pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/py-scrapy py-scrapy: updated to 1.5.2



details:   https://anonhg.NetBSD.org/pkgsrc/rev/353027b5a3a9
branches:  trunk
changeset: 390625:353027b5a3a9
user:      adam <adam%pkgsrc.org@localhost>
date:      Thu Jan 24 14:11:48 2019 +0000

description:
py-scrapy: updated to 1.5.2

Scrapy 1.5.2:

* *Security bugfix*: Telnet console extension can be easily exploited by rogue
  websites POSTing content to http://localhost:6023, we haven't found a way to
  exploit it from Scrapy, but it is very easy to trick a browser to do so and
  elevates the risk for local development environment.

  *The fix is backwards incompatible*, it enables telnet user-password
  authentication by default with a random generated password. If you can't
  upgrade right away, please consider setting :setting:TELNET_CONSOLE_PORT
  out of its default value.

  See :ref:telnet console <topics-telnetconsole> documentation for more info

* Backport CI build failure under GCE environemnt due to boto import error.

diffstat:

 www/py-scrapy/ALTERNATIVES |   2 +-
 www/py-scrapy/Makefile     |   7 ++++---
 www/py-scrapy/PLIST        |   4 ++--
 www/py-scrapy/distinfo     |  10 +++++-----
 4 files changed, 12 insertions(+), 11 deletions(-)

diffs (54 lines):

diff -r f739665c8263 -r 353027b5a3a9 www/py-scrapy/ALTERNATIVES
--- a/www/py-scrapy/ALTERNATIVES        Thu Jan 24 14:09:24 2019 +0000
+++ b/www/py-scrapy/ALTERNATIVES        Thu Jan 24 14:11:48 2019 +0000
@@ -1,1 +1,1 @@
-bin/scrapy @PREFIX@/bin/scrapy@PYVERSSUFFIX@
+bin/scrapy @PREFIX@/bin/scrapy-@PYVERSSUFFIX@
diff -r f739665c8263 -r 353027b5a3a9 www/py-scrapy/Makefile
--- a/www/py-scrapy/Makefile    Thu Jan 24 14:09:24 2019 +0000
+++ b/www/py-scrapy/Makefile    Thu Jan 24 14:11:48 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.6 2018/08/14 06:56:39 adam Exp $
+# $NetBSD: Makefile,v 1.7 2019/01/24 14:11:48 adam Exp $
 
-DISTNAME=      Scrapy-1.5.1
+DISTNAME=      Scrapy-1.5.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=S/Scrapy/}
@@ -24,7 +24,8 @@
 USE_LANGUAGES= # none
 
 post-install:
-       cd ${DESTDIR}${PREFIX}/bin && ${MV} scrapy scrapy${PYVERSSUFFIX} || ${TRUE}
+       cd ${DESTDIR}${PREFIX}/bin && \
+       ${MV} scrapy scrapy-${PYVERSSUFFIX} || ${TRUE}
 
 .include "../../lang/python/egg.mk"
 .include "../../mk/bsd.pkg.mk"
diff -r f739665c8263 -r 353027b5a3a9 www/py-scrapy/PLIST
--- a/www/py-scrapy/PLIST       Thu Jan 24 14:09:24 2019 +0000
+++ b/www/py-scrapy/PLIST       Thu Jan 24 14:11:48 2019 +0000
@@ -1,5 +1,5 @@
-@comment $NetBSD: PLIST,v 1.3 2018/01/04 21:31:41 adam Exp $
-bin/scrapy${PYVERSSUFFIX}
+@comment $NetBSD: PLIST,v 1.4 2019/01/24 14:11:48 adam Exp $
+bin/scrapy-${PYVERSSUFFIX}
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
 ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
 ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
diff -r f739665c8263 -r 353027b5a3a9 www/py-scrapy/distinfo
--- a/www/py-scrapy/distinfo    Thu Jan 24 14:09:24 2019 +0000
+++ b/www/py-scrapy/distinfo    Thu Jan 24 14:11:48 2019 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.5 2018/08/14 06:56:39 adam Exp $
+$NetBSD: distinfo,v 1.6 2019/01/24 14:11:48 adam Exp $
 
-SHA1 (Scrapy-1.5.1.tar.gz) = 3fe1d9ce050bcbd315e764d564b9384029a200fc
-RMD160 (Scrapy-1.5.1.tar.gz) = 19234b618ae8dd5850126e56c93013d6e102524d
-SHA512 (Scrapy-1.5.1.tar.gz) = 6c82a53dce48d47d92dc87d7d37d1ce1e106a3a51f6a55c9bd9e6665cda4f27666a0488e8462eaba3a66f826e5a14676d8da2ffa6843f25112734c83a1777552
-Size (Scrapy-1.5.1.tar.gz) = 908961 bytes
+SHA1 (Scrapy-1.5.2.tar.gz) = 8b2d29cb674ed144972883d15f66c3116942df75
+RMD160 (Scrapy-1.5.2.tar.gz) = 2dc4c5c8617c762240ae1342665627b6b803f846
+SHA512 (Scrapy-1.5.2.tar.gz) = 4732761d9452ae2157ba7a1ceda02cdc6e417f3e09bc1e02ff5a9e5288c8dc0472c77a0da2b4c3bb8510f94b7e6e93b0fbf1a98df629a86dd5c3803c0ee0b081
+Size (Scrapy-1.5.2.tar.gz) = 919358 bytes



Home | Main Index | Thread Index | Old Index