[Buildbot-commits] buildbot CREDITS,1.4,1.5 ChangeLog,1.764,1.765

[Brian Warner]

Update of /cvsroot/buildbot/buildbot
In directory sc8-pr-cvs3.sourceforge.net:/tmp/cvs-serv6339

Modified Files:
	CREDITS ChangeLog 
Log Message:
[project @ security fix to contrib/svn_watcher.py]

Original author: warner at lothar.com
Date: 2006-10-08 20:48:35

Index: CREDITS
===================================================================
RCS file: /cvsroot/buildbot/buildbot/CREDITS,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -d -r1.4 -r1.5
--- CREDITS	17 Sep 2006 20:49:31 -0000	1.4
+++ CREDITS	8 Oct 2006 20:54:16 -0000	1.5
@@ -44,3 +44,4 @@
 Albert Hofkamp
 Brett Neely
 Wade Brainerd
+Nick Mathewson

Index: ChangeLog
===================================================================
RCS file: /cvsroot/buildbot/buildbot/ChangeLog,v
retrieving revision 1.764
retrieving revision 1.765
diff -u -d -r1.764 -r1.765
--- ChangeLog	5 Oct 2006 00:45:57 -0000	1.764
+++ ChangeLog	8 Oct 2006 20:54:16 -0000	1.765
@@ -1,3 +1,12 @@
+2006-10-08  Brian Warner  <warner at lothar.com>
+
+	* contrib/svn_watcher.py: fix security holes by using proper argv
+	arrays and subprocess.Popen() rather than commands.getoutput().
+	Thanks to Nick Mathewson for the patch. Note that svn_watcher.py
+	is deprecated in favor of buildbot/changes/svnpoller.py, and will
+	probably be removed by the next release.
+	* CREDITS: add Nick
+
 2006-10-04  Brian Warner  <warner at lothar.com>
 
 	* buildbot/steps/python.py (PyFlakes.createSummary): skip any