Number of commits found: 43

- pkgng: cosmetic fix against lstat messages

- security update to bugzilla 3.0.9 and 4.0.6
- update russian/bugzilla3-ru template
- patch german templates so revision match and no warning is displayed
- add vuxml entry

Approved by:    skv (implicit)
Security:       https://bugzilla.mozilla.org/show_bug.cgi?id=728639
                https://bugzilla.mozilla.org/show_bug.cgi?id=745397
                CVE-2012-0465
                CVE-2012-0466

- update to version 3.6.7
- CVE-2011-3657
- CVE-2011-3667

Summary
=======

The following security issues have been discovered in Bugzilla:

* When viewing tabular or graphical reports as well as new charts,
  an XSS vulnerability is possible in debug mode.

* The User.offer_account_by_email WebService method lets you create
  a new user account even if the active authentication method forbids
  users to create an account.

* A CSRF vulnerability in post_bug.cgi and in attachment.cgi could
  lead to the creation of unwanted bug reports and attachments.

All affected installations are encouraged to upgrade as soon as possible.

Full Release Notes:
http://www.bugzilla.org/security/3.4.12/

Approved by:    skv@ (explicit)

- Fix checksetup issue if p5-version>=0.92 is installed (which is in current
ports tree)
  See https://bugzilla.mozilla.org/show_bug.cgi?id=678772

PR:             ports/159823
Submitted by:   ohauer
Approved by:    skv (per mail)
Obtained from: 
https://bugzilla.mozilla.org/attachment.cgi?id=552915&action=diff

- create missing (empty) directory (bugzilla) so checksetup does not fail
- use DIST_SUBDIR for bugzilla and all translations
- sort pkg-plist (genplist)

OK from bugzilla maintainers per PM.

PR:             ports/158766
Submitted by:   ohauer

- Copy devel/bugzilla to devel/bugzilla3; russian/bugzilla-ru to
russian/bugzilla3-ru
- Update devel/bugzilla, russian/bugzilla-ru to 4.0.1
- Update devel/bugzilla3, russian/bugzilla3-ru to 3.6.5

Changes:        http://www.bugzilla.org/releases/4.0.1/release-notes.html
                http://www.bugzilla.org/releases/3.6.5/release-notes.html

- bump because of mod_perl2 update
- order pkg-plist so it match autmated tools like genplist
- add missing empty directories (used by checksetup.pl) [1]

commit with hat apache@

PR:             [1] ports/154295
Submitted by:   me

- Update to 3.6.3 [1]
- Use WWWDIR instead of some other custom locations [2]
- Add Makefile.common which Makefiles in devel/bugzilla, russian/bugzilla-ru
  and japanese/bugzilla include to use WWWDIR in common [2]

Changes:        http://www.bugzilla.org/releases/3.6.3/release-notes.html [1]
Security:       http://www.bugzilla.org/security/3.2.8/ [1]
PR:     ports/151912 [1], [2]
Submitted by:   ohauer [1], tota (myself) [2]
Approved by:    skv

Update to 3.6

Changes:        http://www.bugzilla.org/releases/3.6/release-notes.html

Update to 3.4.3

Changes:        http://www.bugzilla.org/releases/3.4.3/release-notes.html
PR:             ports/140327
Submitted by:   Sahil Tandon <sahil xx tandon.net>

Update to 3.4.2.

Changes:        http://www.bugzilla.org/security/3.0.8/
Security:      
http://www.vuxml.org/freebsd/b9ec7fe3-a38a-11de-9c6b-003048818f40.html
Feature safe:   yes

Update to 3.4.1.

Changes:        http://www.bugzilla.org/security/3.4/
Security:      
http://www.vuxml.org/freebsd/d67b517d-8214-11de-88ea-001a4d49522b.html

Update to 3.4

Changes:        http://www.bugzilla.org/releases/3.4/release-notes.html

Update to 3.2.2

Changes:        http://www.bugzilla.org/releases/3.2.2/release-notes.html
PR:             ports/131404
Submitted by:   pgollucci

Install killer feature - 'Dusk' skin.

