Commit graph

41 commits

Author SHA1 Message Date
Olli Hauer
03efecffe1 - update to version 3.6.7
- CVE-2011-3657
- CVE-2011-3667

Summary
=======

The following security issues have been discovered in Bugzilla:

* When viewing tabular or graphical reports as well as new charts,
  an XSS vulnerability is possible in debug mode.

* The User.offer_account_by_email WebService method lets you create
  a new user account even if the active authentication method forbids
  users to create an account.

* A CSRF vulnerability in post_bug.cgi and in attachment.cgi could
  lead to the creation of unwanted bug reports and attachments.

All affected installations are encouraged to upgrade as soon as possible.

Full Release Notes:
http://www.bugzilla.org/security/3.4.12/

Approved by:	skv@ (explicit)
2012-01-05 17:25:28 +00:00
Olli Hauer
ba1a02e4d9 - Fix checksetup issue if p5-version>=0.92 is installed (which is in current ports tree)
See https://bugzilla.mozilla.org/show_bug.cgi?id=678772

PR:		ports/159823
Submitted by:	ohauer
Approved by:	skv (per mail)
Obtained from:	https://bugzilla.mozilla.org/attachment.cgi?id=552915&action=diff
2011-08-27 10:18:44 +00:00
Olli Hauer
d399de5688 - create missing (empty) directory (bugzilla) so checksetup does not fail
- use DIST_SUBDIR for bugzilla and all translations
- sort pkg-plist (genplist)

OK from bugzilla maintainers per PM.

PR:		ports/158766
Submitted by:	ohauer
2011-07-18 21:56:02 +00:00
Sergey Skvortsov
7bd02d2b01 - Copy devel/bugzilla to devel/bugzilla3; russian/bugzilla-ru to russian/bugzilla3-ru
- Update devel/bugzilla, russian/bugzilla-ru to 4.0.1
- Update devel/bugzilla3, russian/bugzilla3-ru to 3.6.5

Changes:	http://www.bugzilla.org/releases/4.0.1/release-notes.html
		http://www.bugzilla.org/releases/3.6.5/release-notes.html
2011-06-07 13:30:01 +00:00
Olli Hauer
3806babe4b - bump because of mod_perl2 update
- order pkg-plist so it match autmated tools like genplist
- add missing empty directories (used by checksetup.pl) [1]

commit with hat apache@

PR:		[1] ports/154295
Submitted by:	me
2011-05-22 22:16:27 +00:00
TAKATSU Tomonari
b2957a0a74 - Update to 3.6.3 [1]
- Use WWWDIR instead of some other custom locations [2]
- Add Makefile.common which Makefiles in devel/bugzilla, russian/bugzilla-ru
  and japanese/bugzilla include to use WWWDIR in common [2]

