42496035e4
REPLACE_BASH in installed file. Replace PHP interpreter in installed *.php files. Move options framework into options.mk. Use INSTALLATION_DIRS instead of INSTALL_DATA_DIR. From doc/RELEASE: 1.2.17 Security Release (2014-03-04) ------------------------------------------------- MantisBT 1.2.17 is a security update for the stable 1.2.x branch. All installations that are currently running any 1.2.x version are strongly advised to upgrade to this release. Download it from [3]. An SQL injection vulnerability (CVE-2014-2238) in adm_config_report.php was patched. Refer to issue #17055 for detailed information. This release also includes a few bug fixes for the tracker, including News API correction for the regression issue #16940 introduced in 1.2.16, as well as updated translations in many languages. A full changelog for the 1.2.x series can be found on the official site. [1] 1.2.16 Security Release (2014-02-07) ------------------------------------------------- MantisBT 1.2.16 is a security update for the stable 1.2.x branch. All installations that are currently running any 1.2.x version are strongly advised to upgrade to this release. Download it from [3]. The following security issues were resolved: - Cross-site scripting (XSS) issue in account_sponsor_page.php, allowing a malicious user with project manager access to execute arbitrary JavaScript code (CVE-2013-4460). Affects MantisBT 1.1.0 and later. Refer to issue #16513 for detailed information. - SQL injection attacks through the SOAP API's mc_attachment_get() function (CVE-2014-1608). Affects MantisBT 1.1.0a4 and later. Refer to issue #16879 for detailed information. - Additional cases of unsanitized SQL query parameters usage were identified, potentially allowing SQL injection attacks (CVE-2014-1609). Refer to issue #16880 for detailed information. This release also includes many bug fixes and enhancements to the tracker and the SOAP api, as well as updated translations in many languages. A full changelog for the 1.2.x series can be found on the official site. [1] [1] The changelog is split between multiple releases: 1.2.17 http://www.mantisbt.org/bugs/changelog_page.php?version_id=189 1.2.16 http://www.mantisbt.org/bugs/changelog_page.php?version_id=183
71 lines
2.1 KiB
Makefile
71 lines
2.1 KiB
Makefile
# $NetBSD: Makefile,v 1.43 2014/09/24 01:06:26 rodent Exp $
|
|
|
|
DISTNAME= mantisbt-1.2.17
|
|
PKGNAME= ${DISTNAME:S/mantisbt/mantis/}
|
|
CATEGORIES= devel www
|
|
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=mantisbt/}
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.mantisbt.org/
|
|
COMMENT= PHP/MySQL/web based bugtracking system
|
|
LICENSE= gnu-gpl-v2
|
|
|
|
DEPENDS+= ${APACHE_PKG_PREFIX}-${PHP_PKG_PREFIX}>=4.0.6:../../www/ap-php
|
|
DEPENDS+= ${PHP_PKG_PREFIX}-mysql>=4.0.6:../../databases/php-mysql
|
|
|
|
NO_BUILD= YES
|
|
|
|
USE_TOOLS+= bash:run pax
|
|
|
|
APACHE_USER?= www
|
|
BUILD_DEFS+= APACHE_USER
|
|
|
|
PKG_USERS_VARS+= APACHE_USER
|
|
MESSAGE_SUBST+= PKG_SYSCONFDIR=${PKG_SYSCONFDIR:Q}
|
|
|
|
MANTIS_HOME= ${PREFIX}/share/mantis
|
|
EGDIR= ${PREFIX}/share/examples/mantis
|
|
CONF_FILES+= ${EGDIR}/mantis.conf ${PKG_SYSCONFDIR}/mantis.conf
|
|
CONF_FILES_PERMS+= ${EGDIR}/config_inc.php ${MANTIS_HOME}/config_inc.php \
|
|
${APACHE_USER} ${SHAREGRP} 0400
|
|
MANTIS_EG= config_inc.php mantis.conf mantis_offline.php.sample
|
|
|
|
SUBST_CLASSES+= conf
|
|
SUBST_STAGE.conf= pre-install
|
|
SUBST_FILES.conf= mantis.conf
|
|
SUBST_SED.conf= -e "s|@MANTIS_HOME@|${MANTIS_HOME}|g"
|
|
SUBST_MESSAGE.conf= Fixing configuration files.
|
|
|
|
REPLACE_BASH+= scripts/travis_before_script.sh
|
|
|
|
REPLACE_INTERPRETER+= php
|
|
REPLACE.php.old= /usr/bin/php
|
|
REPLACE.php.new= ${PREFIX}/bin/php
|
|
REPLACE_FILES.php= scripts/*.php
|
|
|
|
INSTALLATION_DIRS+= share/doc/mantis ${EGDIR} ${MANTIS_HOME}
|
|
|
|
.include "options.mk"
|
|
|
|
post-extract:
|
|
${CP} ${FILESDIR}/mantis.conf ${WRKSRC}
|
|
|
|
do-install:
|
|
${INSTALL_DATA} ${WRKSRC}/doc/CUSTOMIZATION ${DESTDIR}${PREFIX}/share/doc/mantis
|
|
${INSTALL_DATA} ${WRKSRC}/doc/INSTALL ${DESTDIR}${PREFIX}/share/doc/mantis
|
|
${MV} ${WRKSRC}/config_inc.php.sample ${WRKSRC}/config_inc.php
|
|
|
|
.for f in ${MANTIS_EG}
|
|
${INSTALL_DATA} ${WRKSRC}/${f} ${DESTDIR}${EGDIR}
|
|
${RM} ${WRKSRC}/${f}
|
|
.endfor
|
|
|
|
cd ${WRKSRC} && ${FIND} . -name .cvsignore -print | ${XARGS} ${RM} -f
|
|
cd ${WRKSRC} && pax -rwpppm . ${DESTDIR}${MANTIS_HOME}
|
|
|
|
cd ${DESTDIR}${MANTIS_HOME} && \
|
|
${FIND} . -type f | ${XARGS} ${CHMOD} ${SHAREMODE}
|
|
|
|
.include "../../lang/php/phpversion.mk"
|
|
.include "../../mk/apache.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|