Number of commits found: 9

Update to 0.5.0

- Add LICENSE_FILE
- Add NO_ARCH
- Allow concurrent installation (USE_PYTHON=concurrent)

Changes:	https://github.com/tiran/defusedxml/releases
PR:		226750
Submitted by:	sunpoet (myself)
Approved by:	wg (maintainer)

Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files that are not actually manual pages (part 2).

Convert Python ports to FLAVORS.

  Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the

(Only the first 15 lines of the commit message are shown above )

devel/py-defusedxml: Allow overriding USES

- Convert ports of devel/ to USES=python

Approved by:	portmgr (implicit)

devel/py-defusedxml: use auto plist and remove py3k hack

devel/py-defusedxml: allow staging

- Allow staging

Add NO_STAGE all over the place in preparation for the staging support (cat:
devel part 3)

devel/py-defusedxml: Defusing XML bombs and other exploits

The results of an attack on a vulnerable XML library can be fairly dramatic.
With just a few hundred Bytes of XML data an attacker can occupy several
Gigabytes of memory within seconds. An attacker can also keep CPUs busy for
a long time with a small to medium size request.  This library prevents
such issues.

WWW: https://bitbucket.org/tiran/defusedxml

Number of commits found: 9

13 vulnerabilities affecting 78 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2019-12-06 20:23:44