOME`` has the same output as ``echo $HOME``.

While this may cause unexpected behavior with direct input, this may become a minor security problem
if the output is being fed from an external program into a command substitution where this output
may not be expected.


To generate a diff of this commit:
cvs rdiff -u -r1.46 -r1.47 pkgsrc/shells/fish/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/shells/fish/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/shells/fish/Makefile
diff -u pkgsrc/shells/fish/Makefile:1.46 pkgsrc/shells/fish/Makefile:1.47
--- pkgsrc/shells/fish/Makefile:1.46    Thu Nov  9 08:33:40 2023
+++ pkgsrc/shells/fish/Makefile Fri Dec  8 19:59:46 2023
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.46 2023/11/09 08:33:40 wiz Exp $
+# $NetBSD: Makefile,v 1.47 2023/12/08 19:59:46 wiz Exp $
 
-DISTNAME=              fish-3.6.1
-PKGREVISION=           1
+DISTNAME=              fish-3.6.2
 CATEGORIES=            shells
 MASTER_SITES=          ${MASTER_SITE_GITHUB:=fish-shell/}
 GITHUB_PROJECT=                fish-shell
@@ -51,7 +50,7 @@ post-extract:
        ${MV} ${WRKSRC}/version ${WRKSRC}/version.txt
 
 # wiz 20231109:
-# as of fish-3.6.1, the ninja generator has problems in some environments:
+# as of fish-3.6.2, the ninja generator has problems in some environments:
 # ninja: error: manifest 'build.ninja' still dirty after 100 tries, perhaps system time is not set
 CMAKE_GENERATOR=       make
 

Index: pkgsrc/shells/fish/distinfo
diff -u pkgsrc/shells/fish/distinfo:1.33 pkgsrc/shells/fish/distinfo:1.34
--- pkgsrc/shells/fish/distinfo:1.33    Tue May 16 17:04:56 2023
+++ pkgsrc/shells/fish/distinfo Fri Dec  8 19:59:46 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.33 2023/05/16 17:04:56 wiz Exp $
+$NetBSD: distinfo,v 1.34 2023/12/08 19:59:46 wiz Exp $
 
-BLAKE2s (fish-3.6.1.tar.xz) = 5b007915483fc83345adbda7f531352019ba44c7122dbcded5cb7b949dd4252b
-SHA512 (fish-3.6.1.tar.xz) = ee6f5c7699307d515f111c8c4f1633d9eb9703e045a93cfc2fcec722a03cca4ab25e4e09f6fd94ff2d07180d8b37c6ab733323bb2645065fdeb4e94771347597
-Size (fish-3.6.1.tar.xz) = 2866100 bytes
+BLAKE2s (fish-3.6.2.tar.xz) = b0edd7c7c7f205360a7d785aedb8c43f13446024cea19b1d268deee1ec414b35
+SHA512 (fish-3.6.2.tar.xz) = ee28b49a8c19cdc2613ed0b729eb6c8b686062a5e505357b045b67a64c9e4f5f6a308c58c6756a39c5edc4a9237afee9fc25763ce6b73b30cdb5ee5f21b2ac5d
+Size (fish-3.6.2.tar.xz) = 2911032 bytes
 SHA1 (patch-build__tools_git__version__gen.sh) = d66abecc900fa411f6da9c5fbb9f70f533025a49
 SHA1 (patch-cmake_ConfigureChecks.cmake) = e1a80dcd64dde555483b0253d4463f570ca16cc6
 SHA1 (patch-cmake_Install.cmake) = 1defcb125ab0082649f1b6e592df96a9c5d49c0a