From owner-freebsd-python@freebsd.org Mon Jun 5 23:50:25 2017 Return-Path: <owner-freebsd-python@freebsd.org> Delivered-To: freebsd-python@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5B45BB7CFA2 for <freebsd-python@mailman.ysv.freebsd.org>; Mon, 5 Jun 2017 23:50:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 4209573859 for <freebsd-python@freebsd.org>; Mon, 5 Jun 2017 23:50:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.ysv.freebsd.org (Postfix) id 3E8D9B7CFA1; Mon, 5 Jun 2017 23:50:25 +0000 (UTC) Delivered-To: python@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3E3D0B7CFA0 for <python@mailman.ysv.freebsd.org>; Mon, 5 Jun 2017 23:50:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2CF8373856 for <python@FreeBSD.org>; Mon, 5 Jun 2017 23:50:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v55NoPZC036976 for <python@FreeBSD.org>; Mon, 5 Jun 2017 23:50:25 GMT (envelope-from bugzilla-noreply@freebsd.org) Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" From: bugzilla-noreply@freebsd.org To: python@FreeBSD.org Subject: maintainer-feedback requested: [Bug 219806] www/moinmoin: should this patch be applied: "wrong digestmod of hmac.new calls" ? Date: Mon, 05 Jun 2017 23:50:24 +0000 X-Bugzilla-Type: request X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: python@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? Message-ID: <bug-219806-21822-C0fWuqfct3@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-219806-21822@https.bugs.freebsd.org/bugzilla/> References: <bug-219806-21822@https.bugs.freebsd.org/bugzilla/> X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-python@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: FreeBSD-specific Python issues <freebsd-python.freebsd.org> List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-python>, <mailto:freebsd-python-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-python/> List-Post: <mailto:freebsd-python@freebsd.org> List-Help: <mailto:freebsd-python-request@freebsd.org?subject=help> List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-python>, <mailto:freebsd-python-request@freebsd.org?subject=subscribe> X-List-Received-Date: Mon, 05 Jun 2017 23:50:25 -0000 Mark.Martinec@ijs.si has reassigned Bugzilla Automation <bugzilla@FreeBSD.org>'s request for maintainer-feedback to FreeBSD Python <python@FreeBSD.org>: Bug 219806: www/moinmoin: should this patch be applied: "wrong digestmod of hmac.new calls" ? https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D219806 --- Description --- MoinMoin port www/moinmoin has recently been updated to version 1.9.9. Checking for release notes of this version, I noticed: https://moinmo.in/MoinMoinDownload : General Releases Download: MoinMoin 1.9.9 tar.gz (gpg signature)=20 You also need to apply this bugfix patch, sorry: https://bitbucket.org/thomaswaldmann/moin-1.9/commits/561b7a9c2bd91b61d26cd= 8a5f 39aa36bf5c6159e So it seems this mandatory fix from the author did not make it into the 1.9.9, but should be applied by installers. The www/moinmoin port does not include this patch, as far as I can tell. If it is indeed mandatory, I believe it should find its way into the port.