| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
20 Feb 2013 06:16:01
  3.6.13
|
ohauer  |
- update bugzilla ports to latest version
Bugzilla 4.0.10 and 3.6.13 are security updates for the 4.0
branch and the 3.6 branch, respectively. 4.0.10 contains several
useful bug fixes and 3.6.13 contains only security fixes.
Security: CVE-2013-0785
CVE-2013-0786 |
14 Nov 2012 21:31:11
3.6.12
 |
ohauer |
- adjust required PgSQL module for bugzilla42
From Release Notes:
PostgreSQL 9.2 requires DBD::Pg 2.19.3. (Bug 799721)
No revision bump, p5-DBD-Pg-2.19.3
a) not on per default
b) in the tree since a view months
- add deprecation message to bugzilla3
From the announcement:
Note that when Bugzilla 4.4 is released, the Bugzilla 3.6.x series
will reach end of life. If you are using that series, we encourage
you to upgrade to 4.2.4 now.
http://groups.google.com/group/mozilla.support.bugzilla/browse_thread/thread/d8dcc99be0f89421
Feature safe: yes |
14 Nov 2012 19:29:42
3.6.12
|
ohauer |
- bugzilla security updates to version(s)
3.6.11, 4.0.8, 4.2.4
Summary
=======
The following security issues have been discovered in Bugzilla:
* Confidential product and component names can be disclosed to
unauthorized users if they are used to control the visibility of
a custom field.
* When calling the 'User.get' WebService method with a 'groups'
argument, it is possible to check if the given group names exist
or not. (Only the first 15 lines of the commit message are shown above  ) |
01 Sep 2012 20:16:06
3.6.11
|
ohauer |
- update bugzilla bugzilla3 and bugzilla42
- use new bugzilla@ address (members skv@, tota@, ohauer@)
- patch russian/japanese/german bugzilla and bugzilla templates
so the reflect the security updates in the original templates
- patch german/bugzilla42 templates
- adopt new Makefile header
vuxml: 6ad18fe5-f469-11e1-920d-20cf30e32f6d
CVE: CVE-2012-3981
https://bugzilla.mozilla.org/show_bug.cgi?id=785470
https://bugzilla.mozilla.org/show_bug.cgi?id=785522
https://bugzilla.mozilla.org/show_bug.cgi?id=785511 |
18 Aug 2012 14:29:11
3.6.10
|
ohauer |
- remove www/apache20 and devel/apr0
- s/USE_APACHE= 20+/USE_APACHE= 22+/
- unify s/YES/yes/
- cleanup APACHE_VERSION <= 22 usage
- add entry to MOVED
with hat apache@ |
28 Jul 2012 16:25:12
3.6.10
|
ohauer |
- pkgng: cosmetic fix against lstat messages |
27 Jul 2012 21:34:05
3.6.10
|
ohauer |
- security update bugzilla
new Versions: 3.6.10, 4.0.7, 4.2.2
4.2.2
This release fixes two security issues. See the Security Advisory for details.
In addition, the following important fixes/changes have been made in this
release:
o A regression introduced in Bugzilla 4.0 caused some login names to be
ignored
when entered in the CC list of bugs. (Bug 756314)
o Some queries could trigger an invalid SQL query if strings entered by the
user
contained leading or trailing whitespaces. (Bug 760075)
o The auto-completion form for keywords no longer automatically selects the
first keyword in the list when the field is empty. (Bug 764517)(Only the first 15 lines of the commit message are shown above ) |
24 Jul 2012 20:41:56
3.6.9
|
ohauer |
- convert to options NG
Approved by: skv@ (implicit) |
24 Jul 2012 19:24:22
3.6.9
|
ohauer |
- fix broken mod_perl include
apache version detect was not enabled,
the time SITE_PERL was removed from *_DEPENDS |
03 Jul 2012 17:38:41
3.6.9
|
az |
graphics/ImageMagick can change package name via PKGNAMESUFFIX.
