CVS commit: pkgsrc/archivers/py-brotlicffi

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Oct 25 12:53:32 UTC 2026

Modified Files:
        pkgsrc/archivers/py-brotlicffi: Makefile distinfo

Log Message:
py-brotlicffi: update to 1.2.1.0.

Limit Darwin file name change to Python>3.14.

1.2.1.0 (2026-10-21)
--------------------

- Upgraded libbrotli to v1.2.1, which remediates CVE-2026-111497, an
  out-of-bounds write that permits remote code execution.
- Changed one-shot ``decompress()`` and streaming ``Decompressor.process()`` /
  ``Decompressor.decompress()`` to raise ``brotlicffi.error`` for trailing bytes
  after a complete Brotli stream, including calls without an output limit.
  Previously tolerated input is now rejected, and any output produced during
  the failing call is discarded. This prevents infinite drain loops in
  streaming consumers.


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/archivers/py-brotlicffi/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/archivers/py-brotlicffi/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/archivers/py-brotlicffi/Makefile
diff -u pkgsrc/archivers/py-brotlicffi/Makefile:1.7 pkgsrc/archivers/py-brotlicffi/Makefile:1.8
--- pkgsrc/archivers/py-brotlicffi/Makefile:1.7 Mon Oct 19 14:50:52 2026
+++ pkgsrc/archivers/py-brotlicffi/Makefile     Sun Oct 25 12:53:32 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.7 2026/10/19 14:50:52 ktnb Exp $
+# $NetBSD: Makefile,v 1.8 2026/10/25 12:53:32 wiz Exp $
 
-DISTNAME=      brotlicffi-1.2.0.2
+DISTNAME=      brotlicffi-1.2.1.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    archivers python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=b/brotlicffi/}
@@ -19,10 +19,14 @@ MAKE_ENV+=  USE_SHARED_BROTLI=1
 
 PLIST_VARS+=           darwin not_darwin
 
-.if ${OPSYS} == "Darwin"
-PLIST.darwin=  yes
-.else
+.include "../../lang/python/pyversion.mk"
+
+.if ${PYTHON_VERSION} > 314
+.  if ${OPSYS} == "Darwin"
+PLIST.darwin=          yes
+.  else
 PLIST.not_darwin=      yes
+.  endif
 .endif
 
 # tests need libbrotli sources in ${WRKSRC}/libbrotli

Index: pkgsrc/archivers/py-brotlicffi/distinfo
diff -u pkgsrc/archivers/py-brotlicffi/distinfo:1.5 pkgsrc/archivers/py-brotlicffi/distinfo:1.6
--- pkgsrc/archivers/py-brotlicffi/distinfo:1.5 Sun Aug 23 07:52:58 2026
+++ pkgsrc/archivers/py-brotlicffi/distinfo     Sun Oct 25 12:53:32 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.5 2026/08/23 07:52:58 wiz Exp $
+$NetBSD: distinfo,v 1.6 2026/10/25 12:53:32 wiz Exp $
 
-BLAKE2s (brotlicffi-1.2.0.2.tar.gz) = 2160243097bbf102dd52beb0e347f8834c61aa51ae70e3882f6784e260509f34
-SHA512 (brotlicffi-1.2.0.2.tar.gz) = 14cebe8acc1c3bfb9cc3803d2cd909e2ad67e4171efb52b0a100f6963d97d0ca8779e5d038276f033bb64af78fe48b1bf79dece9d6908c06e58a9bdae231af69
-Size (brotlicffi-1.2.0.2.tar.gz) = 478755 bytes
+BLAKE2s (brotlicffi-1.2.1.0.tar.gz) = 98573741a61b3f4ba0e1a3c121fa373dea0e254d0690f5a028837def81f3a1f9
+SHA512 (brotlicffi-1.2.1.0.tar.gz) = f4823046ad0f63fca596122524892c4cdd82ef55d56ca032f36f5c17f9469245efc930d6a985b9c42e7a9f3930eeab9e4c48f8be52301fc3f43e232fd88a2a4f
+Size (brotlicffi-1.2.1.0.tar.gz) = 479661 bytes