Changes:	http://www.bugzilla.org/releases/3.6.3/release-notes.html [1]
Security:	http://www.bugzilla.org/security/3.2.8/ [1]
PR:	ports/151912 [1], [2]
Submitted by:	ohauer [1], tota (myself) [2]
Approved by:	skv
2010-12-12 05:56:19 +00:00
Sergey Skvortsov
d0aa9f59cf Update to 3.6
Changes:	http://www.bugzilla.org/releases/3.6/release-notes.html
2010-04-16 07:15:08 +00:00
Sergey Skvortsov
02bb066bb1 Update to 3.4.3
Changes:	http://www.bugzilla.org/releases/3.4.3/release-notes.html
PR:		ports/140327
Submitted by:	Sahil Tandon <sahil xx tandon.net>
2009-11-12 21:03:46 +00:00
Sergey Skvortsov
24e3d4005e Update to 3.4.2.
Changes:	http://www.bugzilla.org/security/3.0.8/
Security:	http://www.vuxml.org/freebsd/b9ec7fe3-a38a-11de-9c6b-003048818f40.html
Feature safe:	yes
2009-09-17 13:30:01 +00:00
Sergey Skvortsov
ab77e68ca1 Update to 3.4.1.
Changes:	http://www.bugzilla.org/security/3.4/
Security:	http://www.vuxml.org/freebsd/d67b517d-8214-11de-88ea-001a4d49522b.html
2009-08-17 11:05:10 +00:00
Sergey Skvortsov
7715840c07 Update to 3.4
Changes:	http://www.bugzilla.org/releases/3.4/release-notes.html
2009-07-30 15:41:50 +00:00
Sergey Skvortsov
425d5f8283 Update to 3.2.2
Changes:	http://www.bugzilla.org/releases/3.2.2/release-notes.html
PR:		ports/131404
Submitted by:	pgollucci
2009-02-14 21:54:27 +00:00
Sergey Skvortsov
da5c3a283b Install killer feature - 'Dusk' skin. 2008-12-01 19:07:45 +00:00
Sergey Skvortsov
f54171b7fc Update to 3.2
Changes:	http://www.bugzilla.org/releases/3.2/release-notes.html
PR:		ports/129333
Submitted by:	Eygene Ryabinkin <rea-fbsd xx codelabs.ru>
2008-12-01 15:38:51 +00:00
Sergey Skvortsov
e718a272b7 Update to 3.0.5
Changes:	http://www.bugzilla.org/releases/3.0.5/release-notes.html
Security:	http://www.vuxml.org/freebsd/1d96305d-6ae6-11dd-91d5-000c29d47fd7.html
2008-08-15 16:32:27 +00:00
Sergey Skvortsov
f6053e0929 Update to 3.0.4
Changes:		http://www.bugzilla.org/releases/3.0.4/release-notes.html#v30_point
2008-07-28 12:47:43 +00:00
Sergey Skvortsov
5380dec383 Update to 3.0.3
Changes:	http://www.bugzilla.org/releases/3.0.3/release-notes.html#v30_point
2008-02-07 09:35:11 +00:00
Sergey Skvortsov
5a430102a9 Update to 3.0.1
Changes:	http://www.bugzilla.org/releases/3.0.1/release-notes.html
2007-08-30 12:37:12 +00:00
Sergey Skvortsov
95113314ed Upgrade Bugzilla to 3.0; repocopy 2.x branch to devel/bugzilla2 2007-05-27 13:16:35 +00:00
Sergey Skvortsov
de7623e9c5 * update to 2.22.2
* remove EMAIL_GATEWAY option (it's by default now)
* add dependency on p5-Mail-Tools [1]

Changes:	http://www.bugzilla.org/releases/2.22.2/release-notes.html
PR:		ports/103453 [1]
Submitted by:	Cezary Morga <cezarym@data.pl> [1]
2007-02-12 14:23:26 +00:00
Sergey Skvortsov
9b080ebcd6 Update to 2.22.1
Changes:	http://www.bugzilla.org/releases/2.22.1/release-notes.html
PR:		ports/105554
Sumbitted by:	Ulrich Spoerlein <uspoerlein xxx gmail.com>
2006-11-15 14:47:20 +00:00
Sergey Skvortsov
3120faa9ae Update to 2.22
Changes:	http://www.bugzilla.org/releases/2.22/release-notes.html
2006-05-02 13:27:51 +00:00
Sergey Skvortsov
5fc8c2df47 Update Bugzilla to 2.20.1
Approved by:	portmgr (clement)
Pointed by:	mnag
Security:	http://vuxml.FreeBSD.org/46f7b598-a781-11da-906a-fde5cdde365e
2006-02-27 14:40:23 +00:00
Kris Kennaway
4f0451cf19 Try to remove www/data 2006-02-20 01:21:49 +00:00
Edwin Groothuis
e33233f948 Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry
Approved by:    krion@
PR:             ports/88711 (related)
2006-01-22 01:55:36 +00:00
Sergey Skvortsov
9073956620 Update to 2.20 2005-10-06 12:41:17 +00:00
Sergey Skvortsov
7bbc3422ca Update to 2.18.3, bug-fixes:
* https://bugzilla.mozilla.org/show_bug.cgi?id=293159
* https://bugzilla.mozilla.org/show_bug.cgi?id=292544

