pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/devel/py-mercurial py-mercurial: update to 4.4.1.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/bf04d76f2206
branches:  trunk
changeset: 371874:bf04d76f2206
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Thu Nov 23 20:44:47 2017 +0000

description:
py-mercurial: update to 4.4.1.

1.1. Notable changes

    Git and Subversion subrepos have been disabled by default to
    mitigate a potential security risk if files overlapping with
    a subrepo managed to be committed to a repository.
    Subrepos are now more paranoid about symlink traversal.
    The share extension handles drive letters on Windows better.

It is possible that a specially malformed repository can cause Git
subrepositories to run arbitrary code in the form of a
.git/hooks/post-update script checked in to the repository in
Mercurial 4.4 and earlier. Typical use of Mercurial prevents
construction of such repositories, but they can be created
programmatically.

diffstat:

 devel/py-mercurial/Makefile.version |   4 ++--
 devel/py-mercurial/distinfo         |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 2a2b5047e88d -r bf04d76f2206 devel/py-mercurial/Makefile.version
--- a/devel/py-mercurial/Makefile.version       Thu Nov 23 20:41:15 2017 +0000
+++ b/devel/py-mercurial/Makefile.version       Thu Nov 23 20:44:47 2017 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile.version,v 1.53 2017/11/07 13:16:07 wiz Exp $
+# $NetBSD: Makefile.version,v 1.54 2017/11/23 20:44:47 wiz Exp $
 
-VERSION=       4.4
+VERSION=       4.4.1
 
 PYTHON_VERSIONS_INCOMPATIBLE=  34 35 36 # not yet ported as of 3.9
 # see also https://www.mercurial-scm.org/wiki/SupportedPythonVersions
diff -r 2a2b5047e88d -r bf04d76f2206 devel/py-mercurial/distinfo
--- a/devel/py-mercurial/distinfo       Thu Nov 23 20:41:15 2017 +0000
+++ b/devel/py-mercurial/distinfo       Thu Nov 23 20:44:47 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.55 2017/11/07 13:16:07 wiz Exp $
+$NetBSD: distinfo,v 1.56 2017/11/23 20:44:47 wiz Exp $
 
-SHA1 (mercurial-4.4.tar.gz) = f4241cad58d8f00bed56b5539c9186c084dfbdc4
-RMD160 (mercurial-4.4.tar.gz) = 3f8fc6ef15adfdcaae36bd99fb1b9663b0ed0119
-SHA512 (mercurial-4.4.tar.gz) = c8fc00a0ab38040bbbcf41de8eba90feec2df5ae021b9539e543f4f5437550e390e7451f7663b9994dc0d42893786600fd3c20b91156e834e2a97f7b79e2157e
-Size (mercurial-4.4.tar.gz) = 5633529 bytes
+SHA1 (mercurial-4.4.1.tar.gz) = 99fedcebccdb53f67aefaba5cdade9e84d79cf7e
+RMD160 (mercurial-4.4.1.tar.gz) = 7f7affb0e86e096f60a8cdec1fd16ac2037e9087
+SHA512 (mercurial-4.4.1.tar.gz) = 4c87adb6d3d30f7f9211eee64df727aefdac246be3ca9e3af412b76c32b76d701b19e00ca339168446ee5e20fad2ffc24f0c87438b6bda954560108235ab14a8
+Size (mercurial-4.4.1.tar.gz) = 5636532 bytes



Home | Main Index | Thread Index | Old Index