svn commit: r370211 - head/devel/bugzilla44

Mon Oct 6 19:16:44 UTC 2014

Author: ohauer
Date: Mon Oct  6 19:16:42 2014
New Revision: 370211
URL: https://svnweb.freebsd.org/changeset/ports/370211
QAT: https://qat.redports.org/buildarchive/r370211/

Log:
  - update to bugzilla 4.4.6
  
  Summary
  =======
  The following security issues have been discovered in Bugzilla:
  
  * The 'realname' parameter is not correctly filtered on user account
    creation, which could lead to user data override.
  * Several places were found in the Bugzilla code where cross-site
    scripting attacks could be used to access sensitive information.
  * Private comments can be shown to flagmail recipients who aren't in
    the insider group
  * Specially formatted values in a CSV search results export could be
    used in spreadsheet software to attack a user's computer.
  
  Security:	CVE-2014-1572
  		CVE-2014-1571
  		CVE-2014-1571

Modified:
  head/devel/bugzilla44/Makefile
  head/devel/bugzilla44/distinfo
  head/devel/bugzilla44/pkg-plist

Modified: head/devel/bugzilla44/Makefile
==============================================================================

--- head/devel/bugzilla44/Makefile	Mon Oct  6 19:09:37 2014	(r370210)
+++ head/devel/bugzilla44/Makefile	Mon Oct  6 19:16:42 2014	(r370211)
@@ -1,8 +1,7 @@
 # $FreeBSD$
 
 PORTNAME=	bugzilla
-PORTVERSION=	4.4.5
-PORTREVISION=	1
+PORTVERSION=	4.4.6
 CATEGORIES=	devel
 MASTER_SITES=	BUGZILLA
 MASTER_SITE_SUBDIR=	webtools webtools/archived
@@ -50,7 +49,7 @@ RUN_DEPENDS+=	p5-DBD-mysql>=4.0001:${POR
 .endif
 
 .if ${PORT_OPTIONS:MPGSQL}
-USE_PGSQL=	yes
+USES+=		pgsql
 RUN_DEPENDS+=	p5-DBD-Pg>=2.19.3:${PORTSDIR}/databases/p5-DBD-Pg
 .endif
 

Modified: head/devel/bugzilla44/distinfo
==============================================================================
--- head/devel/bugzilla44/distinfo	Mon Oct  6 19:09:37 2014	(r370210)
+++ head/devel/bugzilla44/distinfo	Mon Oct  6 19:16:42 2014	(r370211)
@@ -1,2 +1,2 @@
-SHA256 (bugzilla/bugzilla-4.4.5.tar.gz) = 70609fa5bbe55a3b802afcf749a098824d7a96dc87b91ce07b000cfdd7987da5
-SIZE (bugzilla/bugzilla-4.4.5.tar.gz) = 2955964
+SHA256 (bugzilla/bugzilla-4.4.6.tar.gz) = ac3547195f2ce156488aac2cc537620775e08a9d888441daab2b40ab66ab01f4
+SIZE (bugzilla/bugzilla-4.4.6.tar.gz) = 2956046

