Removed vulnerable rt-3.6.3, rt-3.6.6, added rt-3.6.7 (sec issue #230007).

Package-Manager: portage-2.1.4.4

4 files changed, 16 insertions, 255 deletions

diff --git a/www-apps/rt/ChangeLog b/www-apps/rt/ChangeLog
index 16eb8b5b3ae9..775ba574c2ef 100644
--- a/www-apps/rt/ChangeLog
+++ b/www-apps/rt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for www-apps/rt
 # Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.56 2008/04/03 09:57:12 hollow Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.57 2008/07/01 16:48:46 wrobel Exp $
+
+*rt-3.6.7 (01 Jul 2008)
+
+  01 Jul 2008; wrobel@gentoo.org -rt-3.6.3.ebuild, -rt-3.6.6.ebuild,
+  +rt-3.6.7.ebuild:
+  Removed vulnerable rt-3.6.3, rt-3.6.6, added rt-3.6.7 (sec issue #230007).
 
   03 Apr 2008; Benedikt Böhm <hollow@gentoo.org>
   -files/3.4.5/postinstall-en.txt, -files/3.4.5/reconfig,
diff --git a/www-apps/rt/Manifest b/www-apps/rt/Manifest
index 6d6830149c95..8ff604a85aeb 100644
--- a/www-apps/rt/Manifest
+++ b/www-apps/rt/Manifest
@@ -8,16 +8,14 @@ AUX rt.conf.d 399 RMD160 3ff349449e9722497becf7f32cf8bb9667b98d33 SHA1 73f85eb60
 AUX rt.init.d 1013 RMD160 c6853447d8653cfbcf26316c0a432e3474298467 SHA1 bf7408b6c3a30a7a80ece3e51bf1b0446f68e5df SHA256 45f75de68ee588538d093eb6d57d8368004e075fecafff2f82bb0f2978da79d7
 AUX rt_apache2.conf 550 RMD160 a9f463c8f7c4803a32f0e8380e594c2eb6f5f05a SHA1 b11218515f2c43cd2738be71e4e3b25ce8b4bb38 SHA256 db52d05f10cb6ed1bb236ed9e6fc5cc7574b5949c5cb85b5719d0132cbb072cc
 AUX rt_apache2_fcgi.conf 989 RMD160 f88807ad0db9806ee2c638e998ab10e9339a9ed6 SHA1 92ea95bae0a8c2b31b058385b789e9b7fce4f8b1 SHA256 7dff43c9fb73daa06c9c4841199e7618758250129946ec9d20adf5a1852e4e91
-DIST rt-3.6.3.tar.gz 1602818 RMD160 3eab454d374334e5df4939c2c4af316628b12965 SHA1 793de4655c0fa7bbfd3aa6eeefe5a1d143d07677 SHA256 fc29f1fd95b3cd4813e3fbdef1882e8cd6c4516c66b3e78237272bdd200a1a67
-DIST rt-3.6.6.tar.gz 1715913 RMD160 46d928304d0435f122cecb9a62df137bf47b0e56 SHA1 fa0f3787027851348f52eefda8fee13f30b43ca7 SHA256 509bac5ab588b0a69030d6ee91061e27dd124d9f8d795000b307e5d85a2dbf14
-EBUILD rt-3.6.3.ebuild 6249 RMD160 920f539dda59eb5bfe86f458b992271ff6a425cf SHA1 8b58d2888c2dced1ff548e0996e6263fde5f73a1 SHA256 beaae0415f4ecdfe3634fae006a73112e5b59fb0232a3d483acf79a4a15fc7d2
-EBUILD rt-3.6.6.ebuild 6145 RMD160 fd38e189622d3306fb4c271aab59cfd56a66e212 SHA1 5d96f427621c378b253a318d8d2975945de88f80 SHA256 26fb10b766ae7e35e33a5cfbc0b7ab1fcdcfbd76ab8eece9a08f2a796569c9d8
-MISC ChangeLog 8772 RMD160 b8bce6b8833a08181d37293008cf451265ddeaf3 SHA1 e7578fce61c59c2a44f08a317277fa7028961ae4 SHA256 6f7e6e9b52dab918f0127595cf96b65c2d4cdbbc4b56346979695cd9e3ee6c16
+DIST rt-3.6.7.tar.gz 1764471 RMD160 f14ce94a2d9fcb243c6fae274fc5602cae4692cd SHA1 990fd47899bed1ec8e7d23556853fb3a70d95479 SHA256 5916fe002d3739e670aef49a4b12aa385e45eea4602adcf12feaef583a73f6c1
+EBUILD rt-3.6.7.ebuild 6179 RMD160 63cab91730e0526ece4b2763776e160c2e61fa09 SHA1 5c121e6f3c92ff202187108995314fff106eedb0 SHA256 0b957b5ab1d2495001c846284d805cc2a5d49ec327b4f9d659ffde78b0c84808
+MISC ChangeLog 8964 RMD160 6df52e85849336772c16eb12ed38e47c491ebc77 SHA1 c0911813175446526bd6eecf49456e6188088b06 SHA256 e1d4f09d2e5a8ef56429acc4c2528bb3b81f008e4c9f702795efee1946fd27f1
 MISC metadata.xml 224 RMD160 6473c0e4796e967137528ff82a99aad5b7e410c9 SHA1 b69add64067ccc2d56e521ac0e5799cc8a47fd75 SHA256 d093d9f523cc0019dc1107d9955a0b24fb0a796dbc032775dbdafe782c0c4066
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.7 (GNU/Linux)
 