We should not rely on this.
Reported by: Jarrod Sayers <jarrod at downtools.com.au>
Pointy hat: az@ |
01 Jul 2012 14:43:24
3.6.9
|
crees |
Update devel/p5-chart --> devel/p5-Chart to fix INDEX build
Pointyhat: sunpoet |
29 Jun 2012 10:15:24
3.6.9
|
az |
- Remove SITE_PERL from *_DEPENDS
Approved by: portmgr@ (bapt@) |
21 Apr 2012 17:37:42
3.6.9
|
ohauer |
- security update to bugzilla 3.0.9 and 4.0.6
- update russian/bugzilla3-ru template
- patch german templates so revision match and no warning is displayed
- add vuxml entry
Approved by: skv (implicit)
Security: https://bugzilla.mozilla.org/show_bug.cgi?id=728639
https://bugzilla.mozilla.org/show_bug.cgi?id=745397
CVE-2012-0465
CVE-2012-0466 |
06 Feb 2012 12:08:25
3.6.8
|
skv |
Update to 3.6.8
Changes:
http://www.bugzilla.org/releases/3.6.8/release-notes.html#v36_point
Security:
http://www.vuxml.org/freebsd/309542b5-50b9-11e1-b0d8-00151735203a.html |
05 Jan 2012 17:25:06
3.6.7
|
ohauer |
- update to version 3.6.7
- CVE-2011-3657
- CVE-2011-3667
Summary
=======
The following security issues have been discovered in Bugzilla:
* When viewing tabular or graphical reports as well as new charts,
an XSS vulnerability is possible in debug mode.
* The User.offer_account_by_email WebService method lets you create
a new user account even if the active authentication method forbids
users to create an account.
* A CSRF vulnerability in post_bug.cgi and in attachment.cgi could
lead to the creation of unwanted bug reports and attachments.
All affected installations are encouraged to upgrade as soon as possible.
Full Release Notes:
http://www.bugzilla.org/security/3.4.12/
Approved by: skv@ (explicit) |
17 Oct 2011 04:35:02
3.6.6
|
dougb |
Remove references to mysql 323 and 40, most commonly of the form:
IGNORE_WITH_MYSQL= 323 40 |
13 Aug 2011 18:25:04
3.6.6
|
skv |
Update to 3.6.6
Changes: http://www.bugzilla.org/releases/3.6.6/release-notes.html
Security:
http://www.vuxml.org/freebsd/dc8741b9-c5d5-11e0-8a8e-00151735203a.html |
18 Jul 2011 21:56:02
3.6.5
|
ohauer |
- create missing (empty) directory (bugzilla) so checksetup does not fail
- use DIST_SUBDIR for bugzilla and all translations
- sort pkg-plist (genplist)
OK from bugzilla maintainers per PM.
PR: ports/158766
Submitted by: ohauer |
11 Jun 2011 04:27:50
3.6.5
|
tota |
- Update to 3.6.5
- Cleanup CONFLICTS/PORTSCOUT among Makefiles and Makefile.common |
07 Jun 2011 16:00:26
3.6.5
|
skv |
- Remove obsolete devel/bugzilla2
- Tune devel/bugzilla* : add PORTSCOUT, LATEST_LINK, CONFLICTS, LICENSE |
07 Jun 2011 13:30:01
3.6.5
 |
skv |
- Copy devel/bugzilla to devel/bugzilla3; russian/bugzilla-ru to
russian/bugzilla3-ru
- Update devel/bugzilla, russian/bugzilla-ru to 4.0.1
- Update devel/bugzilla3, russian/bugzilla3-ru to 3.6.5
Changes: http://www.bugzilla.org/releases/4.0.1/release-notes.html
http://www.bugzilla.org/releases/3.6.5/release-notes.html |
If you buy from Amazon USA, please support us by using this link.
