[pkgsrc/pkgsrc-2017Q1]: pkgsrc/devel/py-mercurial Pullup ticket #5326 - reque...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/0a430fa30794
branches:  pkgsrc-2017Q1
changeset: 360315:0a430fa30794
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sat Apr 29 19:31:54 2017 +0000

description:
Pullup ticket #5326 - requested by sevan
devel/py-mercurial: security fix

Revisions pulled up:
- devel/py-mercurial/Makefile.version                           1.48
- devel/py-mercurial/distinfo                                   1.48

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Wed Apr 19 17:17:52 UTC 2017

   Modified Files:
           pkgsrc/devel/py-mercurial: Makefile.version distinfo

   Log Message:
   Updated py-mercurial to 4.1.3.

   Mercurial 4.1.3 (2017-4-18)

   This is an out of cycle release to address a security issue:

       hg serve --stdio could be tricked into granting authorized users
   access to the Python debugger. Thanks to Jonathan Claudius of Mozilla
   for reporting this issue

diffstat:

 devel/py-mercurial/Makefile.version |   4 ++--
 devel/py-mercurial/distinfo         |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (27 lines):

diff -r 54fadabba4b7 -r 0a430fa30794 devel/py-mercurial/Makefile.version
--- a/devel/py-mercurial/Makefile.version       Sat Apr 29 18:51:51 2017 +0000
+++ b/devel/py-mercurial/Makefile.version       Sat Apr 29 19:31:54 2017 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile.version,v 1.46 2017/03/03 10:24:05 wiz Exp $
+# $NetBSD: Makefile.version,v 1.46.2.1 2017/04/29 19:31:54 bsiegert Exp $
 
-VERSION=       4.1.1
+VERSION=       4.1.3
 
 PYTHON_VERSIONS_INCOMPATIBLE=  34 35 36 # not yet ported as of 3.9
 # see also https://www.mercurial-scm.org/wiki/SupportedPythonVersions
diff -r 54fadabba4b7 -r 0a430fa30794 devel/py-mercurial/distinfo
--- a/devel/py-mercurial/distinfo       Sat Apr 29 18:51:51 2017 +0000
+++ b/devel/py-mercurial/distinfo       Sat Apr 29 19:31:54 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.46 2017/03/03 10:24:05 wiz Exp $
+$NetBSD: distinfo,v 1.46.2.1 2017/04/29 19:31:54 bsiegert Exp $
 
-SHA1 (mercurial-4.1.1.tar.gz) = bcfd5c28e873855a87d6ad9ccbde36bd4ecd2c55
-RMD160 (mercurial-4.1.1.tar.gz) = 700d33187081d08ff02370489e77ebf508704394
-SHA512 (mercurial-4.1.1.tar.gz) = b076336a10d524e85a7eb46e0da7b1b5adb34ca377ec162ebf0b3fc1f3749db10bd9144ce046dda63aa0e6ad65d10e288919d65a88d5a9346b26a47d4b21bd49
-Size (mercurial-4.1.1.tar.gz) = 5132169 bytes
+SHA1 (mercurial-4.1.3.tar.gz) = ce28938ee7d30dbd3486880e6df8465a4a51abdd
+RMD160 (mercurial-4.1.3.tar.gz) = 096c5c0dc8cb4b3126dd3d63116da9a9a6f4b1ec
+SHA512 (mercurial-4.1.3.tar.gz) = 794c513b7e061bc56d270ef57adc0fadeffd5bcc988da0934b24db686b76bf573aef2bbaa3baa9220f31463795bc6e6a99fc1284ebcf8d7e49f42b8129347811
+Size (mercurial-4.1.3.tar.gz) = 5134965 bytes