[pkgsrc/pkgsrc-2016Q4]: pkgsrc/www/viewvc Pullup ticket #5209 - requested by wiz

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/85608d283210
branches:  pkgsrc-2016Q4
changeset: 408732:85608d283210
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Thu Feb 09 19:47:25 2017 +0000

description:
Pullup ticket #5209 - requested by wiz
www/viewvc: security fix

Revisions pulled up:
- www/viewvc/Makefile                                           1.27
- www/viewvc/distinfo                                           1.15

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Feb  8 20:00:34 UTC 2017

   Modified Files:
        pkgsrc/www/viewvc: Makefile distinfo

   Log Message:
   Updated viewvc to 1.1.26.

   Version 1.1.26 (released 24-Jan-2017)

    * security fix: escape nav_data name to avoid XSS attack

   Version 1.1.25 (released 15-Sep-2016)

    * fix _rev2optrev assertion on long input

   Version 1.1.24 (released 02-Oct-2015)

    * fix minor bug in human_readable boolean calculation
    * allow hr_funout option to apply to unidiff diffs, too
    * fix infinite loop in rcsparse
    * fix iso8601 timezone offset handling (issue #542)
    * add support for renamed roots (issue #544)
    * fix minor buglet in viewvc-install error message

diffstat:

 www/viewvc/Makefile |   9 +++++----
 www/viewvc/distinfo |  10 +++++-----
 2 files changed, 10 insertions(+), 9 deletions(-)

diffs (42 lines):

diff -r 1742d5ea3ff4 -r 85608d283210 www/viewvc/Makefile
--- a/www/viewvc/Makefile       Mon Feb 06 09:11:05 2017 +0000
+++ b/www/viewvc/Makefile       Thu Feb 09 19:47:25 2017 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.25 2016/07/09 13:04:16 wiz Exp $
+# $NetBSD: Makefile,v 1.25.4.1 2017/02/09 19:47:25 bsiegert Exp $
 
-DISTNAME=      viewvc-1.1.23
+DISTNAME=      viewvc-1.1.26
 CATEGORIES=    devel www
-MASTER_SITES=  http://viewvc.tigris.org/files/documents/3330/49392/
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=viewvc/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      http://www.viewvc.org/
@@ -10,7 +10,8 @@
 LICENSE=       2-clause-bsd
 
 REPLACE_PYTHON=        viewvc-install bin/* bin/cgi/*.cgi lib/*.py
-PYTHON_VERSIONS_INCOMPATIBLE=  34 35 # not yet ported as of 1.1.20
+# https://github.com/viewvc/viewvc/issues/138
+PYTHON_VERSIONS_INCOMPATIBLE=  34 35 # not yet ported as of 1.1.26
 
 .if !exists(/usr/bin/rlog)
 DEPENDS+=      rcs-[0-9]*:../../devel/rcs
diff -r 1742d5ea3ff4 -r 85608d283210 www/viewvc/distinfo
--- a/www/viewvc/distinfo       Mon Feb 06 09:11:05 2017 +0000
+++ b/www/viewvc/distinfo       Thu Feb 09 19:47:25 2017 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.14 2015/11/04 02:47:41 agc Exp $
+$NetBSD: distinfo,v 1.14.10.1 2017/02/09 19:47:25 bsiegert Exp $
 
-SHA1 (viewvc-1.1.23.tar.gz) = c4ffc06bdbb26a1dbb43e40ec3eb139968bf1302
-RMD160 (viewvc-1.1.23.tar.gz) = 331e7ef078214c1387ff3a4e19fda045dcf5428a
-SHA512 (viewvc-1.1.23.tar.gz) = e30dc21186eed4c11f9227fb51fffcfe84eeb2e0c872ca84673759a9bad25ca92c789db35b5c2c6470099b35182e8c190e7c5f1fdc2fdd5e68e0a935e59702f5
-Size (viewvc-1.1.23.tar.gz) = 617787 bytes
+SHA1 (viewvc-1.1.26.tar.gz) = 635a5a801adec8f2508a73450b900dae1cefe043
+RMD160 (viewvc-1.1.26.tar.gz) = defb4cf8c5c78a805d4aebc22c0d56f45eff9275
+SHA512 (viewvc-1.1.26.tar.gz) = 935a873166f67339ed6f5db46ffec1e04213aa1369a51da1100725f7dc34834fa8e62030253eaebc032676af75a7f912875c7804272b7c56dee1c865b6a9f80d
+Size (viewvc-1.1.26.tar.gz) = 666278 bytes
 SHA1 (patch-aa) = ff0a6e52ea66c838ba3ab7b1d055c27bf561a376
 SHA1 (patch-ab) = f5abf6bd824d121338882423c34e3464c8ba5fd4