-iD8DBQFH9KoEmPFBzbX68WERAqOBAKCL/8YtgWrTFV30HRd9rDYWABzS+QCeLs7Y
-RhE7bU6njYAd+rRblM2/uiU=
-=elsj
+iD8DBQFIal/5EEcxCpcDQ74RAiIkAKCTdUGzrEB81qiWlF7Nn2KJrd/kuQCghdtO
+8FoZV51cX2P9Jex/fctV5Wk=
+=3mUb
 -----END PGP SIGNATURE-----
diff --git a/www-apps/rt/rt-3.6.3.ebuild b/www-apps/rt/rt-3.6.3.ebuild
deleted file mode 100644
index eaa5cb010c18..000000000000
--- a/www-apps/rt/rt-3.6.3.ebuild
+++ /dev/null
@@ -1,244 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.3.ebuild,v 1.10 2008/04/03 09:57:12 hollow Exp $
-
-inherit webapp eutils depend.apache
-
-IUSE="mysql postgres fastcgi lighttpd"
-
-DESCRIPTION="RT is an enterprise-grade ticketing system"
-HOMEPAGE="http://www.bestpractical.com/rt/"
-SRC_URI="http://download.bestpractical.com/pub/${PN}/release/${P}.tar.gz"
-
-KEYWORDS="~amd64 ~ppc ~x86"
-
-DEPEND="
-	>=dev-lang/perl-5.8.3
-
-	>=dev-perl/Params-Validate-0.02
-	dev-perl/Cache-Cache
-	>=dev-perl/Exception-Class-1.14
-	>dev-perl/HTML-Mason-1.23
-	dev-perl/MLDBM
-	dev-perl/FreezeThaw
-	>=virtual/perl-Digest-MD5-2.27
-	>=virtual/perl-CGI-2.92
-	>=virtual/perl-Storable-2.08
-	>=dev-perl/Apache-Session-1.53
-	>=dev-perl/XML-RSS-1.05
-	>=dev-perl/HTTP-Server-Simple-0.07
-	>=dev-perl/HTTP-Server-Simple-Mason-0.09
-	dev-perl/GD
-	dev-perl/GDGraph
-	dev-perl/GDTextUtil
-	>=dev-perl/Text-WikiFormat-0.76
-
-	!lighttpd? (
-		>=dev-perl/Apache-DBI-0.92
-		!fastcgi? ( >=www-apache/libapreq2-2.06
-					>=dev-perl/HTML-Mason-1.31 )
-		fastcgi? ( dev-perl/FCGI )
-	)
-	lighttpd? ( dev-perl/FCGI )
-
-	mysql? ( >=dev-perl/DBD-mysql-2.1018 )
-	postgres? ( >=dev-perl/DBD-Pg-1.43 )
-
-	>=virtual/perl-Getopt-Long-2.24
-
-	dev-perl/HTML-Tree
-	dev-perl/HTML-Format
-	dev-perl/libwww-perl
-
-	dev-perl/Calendar-Simple
-
-	virtual/perl-digest-base
-	>=dev-perl/DBI-1.37
-	dev-perl/Test-Inline
-	>=dev-perl/class-returnvalue-0.40
-	>=dev-perl/dbix-searchbuilder-1.39
-	dev-perl/text-template
-	>=virtual/perl-File-Spec-0.8
-	dev-perl/HTML-Parser
-	>=dev-perl/HTML-Scrubber-0.08
-	virtual/perl-libnet
-	>=dev-perl/log-dispatch-2.0
-	>=virtual/perl-locale-maketext-1.06
-	>=dev-perl/locale-maketext-lexicon-0.32
-	dev-perl/locale-maketext-fuzzy
-	>=dev-perl/MIME-tools-5.417
-	>=dev-perl/MailTools-1.60
-	dev-perl/text-wrapper
-	dev-perl/Time-modules
-	dev-perl/TimeDate
-	virtual/perl-Time-HiRes
-	virtual/perl-File-Temp
-	dev-perl/TermReadKey
-	dev-perl/text-autoformat
-	>=dev-perl/Text-Quoted-1.3
-	>=dev-perl/Tree-Simple-1.04
-	virtual/perl-Scalar-List-Utils
-	dev-perl/Module-Versions-Report
