CVS commit: pkgsrc/devel/py-mercurial

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Nov 23 20:44:47 UTC 2017

Modified Files:
        pkgsrc/devel/py-mercurial: Makefile.version distinfo

Log Message:
py-mercurial: update to 4.4.1.

1.1. Notable changes

    Git and Subversion subrepos have been disabled by default to
    mitigate a potential security risk if files overlapping with
    a subrepo managed to be committed to a repository.
    Subrepos are now more paranoid about symlink traversal.
    The share extension handles drive letters on Windows better.

It is possible that a specially malformed repository can cause Git
subrepositories to run arbitrary code in the form of a
.git/hooks/post-update script checked in to the repository in
Mercurial 4.4 and earlier. Typical use of Mercurial prevents
construction of such repositories, but they can be created
programmatically.


To generate a diff of this commit:
cvs rdiff -u -r1.53 -r1.54 pkgsrc/devel/py-mercurial/Makefile.version
cvs rdiff -u -r1.55 -r1.56 pkgsrc/devel/py-mercurial/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-mercurial/Makefile.version
diff -u pkgsrc/devel/py-mercurial/Makefile.version:1.53 pkgsrc/devel/py-mercurial/Makefile.version:1.54
--- pkgsrc/devel/py-mercurial/Makefile.version:1.53     Tue Nov  7 13:16:07 2017
+++ pkgsrc/devel/py-mercurial/Makefile.version  Thu Nov 23 20:44:47 2017
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile.version,v 1.53 2017/11/07 13:16:07 wiz Exp $
+# $NetBSD: Makefile.version,v 1.54 2017/11/23 20:44:47 wiz Exp $
 
-VERSION=       4.4
+VERSION=       4.4.1
 
 PYTHON_VERSIONS_INCOMPATIBLE=  34 35 36 # not yet ported as of 3.9
 # see also https://www.mercurial-scm.org/wiki/SupportedPythonVersions

Index: pkgsrc/devel/py-mercurial/distinfo
diff -u pkgsrc/devel/py-mercurial/distinfo:1.55 pkgsrc/devel/py-mercurial/distinfo:1.56
--- pkgsrc/devel/py-mercurial/distinfo:1.55     Tue Nov  7 13:16:07 2017
+++ pkgsrc/devel/py-mercurial/distinfo  Thu Nov 23 20:44:47 2017
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.55 2017/11/07 13:16:07 wiz Exp $
+$NetBSD: distinfo,v 1.56 2017/11/23 20:44:47 wiz Exp $
 
-SHA1 (mercurial-4.4.tar.gz) = f4241cad58d8f00bed56b5539c9186c084dfbdc4
-RMD160 (mercurial-4.4.tar.gz) = 3f8fc6ef15adfdcaae36bd99fb1b9663b0ed0119
-SHA512 (mercurial-4.4.tar.gz) = c8fc00a0ab38040bbbcf41de8eba90feec2df5ae021b9539e543f4f5437550e390e7451f7663b9994dc0d42893786600fd3c20b91156e834e2a97f7b79e2157e
-Size (mercurial-4.4.tar.gz) = 5633529 bytes
+SHA1 (mercurial-4.4.1.tar.gz) = 99fedcebccdb53f67aefaba5cdade9e84d79cf7e
+RMD160 (mercurial-4.4.1.tar.gz) = 7f7affb0e86e096f60a8cdec1fd16ac2037e9087
+SHA512 (mercurial-4.4.1.tar.gz) = 4c87adb6d3d30f7f9211eee64df727aefdac246be3ca9e3af412b76c32b76d701b19e00ca339168446ee5e20fad2ffc24f0c87438b6bda954560108235ab14a8
+Size (mercurial-4.4.1.tar.gz) = 5636532 bytes