Skip to content

Commit

Permalink
Update moin to 1.9.11.
Browse files Browse the repository at this point in the history
Version 1.9.11 (2020-11-08)

  SECURITY HINT: make sure you have allow_xslt = False (or just do not use
  allow_xslt at all in your wiki configs, False is the internal default).
  Allowing XSLT/4suite is very dangerous, see HelpOnConfiguration wiki page.

  Fixes:
  * security fix for CVE-2020-25074:
    fix remote code execution via cache action
    changeset with fix: d1e5fc7d
  * security fix for CVE-2020-15275:
    fix malicious SVG attachment causing stored XSS vulnerability
    changeset with fix: 64e16037
  * make setup.py and .cfg ascii-only, #40
  * fix SubProcess' os.setsid usage, #44
  * fix interwiki test fails that crept into 1.9.10 release
  * highlight parser: use language as code_type rather than "highlight"
  * catch indexer error for too long names, #57
  * improved indexer logging so logging never crashes due to
    encoding issues for non-ascii page or attachment names.
  * fix mailheader parsing, add tests for mailimport, #53
  * workaround werkzeug errors='fallback:...' regression, #37
  * mailimport: fix AttributeError, #55
  * surge protection / hosts_deny: fix broken html, #60

  Other changes:
  * upgrade werkzeug 0.14.1 -> 1.0.1, adapt imports
    HINT: if you use the ProxyFix code, the required import has changed to:
          from werkzeug.middleware.proxy_fix import ProxyFix
  * add secure-cookie 0.1.0 (code was formerly part of werkzeug.contrib), adapt imports
  * update pygments 2.1.3 -> 2.5.2
  * update passlib 1.7.1 -> 1.7.2
  * update parsedatetime 2.4 -> 2.6
  • Loading branch information
bsiegert committed Jul 11, 2021
1 parent 3e92efb commit 1b95a8f
Show file tree
Hide file tree
Showing 3 changed files with 203 additions and 51 deletions.
5 changes: 2 additions & 3 deletions www/py-moin/Makefile
Original file line number Diff line number Diff line change
@@ -1,9 +1,8 @@
# $NetBSD: Makefile,v 1.43 2021/05/24 19:55:57 wiz Exp $
# $NetBSD: Makefile,v 1.44 2021/07/11 10:36:59 bsiegert Exp $

VER= 1.9.10
VER= 1.9.11
DISTNAME= moin-${VER}
PKGNAME= ${PYPKGPREFIX}-moin-${VER}
PKGREVISION= 2
CATEGORIES= www python
MASTER_SITES= http://static.moinmo.in/files/

Expand Down
Loading

0 comments on commit 1b95a8f

Please sign in to comment.