kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/devel/rt3/distinfo

17 lines
1.1 KiB
Text
Raw Normal View History

security update for RT3, fixing: CVE-2013-3368 CVE-2013-3369 CVE-2013-3370 CVE-2013-3371 CVE-2013-3372 CVE-2013-3373 CVE-2013-3374 It also includes a database upgrade, so please make sure to run `make upgrade-database`. Changes in detail are: 3.8.15->3.8.16: ruz stop RT from locking on "large" mails ruz make sure data is recorded (tests) alexmv Remove bogus argument to ->get(), which fail on HTTP::Message >= 5.05 alexmv Ensure that tickets are destroyed before global destruction, in more alexmv Work around a bug in perl < 5.13.10 with open($fh, ">:raw", \$string) sunnavy destroy more tickets and objects before global destruction for modern tsibley Remove the "signature" paragraph from the README's explanation of RT 3.8.16->3.8.17: alexmv Ensure that filenames in inline image attributes are HTML-escaped alexmv Deny direct access to callbacks alexmv Protect calls to $m->comp with user input in ColumnMap alexmv Ensure that subjects cannot contain embedded newlines alexmv Remove filename= suggesions from Content-Disposition lines alexmv Ensure consistent escaping of filenames in attachment URIs alexmv Ensure that URLs placed in HTML attributes are escaped correctly, to prevent XSS injection alexmv Ensure that the default replacement does not pass through unescaped content alexmv Use File::Temp for non-predictable temporary filenames
2013-05-26 18:55:53 +02:00
$NetBSD: distinfo,v 1.24 2013/05/26 16:55:53 spz Exp $
Initial import of rt3, version 3.2.1, into the NetBSD Packages Collection. This package is based on the work of Dieter Roelants in pkgsrc-wip, with a lot of changes to make it proper WRT pkgsrc. RT is an industrial-grade ticketing system. It lets a group of people intelligently and efficiently manage requests submitted by a community of users. RT is used by systems administrators, customer support staffs, NOCs, developers and even marketing departments at over a thousand sites around the world.
2004-08-03 17:33:48 +02:00
security update for RT3, fixing: CVE-2013-3368 CVE-2013-3369 CVE-2013-3370 CVE-2013-3371 CVE-2013-3372 CVE-2013-3373 CVE-2013-3374 It also includes a database upgrade, so please make sure to run `make upgrade-database`. Changes in detail are: 3.8.15->3.8.16: ruz stop RT from locking on "large" mails ruz make sure data is recorded (tests) alexmv Remove bogus argument to ->get(), which fail on HTTP::Message >= 5.05 alexmv Ensure that tickets are destroyed before global destruction, in more alexmv Work around a bug in perl < 5.13.10 with open($fh, ">:raw", \$string) sunnavy destroy more tickets and objects before global destruction for modern tsibley Remove the "signature" paragraph from the README's explanation of RT 3.8.16->3.8.17: alexmv Ensure that filenames in inline image attributes are HTML-escaped alexmv Deny direct access to callbacks alexmv Protect calls to $m->comp with user input in ColumnMap alexmv Ensure that subjects cannot contain embedded newlines alexmv Remove filename= suggesions from Content-Disposition lines alexmv Ensure consistent escaping of filenames in attachment URIs alexmv Ensure that URLs placed in HTML attributes are escaped correctly, to prevent XSS injection alexmv Ensure that the default replacement does not pass through unescaped content alexmv Use File::Temp for non-predictable temporary filenames
2013-05-26 18:55:53 +02:00
SHA1 (rt-3.8.17.tar.gz) = 4765c68f91a0e8e21ed0fd39397cd8e3970ca992
RMD160 (rt-3.8.17.tar.gz) = 6da8fca56976233417bd47b26e1a7326fde5d2d0
Size (rt-3.8.17.tar.gz) = 5728368 bytes
make rt deal with perl 5.14
2011-10-25 21:38:09 +02:00
SHA1 (patch-aa) = 6f78710f4460a25c75afbdf7128c0fe34914927c
SHA1 (patch-ab) = ee455dd683c84d3a745a29a132e28903ba03144d
SHA1 (patch-lib_RT.pm) = f72c6cb6f94acf1296076423d26d7efa4ed78293
SHA1 (patch-lib_RT_CustomFieldValues_External.pm) = 4404ca98c9e50687323892df1aa95c8b5a6dedd9
SHA1 (patch-lib_RT_Interface_Email.pm) = 60d0c2c46ac3dc8172bdf16bbf43099b7dd87542
Update to the latest version in the rt3 train. Contains security updates: 3.8.15 Release Notes This release resolves a number of security vulnerabilities. It resolves CVE-2012-4730, CVE-2012-4732, CVE-2012-4734, CVE-2012-4735, and CVE-2012-4884. In addition to these security fixes, RT 3.8.15 contains support for partitioned PGP messages. 3.8.14 Release Notes This release contains two fixes related to the 3.8.12 security release. Access to search results URLs is now CSRF whitelisted, based on user feedback. An error in rt-email-dashboards has been corrected. 3.8.13 Release Notes This release contains an important bugfix over the 3.8.12 security release: * Fix sending email with the 'perl-script' mod_perl handler, by ensuring that STDIN was always on FD 0 before calling IPC::Open2. This failure showed as either SIGPIPE or abnormal exit codes when running sendmail. * Fix for "Undefined value assigned to typeglob" and "Bad file descriptor: core_output_filter" errors caused by the above change, by ensuring that both FD 0 and FD 1 are prevented from being claimed by Apache. This error only arose with the perfork MPM and mod_perl <= 2.0.4.
2012-10-31 21:39:26 +01:00
SHA1 (patch-lib_RT_Interface_Email_Auth_GnuPG.pm) = 60d53a4dcda8f3cda14350f34f74fddc6091c3ce
make rt deal with perl 5.14
2011-10-25 21:38:09 +02:00
SHA1 (patch-sbin_rt-attributes-viewer) = e1c963800b76282cda4ca46e006f30d9abfc29c9
SHA1 (patch-sbin_rt-attributes-viewer.in) = 99a15cca9a394b5743edc3929f43593f1384c8da
SHA1 (patch-share_html_Helpers_CalPopup.html) = 3920ac6448d1d21c7ff32ef67344b19aa53616a4
SHA1 (patch-t_approval_admincc.t) = 4fddf5fa844d15e8698e00fe6863daaafa661315
SHA1 (patch-t_approval_basic.t) = 209303cc34370518a2600e28570627e1dc7e698b
Reference in a new issue Copy permalink