Modified: head/devel/bugzilla44/pkg-plist
==============================================================================
--- head/devel/bugzilla44/pkg-plist	Mon Oct  6 19:09:37 2014	(r370210)
+++ head/devel/bugzilla44/pkg-plist	Mon Oct  6 19:16:42 2014	(r370211)
@@ -887,178 +887,14 @@
 %%WWWDIR%%/whine.pl
 %%WWWDIR%%/whineatnews.pl
 %%WWWDIR%%/xmlrpc.cgi
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Auth
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Config
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/DB
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Field
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Install
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/JobQueue
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Search
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Template/Plugin
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Template
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/User/Setting
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/User
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/WebService/Server
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/WebService
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla/Whine
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/Bugzilla
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/contrib
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api/extensions
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html/api
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/html
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/images/callouts
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/images
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/pdf
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/txt
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en/xml
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/en
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/lib/Pod/Simple/HTML
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/lib/Pod/Simple/HTMLBatch
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/lib/Pod/Simple
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/lib/Pod
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/lib
-%%PORTDOCS%%@dirrm %%DOCSDIR%%/xsl
-%%PORTDOCS%%@dirrm %%DOCSDIR%%
- at dirrm %%WWWDIR%%/Bugzilla/Attachment
- at dirrm %%WWWDIR%%/Bugzilla/Auth/Login
- at dirrm %%WWWDIR%%/Bugzilla/Auth/Persist
- at dirrm %%WWWDIR%%/Bugzilla/Auth/Verify
- at dirrm %%WWWDIR%%/Bugzilla/Auth
- at dirrm %%WWWDIR%%/Bugzilla/BugUrl/Bugzilla
- at dirrm %%WWWDIR%%/Bugzilla/BugUrl
- at dirrm %%WWWDIR%%/Bugzilla/Config
- at dirrm %%WWWDIR%%/Bugzilla/DB/Schema
- at dirrm %%WWWDIR%%/Bugzilla/DB
- at dirrm %%WWWDIR%%/Bugzilla/Field
- at dirrm %%WWWDIR%%/Bugzilla/Install
- at dirrm %%WWWDIR%%/Bugzilla/Job
- at dirrm %%WWWDIR%%/Bugzilla/JobQueue
- at dirrm %%WWWDIR%%/Bugzilla/Migrate
- at dirrm %%WWWDIR%%/Bugzilla/Search
- at dirrm %%WWWDIR%%/Bugzilla/Send
- at dirrm %%WWWDIR%%/Bugzilla/Template/Plugin
- at dirrm %%WWWDIR%%/Bugzilla/Template
- at dirrm %%WWWDIR%%/Bugzilla/User/Setting
- at dirrm %%WWWDIR%%/Bugzilla/User
- at dirrm %%WWWDIR%%/Bugzilla/WebService/Server
- at dirrm %%WWWDIR%%/Bugzilla/WebService
- at dirrm %%WWWDIR%%/Bugzilla/Whine
- at dirrmtry %%WWWDIR%%/Bugzilla
-%%CONTRIB%%@dirrm %%WWWDIR%%/contrib/bugzilla-submit
-%%CONTRIB%%@dirrm %%WWWDIR%%/contrib/cmdline
- at dirrmtry %%WWWDIR%%/contrib
- at dirrmtry %%WWWDIR%%/data
- at dirrmtry %%WWWDIR%%/graphs
- at dirrmtry %%WWWDIR%%/images
- at dirrm %%WWWDIR%%/js/history.js
- at dirrm %%WWWDIR%%/js/yui/animation
- at dirrm %%WWWDIR%%/js/yui/assets/skins/sam
- at dirrm %%WWWDIR%%/js/yui/assets/skins
- at dirrm %%WWWDIR%%/js/yui/assets
- at dirrm %%WWWDIR%%/js/yui/autocomplete
- at dirrm %%WWWDIR%%/js/yui/base
- at dirrm %%WWWDIR%%/js/yui/button
- at dirrm %%WWWDIR%%/js/yui/calendar
- at dirrm %%WWWDIR%%/js/yui/carousel
- at dirrm %%WWWDIR%%/js/yui/charts
- at dirrm %%WWWDIR%%/js/yui/colorpicker
- at dirrm %%WWWDIR%%/js/yui/connection
- at dirrm %%WWWDIR%%/js/yui/container
- at dirrm %%WWWDIR%%/js/yui/cookie
- at dirrm %%WWWDIR%%/js/yui/datasource
- at dirrm %%WWWDIR%%/js/yui/datatable
- at dirrm %%WWWDIR%%/js/yui/datemath
- at dirrm %%WWWDIR%%/js/yui/dom
- at dirrm %%WWWDIR%%/js/yui/dragdrop
- at dirrm %%WWWDIR%%/js/yui/element
