From owner-svn-ports-all@freebsd.org Thu Feb 4 10:39:50 2016 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 37791A9C33A; Thu, 4 Feb 2016 10:39:50 +0000 (UTC) (envelope-from koobs@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1558A1F7B; Thu, 4 Feb 2016 10:39:50 +0000 (UTC) (envelope-from koobs@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u14AdnIL033313; Thu, 4 Feb 2016 10:39:49 GMT (envelope-from koobs@FreeBSD.org) Received: (from koobs@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u14AdmZP033310; Thu, 4 Feb 2016 10:39:48 GMT (envelope-from koobs@FreeBSD.org) Message-Id: <201602041039.u14AdmZP033310@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: koobs set sender to koobs@FreeBSD.org using -f From: Kubilay Kocak Date: Thu, 4 Feb 2016 10:39:48 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r408021 - in head/security/py-rsa: . files X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Feb 2016 10:39:50 -0000 Author: koobs Date: Thu Feb 4 10:39:48 2016 New Revision: 408021 URL: https://svnweb.freebsd.org/changeset/ports/408021 Log: security/py-rsa: Update to 3.3 (Fixes CVE-2016-1494) - Update PORTVERSION and distinfo checksum (3.3) - Modernize TEST entries (test target, TEST_DEPENDS, et al) - Update setup.py patch (zip_safe no longer needed) - Add LICENSE_FILE - Enable NO_ARCH This version fixed a security vulnerability: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1494 PR: 206746 Reported by: Sevan Janiyan Security: e78bfc9d-cb1e-11e5-b251-0050562a4d7b Security: CVE-2016-1494 MFH: 2016Q1 Modified: head/security/py-rsa/Makefile head/security/py-rsa/distinfo head/security/py-rsa/files/patch-setup.py Modified: head/security/py-rsa/Makefile ============================================================================== --- head/security/py-rsa/Makefile Thu Feb 4 10:37:41 2016 (r408020) +++ head/security/py-rsa/Makefile Thu Feb 4 10:39:48 2016 (r408021) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= rsa -PORTVERSION= 3.1.4 -PORTREVISION= 1 +PORTVERSION= 3.3 CATEGORIES= security python MASTER_SITES= CHEESESHOP PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} @@ -12,20 +11,17 @@ MAINTAINER= koobs@FreeBSD.org COMMENT= Pure-Python RSA implementation LICENSE= APACHE20 +LICENSE_FILE= ${WRKSRC}/LICENSE RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}pyasn1>=0.1.3:${PORTSDIR}/devel/py-pyasn1 -TEST_DEPENDS:= ${PYTHON_PKGNAMEPREFIX}unittest2>0:${PORTSDIR}/devel/py-unittest2 \ - ${RUN_DEPENDS} - -OPTIONS_DEFINE= TESTS - -TESTS_DESC= Install tools for unit tests -TESTS_BUILD_DEPENDS= ${TEST_DEPENDS} +TEST_DEPENDS= ${PYTHON_PKGNAMEPREFIX}unittest2>0:${PORTSDIR}/devel/py-unittest2 USES= python -USE_PYTHON= distutils autoplist +USE_PYTHON= autoplist distutils + +NO_ARCH= yes -regression-test: build +do-test: @cd ${WRKSRC} && ${PYTHON_CMD} run_tests.py .include Modified: head/security/py-rsa/distinfo ============================================================================== --- head/security/py-rsa/distinfo Thu Feb 4 10:37:41 2016 (r408020) +++ head/security/py-rsa/distinfo Thu Feb 4 10:39:48 2016 (r408021) @@ -1,2 +1,2 @@ -SHA256 (rsa-3.1.4.tar.gz) = e2b0b05936c276b1edd2e1525553233b666df9e29b5c3ba223eed738277c82a0 -SIZE (rsa-3.1.4.tar.gz) = 36181 +SHA256 (rsa-3.3.tar.gz) = 03f3d9bebad06681771016b8752a40b12f615ff32363c7aa19b3798e73ccd615 +SIZE (rsa-3.3.tar.gz) = 33449 Modified: head/security/py-rsa/files/patch-setup.py ============================================================================== --- head/security/py-rsa/files/patch-setup.py Thu Feb 4 10:37:41 2016 (r408020) +++ head/security/py-rsa/files/patch-setup.py Thu Feb 4 10:39:48 2016 (r408021) @@ -1,9 +1,12 @@ ---- ./setup.py.orig 2013-09-26 22:34:41.233363167 +1000 -+++ ./setup.py 2013-09-26 22:34:50.192985862 +1000 -@@ -42,5 +42,5 @@ - 'pyrsa-encrypt-bigfile = rsa.cli:encrypt_bigfile', - 'pyrsa-decrypt-bigfile = rsa.cli:decrypt_bigfile', - ]}, -- -+ zip_safe=False, - ) +--- setup.py.orig 2016-01-13 08:43:51 UTC ++++ setup.py +@@ -42,6 +42,9 @@ setup(name='rsa', + install_requires=[ + 'pyasn1 >= 0.1.3', + ], ++ tests_require=[ ++ 'unittest2', ++ ], + entry_points={'console_scripts': [ + 'pyrsa-priv2pub = rsa.util:private_to_public', + 'pyrsa-keygen = rsa.cli:keygen',