Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 5 Oct 2013 22:04:31 +0000 (UTC)
From:      Carlo Strub <cs@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r329515 - head/security/py-gnupg
Message-ID:  <201310052204.r95M4Vtk073814@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: cs
Date: Sat Oct  5 22:04:31 2013
New Revision: 329515
URL: http://svnweb.freebsd.org/changeset/ports/329515

Log:
  Update to 1.2.2

Deleted:
  head/security/py-gnupg/pkg-plist
Modified:
  head/security/py-gnupg/Makefile
  head/security/py-gnupg/distinfo
  head/security/py-gnupg/pkg-descr

Modified: head/security/py-gnupg/Makefile
==============================================================================
--- head/security/py-gnupg/Makefile	Sat Oct  5 22:03:36 2013	(r329514)
+++ head/security/py-gnupg/Makefile	Sat Oct  5 22:04:31 2013	(r329515)
@@ -2,18 +2,22 @@
 # $FreeBSD$
 
 PORTNAME=	gnupg
-PORTVERSION=	0.3.2
+PORTVERSION=	1.2.2
 CATEGORIES=	security python
-MASTER_SITES=	SF/py-${PORTNAME}/GnuPGInterface/${PORTVERSION}
+MASTER_SITES=	http://www.c-s.li/ports/ \
+		CHEESESHOP
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
-DISTNAME=	GnuPGInterface-${PORTVERSION}
 
 MAINTAINER=	cs@FreeBSD.org
-COMMENT=	Python module for GnuPG interface
+COMMENT=	Python wrapper for GnuPG
+
+LICENSE=	GPLv3
+
+RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}psutil>=0.5.1:${PORTSDIR}/sysutils/py-psutil
 
 USE_PYTHON=	yes
-USE_PYDISTUTILS=	yes
-PYDISTUTILS_PKGNAME=	GnuPGInterface
+USE_PYDISTUTILS=easy_install
+PYDISTUTILS_AUTOPLIST=yes
 
 NO_STAGE=	yes
 .include <bsd.port.mk>

Modified: head/security/py-gnupg/distinfo
==============================================================================
--- head/security/py-gnupg/distinfo	Sat Oct  5 22:03:36 2013	(r329514)
+++ head/security/py-gnupg/distinfo	Sat Oct  5 22:04:31 2013	(r329515)
@@ -1,2 +1,2 @@
-SHA256 (GnuPGInterface-0.3.2.tar.gz) = 0ea672251e2e3f71b62fef0c01539519d500f6b338f803af6b57e67a73cca8e6
-SIZE (GnuPGInterface-0.3.2.tar.gz) = 19875
+SHA256 (gnupg-1.2.2.tar.gz) = 0062528de9daf02876a0b77749517d4a0a8988eb4fd77d0cf653c364cc3b1142
+SIZE (gnupg-1.2.2.tar.gz) = 64587

Modified: head/security/py-gnupg/pkg-descr
==============================================================================
--- head/security/py-gnupg/pkg-descr	Sat Oct  5 22:03:36 2013	(r329514)
+++ head/security/py-gnupg/pkg-descr	Sat Oct  5 22:04:31 2013	(r329515)
@@ -1,5 +1,11 @@
-GnuPGInterface is a Python module to interface with GnuPG . It concentrates
-on interacting with GnuPG via filehandles, providing access to control GnuPG
-via versatile and extensible means.
+This module allows easy access to GnuPG's key management, encryption and
+signature functionality from Python programs, by interacting with GnuPG through
+file descriptors. Input arguments are strictly checked and sanitised, and
+therefore this module should be safe to use in networked applications requiring
+direct user input. It is intended for use with Python 2.6 or greater.
 
-WWW: http://py-gnupg.sourceforge.net/
+This is a fork of python-gnupg-0.3.2, patched to fix a potential vulnerability
+which could result in remote code execution, do to unsanitised inputs being
+passed to subprocess.Popen([...], shell=True).
+
+WWW: https://github.com/isislovecruft/python-gnupg



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201310052204.r95M4Vtk073814>