- at dirrm %%WWWDIR%%/js/yui/element-delegate
- at dirrm %%WWWDIR%%/js/yui/event
- at dirrm %%WWWDIR%%/js/yui/event-delegate
- at dirrm %%WWWDIR%%/js/yui/event-mouseenter
- at dirrm %%WWWDIR%%/js/yui/event-simulate
- at dirrm %%WWWDIR%%/js/yui/fonts
- at dirrm %%WWWDIR%%/js/yui/get
- at dirrm %%WWWDIR%%/js/yui/grids
- at dirrm %%WWWDIR%%/js/yui/history
- at dirrm %%WWWDIR%%/js/yui/imagecropper
- at dirrm %%WWWDIR%%/js/yui/imageloader
- at dirrm %%WWWDIR%%/js/yui/json
- at dirrm %%WWWDIR%%/js/yui/layout
- at dirrm %%WWWDIR%%/js/yui/logger
- at dirrm %%WWWDIR%%/js/yui/menu
- at dirrm %%WWWDIR%%/js/yui/paginator
- at dirrm %%WWWDIR%%/js/yui/profiler
- at dirrm %%WWWDIR%%/js/yui/profilerviewer
- at dirrm %%WWWDIR%%/js/yui/progressbar
- at dirrm %%WWWDIR%%/js/yui/reset
- at dirrm %%WWWDIR%%/js/yui/reset-fonts
- at dirrm %%WWWDIR%%/js/yui/reset-fonts-grids
- at dirrm %%WWWDIR%%/js/yui/resize
- at dirrm %%WWWDIR%%/js/yui/selector
- at dirrm %%WWWDIR%%/js/yui/slider
- at dirrm %%WWWDIR%%/js/yui/storage
- at dirrm %%WWWDIR%%/js/yui/stylesheet
- at dirrm %%WWWDIR%%/js/yui/swf
- at dirrm %%WWWDIR%%/js/yui/swfdetect
- at dirrm %%WWWDIR%%/js/yui/swfstore
- at dirrm %%WWWDIR%%/js/yui/tabview
- at dirrm %%WWWDIR%%/js/yui/treeview
- at dirrm %%WWWDIR%%/js/yui/uploader
- at dirrm %%WWWDIR%%/js/yui/yahoo
- at dirrm %%WWWDIR%%/js/yui/yahoo-dom-event
- at dirrm %%WWWDIR%%/js/yui/yuiloader
- at dirrm %%WWWDIR%%/js/yui/yuitest
- at dirrm %%WWWDIR%%/js/yui
- at dirrm %%WWWDIR%%/js
- at dirrmtry %%WWWDIR%%/lib
- at dirrm %%WWWDIR%%/skins/contrib/Dusk
- at dirrm %%WWWDIR%%/skins/contrib
- at dirrm %%WWWDIR%%/skins/standard/dependency-tree
- at dirrm %%WWWDIR%%/skins/standard/global
- at dirrm %%WWWDIR%%/skins/standard/index
- at dirrm %%WWWDIR%%/skins/standard
- at dirrmtry %%WWWDIR%%/skins
- at dirrmtry %%WWWDIR%%/t
- at dirrm %%WWWDIR%%/template/en/default/account/auth
- at dirrm %%WWWDIR%%/template/en/default/account/email
- at dirrm %%WWWDIR%%/template/en/default/account/password
- at dirrm %%WWWDIR%%/template/en/default/account/prefs
- at dirrm %%WWWDIR%%/template/en/default/account
- at dirrm %%WWWDIR%%/template/en/default/admin/classifications
- at dirrm %%WWWDIR%%/template/en/default/admin/components
- at dirrm %%WWWDIR%%/template/en/default/admin/custom_fields
- at dirrm %%WWWDIR%%/template/en/default/admin/fieldvalues
- at dirrm %%WWWDIR%%/template/en/default/admin/flag-type
- at dirrm %%WWWDIR%%/template/en/default/admin/groups
- at dirrm %%WWWDIR%%/template/en/default/admin/keywords
- at dirrm %%WWWDIR%%/template/en/default/admin/milestones
- at dirrm %%WWWDIR%%/template/en/default/admin/params
- at dirrm %%WWWDIR%%/template/en/default/admin/products/groupcontrol
- at dirrm %%WWWDIR%%/template/en/default/admin/products
- at dirrm %%WWWDIR%%/template/en/default/admin/sanitycheck
- at dirrm %%WWWDIR%%/template/en/default/admin/settings
- at dirrm %%WWWDIR%%/template/en/default/admin/users
- at dirrm %%WWWDIR%%/template/en/default/admin/versions
- at dirrm %%WWWDIR%%/template/en/default/admin/workflow
- at dirrm %%WWWDIR%%/template/en/default/admin
- at dirrm %%WWWDIR%%/template/en/default/attachment
- at dirrm %%WWWDIR%%/template/en/default/bug/activity
- at dirrm %%WWWDIR%%/template/en/default/bug/create
- at dirrm %%WWWDIR%%/template/en/default/bug/process
- at dirrm %%WWWDIR%%/template/en/default/bug
- at dirrm %%WWWDIR%%/template/en/default/email
- at dirrm %%WWWDIR%%/template/en/default/extensions
- at dirrm %%WWWDIR%%/template/en/default/flag
- at dirrm %%WWWDIR%%/template/en/default/global
- at dirrm %%WWWDIR%%/template/en/default/list
- at dirrm %%WWWDIR%%/template/en/default/pages
- at dirrm %%WWWDIR%%/template/en/default/reports
- at dirrm %%WWWDIR%%/template/en/default/request
- at dirrm %%WWWDIR%%/template/en/default/search
- at dirrm %%WWWDIR%%/template/en/default/setup
- at dirrm %%WWWDIR%%/template/en/default/whine
- at dirrm %%WWWDIR%%/template/en/default
- at dirrm %%WWWDIR%%/template/en
- at dirrmtry %%WWWDIR%%/template
- at dirrmtry %%WWWDIR%%/xt
- at dirrmtry %%WWWDIR%%
+ at dir %%WWWDIR%%/Bugzilla
+ at dir %%WWWDIR%%/contrib
+ at dir %%WWWDIR%%/data
+ at dir %%WWWDIR%%/graphs
+ at dir %%WWWDIR%%/images
+ at dir %%WWWDIR%%/lib
+ at dir %%WWWDIR%%/skins
+ at dir %%WWWDIR%%/t
+ at dir %%WWWDIR%%/template
+ at dir %%WWWDIR%%/xt
+ at dir %%WWWDIR%%
