CVS commit: pkgsrc/www/py-WebOb

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jun 24 18:14:13 UTC 2026

Modified Files:
        pkgsrc/www/py-WebOb: Makefile distinfo

Log Message:
py-WebOb: updated to 1.8.10

1.8.10 (2026-06-02)

Security Fix

- The fix for CVE-2024-42353 was incomplete: a Location value containing
  ASCII tab, carriage return, or line feed characters between consecutive
  slashes could still be interpreted as a protocol-relative URL by
  ``urllib.parse.urljoin`` on Python 3.10+, allowing an open redirect.


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 pkgsrc/www/py-WebOb/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/py-WebOb/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-WebOb/Makefile
diff -u pkgsrc/www/py-WebOb/Makefile:1.22 pkgsrc/www/py-WebOb/Makefile:1.23
--- pkgsrc/www/py-WebOb/Makefile:1.22   Sun Apr 13 21:20:55 2025
+++ pkgsrc/www/py-WebOb/Makefile        Wed Jun 24 18:14:13 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.22 2025/04/13 21:20:55 wiz Exp $
+# $NetBSD: Makefile,v 1.23 2026/06/24 18:14:13 adam Exp $
 
-DISTNAME=      webob-1.8.9
+DISTNAME=      webob-1.8.10
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/webob/WebOb/}
-PKGREVISION=   2
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=w/webob/}
 
@@ -24,7 +23,7 @@ USE_LANGUAGES=        # none
 .include "../../lang/python/pyversion.mk"
 
 .if ${PYTHON_VERSION} > 312
-DEPENDS+=      ${PYPKGPREFIX}-legacy-cgi-[0-9]*:../../www/py-legacy-cgi
+DEPENDS+=      ${PYPKGPREFIX}-legacy-cgi>=2.6:../../www/py-legacy-cgi
 .endif
 
 .include "../../lang/python/wheel.mk"

Index: pkgsrc/www/py-WebOb/distinfo
diff -u pkgsrc/www/py-WebOb/distinfo:1.14 pkgsrc/www/py-WebOb/distinfo:1.15
--- pkgsrc/www/py-WebOb/distinfo:1.14   Fri Nov  1 00:08:47 2024
+++ pkgsrc/www/py-WebOb/distinfo        Wed Jun 24 18:14:13 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.14 2024/11/01 00:08:47 wiz Exp $
+$NetBSD: distinfo,v 1.15 2026/06/24 18:14:13 adam Exp $
 
-BLAKE2s (webob-1.8.9.tar.gz) = 53562e458912bb2fb93d8a463dfe1e8ff163f26c6eedf370e762fc76a364436b
-SHA512 (webob-1.8.9.tar.gz) = ed5d91f864572b4bbeaa2aa6ada98285d597f83bc14613e62defb6fd6617986aa63534f0962d8045866471f8dfa09c803a5f2105efb84e5f618db6eeb804b9a1
-Size (webob-1.8.9.tar.gz) = 279775 bytes
+BLAKE2s (webob-1.8.10.tar.gz) = 4500add35d9f268fdefee507b1b89c6a904e3f1095ede028ac0c68328a5567ef
+SHA512 (webob-1.8.10.tar.gz) = a37333d95763b24cd6d435e4dd59a18a8cb3c10c23075d6c79114654c84f38b9e41b36d868e4e3200fba93774529f6f4506b29a04411acaa90a2d14cc668a7ed
+Size (webob-1.8.10.tar.gz) = 280796 bytes