CVS commit: pkgsrc/devel/py-mako

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Apr 19 17:19:19 UTC 2026

Modified Files:
        pkgsrc/devel/py-mako: Makefile distinfo

Log Message:
py-mako: update to 1.3.11.

Fixed issue in TemplateLookup where a URI with a double-slash prefix
(e.g. //../../) could bypass the directory traversal check in
Template, allowing reads of arbitrary files outside of the template
directory. The issue was caused by an inconsistency in how leading
slashes were stripped between TemplateLookup.get_template() and
Template initialization.


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.40 pkgsrc/devel/py-mako/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/devel/py-mako/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-mako/Makefile
diff -u pkgsrc/devel/py-mako/Makefile:1.39 pkgsrc/devel/py-mako/Makefile:1.40
--- pkgsrc/devel/py-mako/Makefile:1.39  Sat Apr 12 11:57:03 2025
+++ pkgsrc/devel/py-mako/Makefile       Sun Apr 19 17:19:19 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2025/04/12 11:57:03 adam Exp $
+# $NetBSD: Makefile,v 1.40 2026/04/19 17:19:19 wiz Exp $
 
-DISTNAME=      mako-1.3.10
+DISTNAME=      mako-1.3.11
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=M/Mako/}
@@ -15,9 +15,7 @@ DEPENDS+=     ${PYPKGPREFIX}-markupsafe>=0.9
 
 USE_LANGUAGES= # none
 
-post-install:
-       cd ${DESTDIR}${PREFIX}/bin && \
-       ${MV} mako-render mako-render-${PYVERSSUFFIX} || ${TRUE}
+PY_RENAME_BINARIES=    mako-render
 
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/devel/py-mako/distinfo
diff -u pkgsrc/devel/py-mako/distinfo:1.32 pkgsrc/devel/py-mako/distinfo:1.33
--- pkgsrc/devel/py-mako/distinfo:1.32  Sat Apr 12 11:57:03 2025
+++ pkgsrc/devel/py-mako/distinfo       Sun Apr 19 17:19:19 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.32 2025/04/12 11:57:03 adam Exp $
+$NetBSD: distinfo,v 1.33 2026/04/19 17:19:19 wiz Exp $
 
-BLAKE2s (mako-1.3.10.tar.gz) = 6ab6438ca40cafa04e155efc75fbe30af4b38d8c94dd95f73b61941371e12b3d
-SHA512 (mako-1.3.10.tar.gz) = 33fcf08b35b00ae33dcfb4b9dac4adcc7e0a9d8bdfdf0bc92f6aa13fbc12031e9fc46c910d92803ffa7b31e4ee58209f11cc186e04f9b08bad7ec4bcd309d554
-Size (mako-1.3.10.tar.gz) = 392474 bytes
+BLAKE2s (mako-1.3.11.tar.gz) = dcf85bca2f43fced4f84efb516dd25786d451f6d3049a00919a03f24bc985081
+SHA512 (mako-1.3.11.tar.gz) = b3f0980393af9d9ceaf7421118fa13680ba3f47e1ff6e86a62bb8f8e944364ac8150a20b47d02bc391f7b9c9b6d400d153c3d70730cc36d1a87f628f0cff250c
+Size (mako-1.3.11.tar.gz) = 399811 bytes