-	dev-perl/Cache-Simple-TimedExpiry
-	dev-perl/UNIVERSAL-require
-	dev-perl/regexp-common
-"
-
-RDEPEND="
-	${DEPEND}
-	virtual/mta
-	!lighttpd? ( ${APACHE2_DEPEND} )
-	lighttpd? ( >=www-servers/lighttpd-1.3.13 )
-"
-
-LICENSE="GPL-2"
-
-add_user_rt() {
-	# add new user
-	# suexec2 requires uid >= 1000; enewuser is of no help here
-	# From: Mike Frysinger <vapier@gentoo.org>
-	# Date: Fri, 17 Jun 2005 08:41:44 -0400
-	# i'd pick a 5 digit # if i were you
-
-	local euser="rt"
-
-	# first check if username rt exists
-	if [[ ${euser} == $(egetent passwd "${euser}" | cut -d: -f1) ]] ; then
-		# check uid
-		rt_uid=$(egetent passwd "${euser}" | cut -d: -f3)
-		if $(expr ${rt_uid} '<' 1000 > /dev/null); then
-			ewarn "uid of user rt is less than 1000. suexec2 will not work."
-			ewarn "If you want to use FastCGI, please delete the user 'rt'"
-			ewarn "from your system and re-emerge www-apps/rt"
-			epause
-		fi
-		return 0 # all is well
-	fi
-
-	# add user
-	# stolen from enewuser
-	local pwrange euid
-
-	pwrange=$(seq 10001 11001)
-	for euid in ${pwrange} ; do
-		[[ -z $(egetent passwd ${euid}) ]] && break
-	done
-	if [[ ${euid} == "11001" ]]; then
-		# she gets around, doesn't she?
-		die "No available uid's found"
-	fi
-
-	elog " - Userid: ${euid}"
-
-	enewuser rt ${euid} -1 /dev/null rt > /dev/null
-	return 0
-}
-
-pkg_setup() {
-	webapp_pkg_setup
-
-	ewarn
-	ewarn "If you are upgrading from an existing _RT2_ installation,"
-	ewarn "stop this ebuild (Ctrl-C now), download the upgrade tool,"
-	ewarn "http://bestpractical.com/pub/rt/devel/rt2-to-rt3.tar.gz"
-	ewarn "and follow the included instructions."
-	ewarn
-	epause 5
-	enewgroup rt >/dev/null
-	add_user_rt || die "Could not add user"
-}
-
-src_unpack() {
-	unpack ${A}
-	cd ${S}
-
-	# add Gentoo-specific layout
-	cat ${FILESDIR}/config.layout-gentoo >> config.layout
-	sed -e "s|PREFIX|${D}/${MY_HOSTROOTDIR}/${PF}|
-			s|HTMLDIR|${D}/${MY_HTDOCSDIR}|g" -i ./config.layout || die
-
-	# don't need to check dev dependencies
-	sed -e "s|\$args{'with-DEV'} =1;|#\$args{'with-DEV'} =1;|" -i sbin/rt-test-dependencies.in || die
-}
-
-src_compile() {
-
-	local web="apache"
-	useq lighttpd && web="lighttpd"
-
-	local dbtype=""
-	local dba=""
-
-	if useq mysql; then
-		dbtype="--with-db-type=mysql"
-		dba="--with-db-dba=root"
-	fi
-	if useq postgres;then
-		dbtype="--with-db-type=Pg"
-		dba="--with-db-dba=postgres"
-	fi
-	if useq postgres && useq mysql; then
-		ewarn "Both mysql and postgres USE flags enabled, default is mysql."
