CVS commit: pkgsrc

["Emmanuel Dreyfus" <manu%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   manu
Date:           Sat Mar 23 02:37:42 UTC 2019

Modified Files:
        pkgsrc/doc: CHANGES-2019
        pkgsrc/www/ap2-auth-mellon: Makefile distinfo

Log Message:
Updated www/ap2-auth-mellon to 0.14.2

Changes sine 0.14.0 include:
- Fix CVE-2019-3878 Authentication bypass when Apache is used as reverse proxy
- Fix CVE-2019-3877 Redirect URL validation bypass
- Fix environment variables in MellonCond
- Fix detection of AJAX requests
- Fix trailing semi-colon in Set-Cookie header


To generate a diff of this commit:
cvs rdiff -u -r1.1445 -r1.1446 pkgsrc/doc/CHANGES-2019
cvs rdiff -u -r1.47 -r1.48 pkgsrc/www/ap2-auth-mellon/Makefile
cvs rdiff -u -r1.19 -r1.20 pkgsrc/www/ap2-auth-mellon/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/CHANGES-2019
diff -u pkgsrc/doc/CHANGES-2019:1.1445 pkgsrc/doc/CHANGES-2019:1.1446
--- pkgsrc/doc/CHANGES-2019:1.1445      Sat Mar 23 00:21:23 2019
+++ pkgsrc/doc/CHANGES-2019     Sat Mar 23 02:37:41 2019
@@ -1,4 +1,4 @@
-$NetBSD: CHANGES-2019,v 1.1445 2019/03/23 00:21:23 ryoon Exp $
+$NetBSD: CHANGES-2019,v 1.1446 2019/03/23 02:37:41 manu Exp $
 
 Changes to the packages collection and infrastructure in 2019:
 
@@ -2331,3 +2331,4 @@ Changes to the packages collection and i
        Updated editors/OmegaT to 4.1.5.04 [ryoon 2019-03-22]
        Updated geography/qgis to 2.18.28 [ryoon 2019-03-22]
        Updated math/fricas to 1.3.5 [ryoon 2019-03-23]
+       Updated www/ap2-auth-mellon to 0.14.2 [manu 2019-03-23]

Index: pkgsrc/www/ap2-auth-mellon/Makefile
diff -u pkgsrc/www/ap2-auth-mellon/Makefile:1.47 pkgsrc/www/ap2-auth-mellon/Makefile:1.48
--- pkgsrc/www/ap2-auth-mellon/Makefile:1.47    Thu Dec 13 19:52:25 2018
+++ pkgsrc/www/ap2-auth-mellon/Makefile Sat Mar 23 02:37:42 2019
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.47 2018/12/13 19:52:25 adam Exp $
+# $NetBSD: Makefile,v 1.48 2019/03/23 02:37:42 manu Exp $
 
-DISTNAME=      mod_auth_mellon-0.14.0
+DISTNAME=      mod_auth_mellon-0.14.2
 PKGNAME=       ${APACHE_PKG_PREFIX}-${DISTNAME:S/mod_//:S/_/-/g}
-PKGREVISION=   2
+#PKGREVISION=  1
 CATEGORIES=    www security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=UNINETT/}/mod_auth_mellon/releases/download/v${DISTNAME:C/.*-//}/
 

Index: pkgsrc/www/ap2-auth-mellon/distinfo
diff -u pkgsrc/www/ap2-auth-mellon/distinfo:1.19 pkgsrc/www/ap2-auth-mellon/distinfo:1.20
--- pkgsrc/www/ap2-auth-mellon/distinfo:1.19    Fri May  4 02:53:38 2018
+++ pkgsrc/www/ap2-auth-mellon/distinfo Sat Mar 23 02:37:42 2019
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.19 2018/05/04 02:53:38 manu Exp $
+$NetBSD: distinfo,v 1.20 2019/03/23 02:37:42 manu Exp $
 
-SHA1 (mod_auth_mellon-0.14.0.tar.gz) = 4a93f8b093e1dea20e8a286931693c614903f2d9
-RMD160 (mod_auth_mellon-0.14.0.tar.gz) = 71a25b4fb1e9a6183a51225b588b10d330d84903
-SHA512 (mod_auth_mellon-0.14.0.tar.gz) = db1bf70c234fe89914b1bb34fc6afb5b901193a8c8c7e9946485a3e20a7d129c36427717eab53764edf5a5cff5c45dfe412e400cb1f50c49ef24dbbfd6ecbf25
-Size (mod_auth_mellon-0.14.0.tar.gz) = 948785 bytes
+SHA1 (mod_auth_mellon-0.14.2.tar.gz) = 35d4359487fb97e9982b501ef3581b49bf985888
+RMD160 (mod_auth_mellon-0.14.2.tar.gz) = 412ecf6e1a616ca7c1caa6470976d1f66c8c76e6
+SHA512 (mod_auth_mellon-0.14.2.tar.gz) = 9d14b1482a73ce7e86f5f7618454aab8759533649f34fa0088264b7b09dbd90db46011c629303b2f3ad969379937ff5adaa0d7b63a502cdfbba0cd1b762502a6
+Size (mod_auth_mellon-0.14.2.tar.gz) = 950737 bytes