Update to 3.2

Changes:        http://www.bugzilla.org/releases/3.2/release-notes.html
PR:             ports/129333
Submitted by:   Eygene Ryabinkin <rea-fbsd xx codelabs.ru>

Update to 3.0.5

Changes:        http://www.bugzilla.org/releases/3.0.5/release-notes.html
Security:      
http://www.vuxml.org/freebsd/1d96305d-6ae6-11dd-91d5-000c29d47fd7.html

Update to 3.0.4

Changes:               
http://www.bugzilla.org/releases/3.0.4/release-notes.html#v30_point

Update to 3.0.3

Changes:       
http://www.bugzilla.org/releases/3.0.3/release-notes.html#v30_point

Update to 3.0.1

Changes:        http://www.bugzilla.org/releases/3.0.1/release-notes.html

Upgrade Bugzilla to 3.0; repocopy 2.x branch to devel/bugzilla2

* update to 2.22.2
* remove EMAIL_GATEWAY option (it's by default now)
* add dependency on p5-Mail-Tools [1]

Changes:        http://www.bugzilla.org/releases/2.22.2/release-notes.html
PR:             ports/103453 [1]
Submitted by:   Cezary Morga <cezarym@data.pl> [1]

Update to 2.22.1

Changes:        http://www.bugzilla.org/releases/2.22.1/release-notes.html
PR:             ports/105554
Sumbitted by:   Ulrich Spoerlein <uspoerlein xxx gmail.com>

Update to 2.22

Changes:        http://www.bugzilla.org/releases/2.22/release-notes.html

Update Bugzilla to 2.20.1

Approved by:    portmgr (clement)
Pointed by:     mnag
Security:       http://vuxml.FreeBSD.org/46f7b598-a781-11da-906a-fde5cdde365e

Try to remove www/data

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

Update to 2.20

Update to 2.18.3, bug-fixes:

* https://bugzilla.mozilla.org/show_bug.cgi?id=293159
* https://bugzilla.mozilla.org/show_bug.cgi?id=292544

Reported by:    simon
Security:      
http://vuxml.freebsd.org/6e33f4ab-efed-11d9-8310-0001020eed82.html

Update to 2.18.1

PR:             ports/81583
Submitted by:   Choe, Cheng-Dae <whitekid at gmail.com>

* add OPTIONS
* use APACHE_DATADIR if defined
* fix RUN_DEPENDS
* fix pkg-plist
* update pkg-descr
* take maintainership

- Because of bugzilla's bugs. checksetup.pl doesn't check File::Spec modules
version. So disable it's version check.
(https://bugzilla.mozilla.org/show_bug.cgi?id=257933)
- fix web server's uid/gid
- fix plist that not listed

PR:             ports/76946
Submitted by:   "Choe, Cheng-Dae" <whitekid (at) gmail.com>

- Update to 2.18

PR:             ports/76531
Submitted by:   "Choe, Cheng-Dae" <whitekid@gmail.com>

[PATCH] devel/bugzilla: update to 2.16.6

    - Update to 2.16.6

PR:             ports/69105
Submitted by:   TAKATSU Tomonari <tota@rtfm.jp>

Fix a typo: s/NOPORTSDOCS/NOPORTDOCS/ for Makefile [1]
Use ${DOCSDIR} [2]
s/share\/doc\/.../%%DOCSDIR%%/ for pkg-plist [2]

PR:             53911
Submitted by:   Oliver Eikemeier <eikemeier@fillmore-labs.com> [1]
                osa [2]
Approved by:    fjoe (mentor) (implicit)

- Fix something which has been broken in this port for a long time:
  installation to ${PREFIX}/www/data.default.  "data.default" was an artifact
  of a long obsolete version of the Apache port.  Put installation directory
  under control of a variable $BUGZILLADIR instead.  Carry through to
  pkg-plist via a pragma.
- Bump $PORTREVISION.

redirect rmdir stderr to /dev/null

Security update to 2.16.3.
See http://www.bugzilla.org/security/2.16.2/.

PR:             52096

Add WITH_CONTRIB knob to install contributed scripts.

Submitted by:   Alexey Neyman <alexey.neyman (at) auriga.ru>

Update to 2.16.2

PR:             47883

Fix plist

* don't setup README.docs. It's developers resource.   * use ${INSTALL} directly
instead of ${INSTALL_DATA} to preserve     exec permissions for scripts   * add
post-install target to display pkg-message   * rewrite pkg-message to give
minimal quick setup instructions    

Add bugzilla 2.14, bug-tracking system developed by Mozilla Project    

Number of commits found: 43

11 vulnerabilities affecting 80 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2018-12-10 14:03:22