[pkgsrc/pkgsrc-2005Q2]: pkgsrc/devel/bugzilla Pullup ticket 600 - requested b...

[snj <snj%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/5466493e0a38
branches:  pkgsrc-2005Q2
changeset: 495869:5466493e0a38
user:      snj <snj%pkgsrc.org@localhost>
date:      Thu Jul 14 22:01:51 2005 +0000

description:
Pullup ticket 600 - requested by Adrian Portelli
security update for bugzilla

Revisions pulled up:
- pkgsrc/devel/bugzilla/Makefile        1.8
- pkgsrc/devel/bugzilla/PLIST           1.4
- pkgsrc/devel/bugzilla/distinfo        1.7

    Module Name:    pkgsrc
    Committed By:   adrianp
    Date:           Thu Jul 14 10:26:29 UTC 2005

    Modified Files:
            pkgsrc/devel/bugzilla: Makefile PLIST distinfo

    Log Message:
    - Update to 2.18.3
    - Update addresses two security issues
    - From the ChangeLog:

    > Version 2.18.2
    > --------------
    >
    > + You can now create accounts with createaccount.cgi even
    >   when the "requirelogin" parameter is turned on. (Bug 294778)
    >
    > + Bugs that are in disabled groups may not show a padlock
    >   on the bug list, or may otherwise behave strangely. You
    >   can now fix this using sanitycheck.cgi. (Bug 277454)
    >
    > + If sendmail dies while you are marking a bug
    >   as a duplicate, the duplicates table will no longer become
    >   corrupted. (Bug 225042)
    >
    > + Any user can change a flag on any bug. This also allows the
    >   attacker to expose the summary of any bug, even a hidden bug.
    >
    > + Summaries of private bugs are sometimes exposed under a very rare
    >   condition if you use MySQL replication.
    >
    > Version 2.18.3
    > --------------
    >
    > + The query.cgi page was broken in 2.18.2 by bug 300138.
    >   That is now fixed.

diffstat:

 devel/bugzilla/Makefile |   5 ++---
 devel/bugzilla/PLIST    |  12 ++++++------
 devel/bugzilla/distinfo |   8 ++++----
 3 files changed, 12 insertions(+), 13 deletions(-)

diffs (54 lines):

diff -r 6419a0a0713a -r 5466493e0a38 devel/bugzilla/Makefile
--- a/devel/bugzilla/Makefile   Thu Jul 14 21:47:19 2005 +0000
+++ b/devel/bugzilla/Makefile   Thu Jul 14 22:01:51 2005 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.7 2005/06/17 22:58:02 adrianp Exp $
+# $NetBSD: Makefile,v 1.7.2.1 2005/07/14 22:01:51 snj Exp $
 #
 
-DISTNAME=      bugzilla-2.18.1
-PKGREVISION=   1
+DISTNAME=      bugzilla-2.18.3
 CATEGORIES=    www devel
 MASTER_SITES=  http://ftp.mozilla.org/pub/mozilla.org/webtools/
 
diff -r 6419a0a0713a -r 5466493e0a38 devel/bugzilla/PLIST
--- a/devel/bugzilla/PLIST      Thu Jul 14 21:47:19 2005 +0000
+++ b/devel/bugzilla/PLIST      Thu Jul 14 22:01:51 2005 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2005/05/15 17:04:32 adrianp Exp $
+@comment $NetBSD: PLIST,v 1.3.2.1 2005/07/14 22:01:51 snj Exp $
 share/bugzilla/1x1.gif
 share/examples/bugzilla/bugzilla.conf
 share/examples/bugzilla/localconfig
@@ -127,11 +127,11 @@
 share/bugzilla/docs/html/trbl-relogin-everyone.html
 share/bugzilla/docs/html/trbl-passwd-encryption.html
 share/bugzilla/docs/html/trouble-filetemp.html
-share/bugzilla/docs/html/x2918.html
-share/bugzilla/docs/html/x2925.html
-share/bugzilla/docs/html/x2935.html
-share/bugzilla/docs/html/x2940.html
-share/bugzilla/docs/html/x2994.html
+share/bugzilla/docs/html/x2941.html
+share/bugzilla/docs/html/x2948.html
+share/bugzilla/docs/html/x2958.html
+share/bugzilla/docs/html/x2963.html
+share/bugzilla/docs/html/x3017.html
 share/bugzilla/docs/images/bzLifecycle.png
 share/bugzilla/docs/images/bzLifecycle.xml
 share/bugzilla/docs/images/callouts/1.gif
diff -r 6419a0a0713a -r 5466493e0a38 devel/bugzilla/distinfo
--- a/devel/bugzilla/distinfo   Thu Jul 14 21:47:19 2005 +0000
+++ b/devel/bugzilla/distinfo   Thu Jul 14 22:01:51 2005 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2005/06/17 22:58:02 adrianp Exp $
+$NetBSD: distinfo,v 1.6.2.1 2005/07/14 22:01:51 snj Exp $
 
-SHA1 (bugzilla-2.18.1.tar.gz) = ec582315d2a909929045494b5ad11ffe97fc63bf
-RMD160 (bugzilla-2.18.1.tar.gz) = fbcecb2ec617fc2291aed680787464b72b312a50
-Size (bugzilla-2.18.1.tar.gz) = 1542054 bytes
+SHA1 (bugzilla-2.18.3.tar.gz) = c0916d8dc00955ec03e5af4f3b215b351047684a
+RMD160 (bugzilla-2.18.3.tar.gz) = c683f387c33379196cf5c3abad64bb02314dbc29
+Size (bugzilla-2.18.3.tar.gz) = 1649951 bytes
 SHA1 (patch-aa) = 8b25ff33bb77ce226b52ccf97ec7c91c1e95a6a1