CVS commit: pkgsrc/lang/python27

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Sun Sep 27 14:57:22 UTC 2020

Modified Files:
        pkgsrc/lang/python27: distinfo
        pkgsrc/lang/python27/patches: patch-Lib_httplib.py
            patch-Lib_test_test__httplib.py

Log Message:
python27: Add reference to CVE-2020-26116 in patches for bpo-39603


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.81 pkgsrc/lang/python27/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/lang/python27/patches/patch-Lib_httplib.py \
    pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/python27/distinfo
diff -u pkgsrc/lang/python27/distinfo:1.80 pkgsrc/lang/python27/distinfo:1.81
--- pkgsrc/lang/python27/distinfo:1.80  Sun Sep 20 12:50:26 2020
+++ pkgsrc/lang/python27/distinfo       Sun Sep 27 14:57:22 2020
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.80 2020/09/20 12:50:26 mgorny Exp $
+$NetBSD: distinfo,v 1.81 2020/09/27 14:57:22 leot Exp $
 
 SHA1 (Python-2.7.18.tar.xz) = 678d4cf483a1c92efd347ee8e1e79326dc82810b
 RMD160 (Python-2.7.18.tar.xz) = 40a514bb05c9e631454ea8466e28f5bb229428ad
@@ -13,13 +13,13 @@ SHA1 (patch-Lib_distutils_command_instal
 SHA1 (patch-Lib_distutils_command_install__egg__info.py) = ec7f9e0cd04489b1f6497c44d75bff6864ad1047
 SHA1 (patch-Lib_distutils_unixccompiler.py) = db16c9aca2f29730945f28247b88b18828739bbb
 SHA1 (patch-Lib_distutils_util.py) = 5bcfad96f8e490351160f1a7c1f4ece7706a33fa
-SHA1 (patch-Lib_httplib.py) = f4c781427342dc65096345da779e4d8c22b83986
+SHA1 (patch-Lib_httplib.py) = 375d80eb79209f53046c62db128d8d3f64d9e765
 SHA1 (patch-Lib_lib2to3_pgen2_driver.py) = 5d6dab14197f27363394ff1aeee22a8ced8026d2
 SHA1 (patch-Lib_multiprocessing_process.py) = 15699bd8ec822bf54a0631102e00e0a34f882803
 SHA1 (patch-Lib_plistlib.py) = 96ae702995d434e2d7ec0ac62e37427a90b61d13
 SHA1 (patch-Lib_sysconfig.py) = 8a7a0e5cbfec279a05945dffafea1b1131a76f0e
 SHA1 (patch-Lib_tarfile.py) = df00aa1941367c42dcbbed4b6658b724a22ddcde
-SHA1 (patch-Lib_test_test__httplib.py) = 1103089fe06fc2091be60caa5688cd5acc792ca0
+SHA1 (patch-Lib_test_test__httplib.py) = 9d37263e36110838e0b5f413ff4747deb3966dfe
 SHA1 (patch-Lib_test_test__urllib2.py) = 09013a0b4a3e6064cbfe96572e47464c5d6ef047
 SHA1 (patch-Lib_urllib2.py) = 33a85593da702447fa3ea74b4e3d36d0016f70b5
 SHA1 (patch-Makefile.pre.in) = ceaf34237588b527478ce1f9163c9168382fa201

Index: pkgsrc/lang/python27/patches/patch-Lib_httplib.py
diff -u pkgsrc/lang/python27/patches/patch-Lib_httplib.py:1.2 pkgsrc/lang/python27/patches/patch-Lib_httplib.py:1.3
--- pkgsrc/lang/python27/patches/patch-Lib_httplib.py:1.2       Sun Sep 20 12:10:27 2020
+++ pkgsrc/lang/python27/patches/patch-Lib_httplib.py   Sun Sep 27 14:57:22 2020
@@ -1,6 +1,6 @@
-$NetBSD: patch-Lib_httplib.py,v 1.2 2020/09/20 12:10:27 mgorny Exp $
+$NetBSD: patch-Lib_httplib.py,v 1.3 2020/09/27 14:57:22 leot Exp $
 
-bpo-39603 (no CVE): header injection via HTTP method
+bpo-39603 (CVE-2020-26116): header injection via HTTP method
 
 taken from:
 https://gitweb.gentoo.org/fork/cpython.git/commit/?h=gentoo-2.7-vanilla&id=138e2caeb4827ccfd1eaff2cf63afb79dfeeb3c4
Index: pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py
diff -u pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py:1.2 pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py:1.3
--- pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py:1.2    Sun Sep 20 12:10:27 2020
+++ pkgsrc/lang/python27/patches/patch-Lib_test_test__httplib.py        Sun Sep 27 14:57:22 2020
@@ -1,6 +1,6 @@
-$NetBSD: patch-Lib_test_test__httplib.py,v 1.2 2020/09/20 12:10:27 mgorny Exp $
+$NetBSD: patch-Lib_test_test__httplib.py,v 1.3 2020/09/27 14:57:22 leot Exp $
 
-bpo-39603 (no CVE): header injection via HTTP method
+bpo-39603 (CVE-2020-26116): header injection via HTTP method
 
 taken from:
 https://gitweb.gentoo.org/fork/cpython.git/commit/?h=gentoo-2.7-vanilla&id=138e2caeb4827ccfd1eaff2cf63afb79dfeeb3c4