[pkgsrc/pkgsrc-2020Q1]: pkgsrc/www/py-httplib2 Pullup ticket #6210 - requeste...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b3424ba8be9c
branches:  pkgsrc-2020Q1
changeset: 432887:b3424ba8be9c
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Tue May 26 18:33:18 2020 +0000

description:
Pullup ticket #6210 - requested by adam
www/py-httplib2: security fix

Revisions pulled up:
- www/py-httplib2/Makefile                                      1.24-1.25
- www/py-httplib2/distinfo                                      1.21-1.22

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Wed May 20 15:29:53 UTC 2020

   Modified Files:
           pkgsrc/www/py-httplib2: Makefile distinfo

   Log Message:
   py-httplib2: updated to 0.18.0

   0.18.0
   IMPORTANT security vulnerability CWE-93 CRLF injection
   Force %xx quote of space, CR, LF characters in uri.
   Special thanks to Recar https://github.com/Ciyfly for discrete notification.
   https://cwe.mitre.org/data/definitions/93.html

   0.17.4
   Ship test suite in source dist
   https://github.com/httplib2/httplib2/pull/168

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Thu May 21 06:19:59 UTC 2020

   Modified Files:
           pkgsrc/www/py-httplib2: Makefile distinfo

   Log Message:
   py-httplib2: updated to 0.18.1

   0.18.1
   explicit build-backend workaround for pip build isolation bug
   "AttributeError: 'module' object has no attribute '__legacy__'" on pip install

diffstat:

 www/py-httplib2/Makefile |   4 ++--
 www/py-httplib2/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r bd80a4b43e2b -r b3424ba8be9c www/py-httplib2/Makefile
--- a/www/py-httplib2/Makefile  Tue May 26 18:26:06 2020 +0000
+++ b/www/py-httplib2/Makefile  Tue May 26 18:33:18 2020 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.20 2020/01/25 12:45:47 adam Exp $
+# $NetBSD: Makefile,v 1.20.2.1 2020/05/26 18:33:18 bsiegert Exp $
 
-DISTNAME=      httplib2-0.17.0
+DISTNAME=      httplib2-0.18.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=h/httplib2/}
diff -r bd80a4b43e2b -r b3424ba8be9c www/py-httplib2/distinfo
--- a/www/py-httplib2/distinfo  Tue May 26 18:26:06 2020 +0000
+++ b/www/py-httplib2/distinfo  Tue May 26 18:33:18 2020 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2020/01/25 12:45:47 adam Exp $
+$NetBSD: distinfo,v 1.17.2.1 2020/05/26 18:33:18 bsiegert Exp $
 
-SHA1 (httplib2-0.17.0.tar.gz) = 90670279a4ce86869c6d5506d1f03cd75c04a47c
-RMD160 (httplib2-0.17.0.tar.gz) = 1823568e65f396c1ec76baaa07c71cdb05e4321d
-SHA512 (httplib2-0.17.0.tar.gz) = 8724e5784990e7315762e5f8333197d6f6820aa6cc66aebbeb981ccedb57e35fa998e623d7e0cd8fcb18178895bc73b16bdf015c90d2adf208d6d5320f3551bb
-Size (httplib2-0.17.0.tar.gz) = 220694 bytes
+SHA1 (httplib2-0.18.1.tar.gz) = 70966545702a15d85b7aff8dba31cb9ef48d2a5d
+RMD160 (httplib2-0.18.1.tar.gz) = b35ce49335613fdb2bb59b07c48b1633b9a1c6ba
+SHA512 (httplib2-0.18.1.tar.gz) = a1bb527279bdc92fb75bffebc317ff549bb6efb678580cbe40d187921b7ace66b1a5bc1d98bdf065ec5667fe69632da086b0eb201ff911497324fd817bfe1b7a
+Size (httplib2-0.18.1.tar.gz) = 262930 bytes