-		ewarn "You can set the default value in RT_SiteConfig before DB init."
-		dbtype="--with-db-type=mysql"
-		dba="--with-db-dba=root"
-	fi
-
-	./configure --enable-layout=Gentoo \
-		--with-bin-owner=rt \
-		--with-libs-owner=rt \
-		--with-libs-group=rt \
-		--with-rt-group=rt \
-		--with-web-user=${web} \
-		--with-web-group=${web} \
-		${dbtype} ${dba}
-
-	# check for missing deps and ask to report if something is broken
-	local myconf="--verbose $(use_with mysql) \
-		$(use_with postgres postgresql) \
-		$(use_with fastcgi) \
-		$(use_with lighttpd fastcgi)"
-	if ! useq fastcgi && ! useq lighttpd ; then
-		myconf="${myconf} --with-modperl2"
-	fi
-
-	/usr/bin/perl ./sbin/rt-test-dependencies ${myconf} > ${T}/t
-	if grep -q "MISSING" ${T}/t; then
-		ewarn "Missing Perl dependency!"
-		ewarn
-		cat ${T}/t | grep MISSING
-		ewarn
-		ewarn "Please run perl-cleaner. If the problem persists,"
-		ewarn "please file a bug in the Gentoo Bugzilla with the information above"
-		die "Missing dependencies."
-	fi
-}
-
-src_install() {
-	webapp_src_preinst
-
-	make install
-
-	# make sure we don't clobber existing site configuration
-	rm -f ${D}/${MY_HOSTROOTDIR}/${PF}/etc/RT_SiteConfig.pm
-
-	# copy upgrade files
-	cp -R etc/upgrade ${D}/${MY_HOSTROOTDIR}/${PF}
-
-	cd ${D}
-	grep -Rl "${D}" * | xargs dosed
-
-	if useq lighttpd; then
-		newinitd ${FILESDIR}/${PN}.init.d ${PN}
-		newconfd ${FILESDIR}/${PN}.conf.d ${PN}
-		dosed "s/@@PF@@/${PF}/g" /etc/conf.d/${PN}
-	else
-		local CONF="rt_apache2_fcgi.conf rt_apache2.conf"
-		cd ${FILESDIR} && cp ${CONF} ${D}/${MY_HOSTROOTDIR}/${PF}/etc
-	fi
-	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
-	webapp_hook_script ${FILESDIR}/reconfig
-
-	webapp_serverowned ${MY_HOSTROOTDIR}/${PF}/var
-	webapp_src_install
-}
diff --git a/www-apps/rt/rt-3.6.6.ebuild b/www-apps/rt/rt-3.6.7.ebuild
index e07752a19fa3..99b75edb8cbe 100644
--- a/www-apps/rt/rt-3.6.6.ebuild
+++ b/www-apps/rt/rt-3.6.7.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2008 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.6.ebuild,v 1.2 2008/04/03 09:57:12 hollow Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.7.ebuild,v 1.1 2008/07/01 16:48:46 wrobel Exp $
 
 inherit webapp eutils depend.apache confutils
 
@@ -21,7 +21,8 @@ DEPEND="
 	>=dev-perl/class-returnvalue-0.40
 	>=dev-perl/CSS-Squish-0.06
 	>=dev-perl/DBI-1.37
-	>=dev-perl/dbix-searchbuilder-1.50
+	>=dev-perl/dbix-searchbuilder-1.53
+	>=dev-perl/Devel-StackTrace-1.19
 	dev-perl/GD
 	dev-perl/GDGraph
 	dev-perl/GDTextUtil