CVS commit: pkgsrc/www/py-protego

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun 29 13:32:47 UTC 2026

Modified Files:
        pkgsrc/www/py-protego: Makefile distinfo

Log Message:
py-protego: updated to 0.6.2

0.6.2 (2026-06-25)

-   Fixed a ReDoS (regular expression denial of service) vulnerability: URL
    patterns from ``robots.txt`` ``Allow`` and ``Disallow`` directives were
    compiled into regular expressions, where multiple ``*`` wildcards could
    cause exponential backtracking. A server could exploit this to cause denial
    of service by serving a crafted ``robots.txt`` file. Wildcard matching is
    now performed without regular expressions. Please, see the
    `CVE-2026-55520`_ and `GHSA-wjmf-p669-5m5p`_ security advisories for more
    information.

0.6.1 (2026-06-11)

-   Fixed parsing of ``Request-rate`` values where the seconds field has no
    time-unit suffix (e.g. ``1/60`` instead of ``1/60s``). Previously the last
    digit of the number was silently dropped.


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/py-protego/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/py-protego/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-protego/Makefile
diff -u pkgsrc/www/py-protego/Makefile:1.12 pkgsrc/www/py-protego/Makefile:1.13
--- pkgsrc/www/py-protego/Makefile:1.12 Fri Feb  6 09:22:49 2026
+++ pkgsrc/www/py-protego/Makefile      Mon Jun 29 13:32:47 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.12 2026/02/06 09:22:49 adam Exp $
+# $NetBSD: Makefile,v 1.13 2026/06/29 13:32:47 adam Exp $
 
-DISTNAME=      protego-0.6.0
+DISTNAME=      protego-0.6.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=P/Protego/}

Index: pkgsrc/www/py-protego/distinfo
diff -u pkgsrc/www/py-protego/distinfo:1.9 pkgsrc/www/py-protego/distinfo:1.10
--- pkgsrc/www/py-protego/distinfo:1.9  Fri Feb  6 09:22:49 2026
+++ pkgsrc/www/py-protego/distinfo      Mon Jun 29 13:32:47 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2026/02/06 09:22:49 adam Exp $
+$NetBSD: distinfo,v 1.10 2026/06/29 13:32:47 adam Exp $
 
-BLAKE2s (protego-0.6.0.tar.gz) = 918dd9db56ec709c396574d452fa29cc14e2d1da4bc36327e197c3b01303b36c
-SHA512 (protego-0.6.0.tar.gz) = 175396095cfa51613b8c70fb902a75da72132400d27fb22cbf619ae2adbcf744d8f02a4d7dd2a3c389d44069b72a06d229e3519f2fbb82d23b9a9ef2a21e997e
-Size (protego-0.6.0.tar.gz) = 3137423 bytes
+BLAKE2s (protego-0.6.2.tar.gz) = e1acca582d3cc25394801ee61a9f6797a5fa9a6894617809ed84f4b4d2d14475
+SHA512 (protego-0.6.2.tar.gz) = 5441764c0b95b9607fbd0277c1044c20f459670d27671bd2f579b7975bedaf51789dacf58c07c5179834dbfeee3c7885a49b01666e3c3b7d2ec936c24229c85f
+Size (protego-0.6.2.tar.gz) = 3137854 bytes