CVS commit: pkgsrc/security/caff

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue May 21 19:29:52 UTC 2019

Modified Files:
        pkgsrc/security/caff: Makefile distinfo

Log Message:
caff: update to 2.10.

signing-party (2.10-1) unstable; urgency=high

  * gpg-key2ps: Security fix for CVE-2018-15599: unsafe shell call enabling
    shell injection via a User ID.  Use Perl's (core) module Encode.pm instead
    of shelling out to `iconv`. (Closes: #928256.)


To generate a diff of this commit:
cvs rdiff -u -r1.50 -r1.51 pkgsrc/security/caff/Makefile
cvs rdiff -u -r1.35 -r1.36 pkgsrc/security/caff/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/caff/Makefile
diff -u pkgsrc/security/caff/Makefile:1.50 pkgsrc/security/caff/Makefile:1.51
--- pkgsrc/security/caff/Makefile:1.50  Wed Mar 20 15:44:51 2019
+++ pkgsrc/security/caff/Makefile       Tue May 21 19:29:52 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.50 2019/03/20 15:44:51 wiz Exp $
+# $NetBSD: Makefile,v 1.51 2019/05/21 19:29:52 wiz Exp $
 
-VERSION=       2.9
+VERSION=       2.10
 DISTNAME=      signing-party_${VERSION}.orig
 PKGNAME=       caff-${VERSION}
 CATEGORIES=    security

Index: pkgsrc/security/caff/distinfo
diff -u pkgsrc/security/caff/distinfo:1.35 pkgsrc/security/caff/distinfo:1.36
--- pkgsrc/security/caff/distinfo:1.35  Wed Mar 20 15:44:51 2019
+++ pkgsrc/security/caff/distinfo       Tue May 21 19:29:52 2019
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.35 2019/03/20 15:44:51 wiz Exp $
+$NetBSD: distinfo,v 1.36 2019/05/21 19:29:52 wiz Exp $
 
-SHA1 (signing-party_2.9.orig.tar.gz) = 8483147f82ee81e12a81abe2d2421785b8184171
-RMD160 (signing-party_2.9.orig.tar.gz) = bb577cef730a8c08c990c5b99369be56228e7cb5
-SHA512 (signing-party_2.9.orig.tar.gz) = 31a0f15f679c0339753bafbac645609e9e16f3da2c5105c33e87e0f258453b3101f188398a7c1509fe5c005339289ac5465ccb18631a526d231c714f9ed61d96
-Size (signing-party_2.9.orig.tar.gz) = 222606 bytes
+SHA1 (signing-party_2.10.orig.tar.gz) = 6baf98f21af48b3aa5b5d26a41c4a87646b7ee94
+RMD160 (signing-party_2.10.orig.tar.gz) = 6ce5b02719ca25096daecfee3534c6ab3ba1d0f1
+SHA512 (signing-party_2.10.orig.tar.gz) = 82e51b91c282a72e9d16d920b87560c66aeafc0219e91615ea47d2f1a5df903fb459201f34368e6fa7ea1e2d2ca46a73096f30a068c8c35322af2f3ea256b269
+Size (signing-party_2.10.orig.tar.gz) = 222778 bytes
 SHA1 (patch-Makefile) = 81f3be64cd3595d0cd8671f994f6b7034b5da7be