[pkgsrc/trunk]: pkgsrc Updated www/ap2-auth-mellon to 0.14.2

[manu <manu%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/65ccf0531240
branches:  trunk
changeset: 393697:65ccf0531240
user:      manu <manu%pkgsrc.org@localhost>
date:      Sat Mar 23 02:37:41 2019 +0000

description:
Updated www/ap2-auth-mellon to 0.14.2

Changes sine 0.14.0 include:
- Fix CVE-2019-3878 Authentication bypass when Apache is used as reverse proxy
- Fix CVE-2019-3877 Redirect URL validation bypass
- Fix environment variables in MellonCond
- Fix detection of AJAX requests
- Fix trailing semi-colon in Set-Cookie header

diffstat:

 doc/CHANGES-2019             |   3 ++-
 www/ap2-auth-mellon/Makefile |   6 +++---
 www/ap2-auth-mellon/distinfo |  10 +++++-----
 3 files changed, 10 insertions(+), 9 deletions(-)

diffs (44 lines):

diff -r 039791fb0246 -r 65ccf0531240 doc/CHANGES-2019
--- a/doc/CHANGES-2019  Sat Mar 23 00:21:23 2019 +0000
+++ b/doc/CHANGES-2019  Sat Mar 23 02:37:41 2019 +0000
@@ -1,4 +1,4 @@
-$NetBSD: CHANGES-2019,v 1.1445 2019/03/23 00:21:23 ryoon Exp $
+$NetBSD: CHANGES-2019,v 1.1446 2019/03/23 02:37:41 manu Exp $
 
 Changes to the packages collection and infrastructure in 2019:
 
@@ -2331,3 +2331,4 @@
        Updated editors/OmegaT to 4.1.5.04 [ryoon 2019-03-22]
        Updated geography/qgis to 2.18.28 [ryoon 2019-03-22]
        Updated math/fricas to 1.3.5 [ryoon 2019-03-23]
+       Updated www/ap2-auth-mellon to 0.14.2 [manu 2019-03-23]
diff -r 039791fb0246 -r 65ccf0531240 www/ap2-auth-mellon/Makefile
--- a/www/ap2-auth-mellon/Makefile      Sat Mar 23 00:21:23 2019 +0000
+++ b/www/ap2-auth-mellon/Makefile      Sat Mar 23 02:37:41 2019 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.47 2018/12/13 19:52:25 adam Exp $
+# $NetBSD: Makefile,v 1.48 2019/03/23 02:37:42 manu Exp $
 
-DISTNAME=      mod_auth_mellon-0.14.0
+DISTNAME=      mod_auth_mellon-0.14.2
 PKGNAME=       ${APACHE_PKG_PREFIX}-${DISTNAME:S/mod_//:S/_/-/g}
-PKGREVISION=   2
+#PKGREVISION=  1
 CATEGORIES=    www security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=UNINETT/}/mod_auth_mellon/releases/download/v${DISTNAME:C/.*-//}/
 
diff -r 039791fb0246 -r 65ccf0531240 www/ap2-auth-mellon/distinfo
--- a/www/ap2-auth-mellon/distinfo      Sat Mar 23 00:21:23 2019 +0000
+++ b/www/ap2-auth-mellon/distinfo      Sat Mar 23 02:37:41 2019 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.19 2018/05/04 02:53:38 manu Exp $
+$NetBSD: distinfo,v 1.20 2019/03/23 02:37:42 manu Exp $
 
-SHA1 (mod_auth_mellon-0.14.0.tar.gz) = 4a93f8b093e1dea20e8a286931693c614903f2d9
-RMD160 (mod_auth_mellon-0.14.0.tar.gz) = 71a25b4fb1e9a6183a51225b588b10d330d84903
-SHA512 (mod_auth_mellon-0.14.0.tar.gz) = db1bf70c234fe89914b1bb34fc6afb5b901193a8c8c7e9946485a3e20a7d129c36427717eab53764edf5a5cff5c45dfe412e400cb1f50c49ef24dbbfd6ecbf25
-Size (mod_auth_mellon-0.14.0.tar.gz) = 948785 bytes
+SHA1 (mod_auth_mellon-0.14.2.tar.gz) = 35d4359487fb97e9982b501ef3581b49bf985888
+RMD160 (mod_auth_mellon-0.14.2.tar.gz) = 412ecf6e1a616ca7c1caa6470976d1f66c8c76e6
+SHA512 (mod_auth_mellon-0.14.2.tar.gz) = 9d14b1482a73ce7e86f5f7618454aab8759533649f34fa0088264b7b09dbd90db46011c629303b2f3ad969379937ff5adaa0d7b63a502cdfbba0cd1b762502a6
+Size (mod_auth_mellon-0.14.2.tar.gz) = 950737 bytes