Reported by:	simon
Security:	http://vuxml.freebsd.org/6e33f4ab-efed-11d9-8310-0001020eed82.html
2005-07-11 14:13:23 +00:00
Sergey Skvortsov
80aa157ec0 Update to 2.18.1
PR:		ports/81583
Submitted by:	Choe, Cheng-Dae <whitekid at gmail.com>
2005-06-08 14:56:01 +00:00
Sergey Skvortsov
d0ecd4e8a4 * add OPTIONS
* use APACHE_DATADIR if defined
* fix RUN_DEPENDS
* fix pkg-plist
* update pkg-descr
* take maintainership
2005-04-20 16:54:53 +00:00
Sergey Matveychuk
7608a97427 - Because of bugzilla's bugs. checksetup.pl doesn't check File::Spec modules version. So disable it's version check. (https://bugzilla.mozilla.org/show_bug.cgi?id=257933)
- fix web server's uid/gid
- fix plist that not listed

PR:		ports/76946
Submitted by:	"Choe, Cheng-Dae" <whitekid (at) gmail.com>
2005-02-24 21:42:41 +00:00
Pav Lucistnik
342bff0997 - Update to 2.18
PR:		ports/76531
Submitted by:	"Choe, Cheng-Dae" <whitekid@gmail.com>
2005-01-24 16:44:20 +00:00
Edwin Groothuis
a69b025bfe [PATCH] devel/bugzilla: update to 2.16.6
- Update to 2.16.6

PR:		ports/69105
Submitted by:	TAKATSU Tomonari <tota@rtfm.jp>
2004-07-17 05:22:20 +00:00
Sergey A. Osokin
9a4a70b187 Fix a typo: s/NOPORTSDOCS/NOPORTDOCS/ for Makefile [1]
Use ${DOCSDIR} [2]
s/share\/doc\/.../%%DOCSDIR%%/ for pkg-plist [2]

PR:		53911
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com> [1]
		osa [2]
Approved by:	fjoe (mentor) (implicit)
2003-07-03 14:26:03 +00:00
Johann Visagie
f7e21a2e0d - Fix something which has been broken in this port for a long time:
installation to ${PREFIX}/www/data.default.  "data.default" was an artifact
  of a long obsolete version of the Apache port.  Put installation directory
  under control of a variable $BUGZILLADIR instead.  Carry through to
  pkg-plist via a pragma.
- Bump $PORTREVISION.
2003-05-20 07:26:34 +00:00
Max Khon
d72ecd650d redirect rmdir stderr to /dev/null 2003-05-13 17:05:55 +00:00
Max Khon
389d9a9348 Security update to 2.16.3.
See http://www.bugzilla.org/security/2.16.2/.

PR:		52096
2003-05-12 13:54:49 +00:00
Max Khon
c928f4bc0f Add WITH_CONTRIB knob to install contributed scripts.
Submitted by:	Alexey Neyman <alexey.neyman (at) auriga.ru>
2003-03-24 15:15:45 +00:00
Max Khon
c3a03942b9 Update to 2.16.2
PR:		47883
2003-03-24 14:45:34 +00:00
Alexey Zelkin
3e4a5707bf Fix plist 2002-07-08 15:04:41 +00:00
Alexey Zelkin
0623a06e86 * don't setup README.docs. It's developers resource.
* use ${INSTALL} directly instead of ${INSTALL_DATA} to preserve
  exec permissions for scripts
* add post-install target to display pkg-message
* rewrite pkg-message to give minimal quick setup instructions
2001-10-02 19:37:42 +00:00
Alexey Zelkin
8fb5fbc340 Add bugzilla 2.14, bug-tracking system developed by Mozilla Project 2001-10-01 13:18:55 +00:00