CVS commit: pkgsrc/devel/py-bugzilla

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Apr 29 18:57:35 UTC 2024

Modified Files:
        pkgsrc/devel/py-bugzilla: Makefile distinfo
Added Files:
        pkgsrc/devel/py-bugzilla/patches: patch-bugzilla___session.py

Log Message:
devel/py-python-bugzilla: Fix for API key leak

>From Ricardo Branco in PR pkg/58213.
Fixes NetBSD/pkgsrc#138.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 pkgsrc/devel/py-bugzilla/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/devel/py-bugzilla/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/devel/py-bugzilla/patches/patch-bugzilla___session.py

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-bugzilla/Makefile
diff -u pkgsrc/devel/py-bugzilla/Makefile:1.6 pkgsrc/devel/py-bugzilla/Makefile:1.7
--- pkgsrc/devel/py-bugzilla/Makefile:1.6       Fri Jul  8 14:01:33 2022
+++ pkgsrc/devel/py-bugzilla/Makefile   Mon Apr 29 18:57:35 2024
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.6 2022/07/08 14:01:33 wiz Exp $
+# $NetBSD: Makefile,v 1.7 2024/04/29 18:57:35 bsiegert Exp $
 
 DISTNAME=      python-bugzilla-3.2.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
+PKGREVISION=   1
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/python-bugzilla/}
 

Index: pkgsrc/devel/py-bugzilla/distinfo
diff -u pkgsrc/devel/py-bugzilla/distinfo:1.5 pkgsrc/devel/py-bugzilla/distinfo:1.6
--- pkgsrc/devel/py-bugzilla/distinfo:1.5       Fri Jul  8 14:01:33 2022
+++ pkgsrc/devel/py-bugzilla/distinfo   Mon Apr 29 18:57:35 2024
@@ -1,5 +1,6 @@
-$NetBSD: distinfo,v 1.5 2022/07/08 14:01:33 wiz Exp $
+$NetBSD: distinfo,v 1.6 2024/04/29 18:57:35 bsiegert Exp $
 
 BLAKE2s (python-bugzilla-3.2.0.tar.gz) = d92cf6d3e3defd7f44349756507f631041851581395b3a303159d692201f441d
 SHA512 (python-bugzilla-3.2.0.tar.gz) = 215945a0ffd637be5567839303a738a0eef74427838bf0074a5f0ab6022306f47fc0dd5c43a3513b627fb458711f38046321ee9c2c3d43b61ffc577d6dd12375
 Size (python-bugzilla-3.2.0.tar.gz) = 114279 bytes
+SHA1 (patch-bugzilla___session.py) = 134ed66dae860195941dfc9c908b525a11112246

Added files:

Index: pkgsrc/devel/py-bugzilla/patches/patch-bugzilla___session.py
diff -u /dev/null pkgsrc/devel/py-bugzilla/patches/patch-bugzilla___session.py:1.1
--- /dev/null   Mon Apr 29 18:57:35 2024
+++ pkgsrc/devel/py-bugzilla/patches/patch-bugzilla___session.py        Mon Apr 29 18:57:35 2024
@@ -0,0 +1,26 @@
+$NetBSD: patch-bugzilla___session.py,v 1.1 2024/04/29 18:57:35 bsiegert Exp $
+
+Fix for API key leak, https://github.com/python-bugzilla/python-bugzilla/issues/187
+--- bugzilla/_session.py.orig  2021-10-05 20:49:16.000000000 +0000
++++ bugzilla/_session.py
+@@ -97,14 +97,14 @@ class _BugzillaSession(object):
+         if "timeout" not in kwargs:
+             kwargs["timeout"] = timeout
+ 
+-        response = self._session.request(*args, **kwargs)
++        try:
++            response = self._session.request(*args, **kwargs)
+ 
+-        if self._is_xmlrpc:
+-            # Yes this still appears to matter for properly decoding unicode
+-            # code points in bugzilla.redhat.com content
+-            response.encoding = "UTF-8"
++            if self._is_xmlrpc:
++                # Yes this still appears to matter for properly decoding unicode
++                # code points in bugzilla.redhat.com content
++                response.encoding = "UTF-8"
+ 
+-        try:
+             response.raise_for_status()
+         except Exception as e:
+             # Scrape the api key out of the returned exception string