www-apps/drupal: Security bump (CVE-2020-13671).

Add 7.74, 8.8.11, 8.9.9 and 9.0.8 releases.
Security issue: SA-CORE-2020-012
https://www.drupal.org/sa-core-2020-012
Bug: https://bugs.gentoo.org/755602
Package-Manager: Portage-3.0.6, Repoman-3.0.1
Signed-off-by: Jorge Manuel B. S. Vicetto (jmbsvicetto) <jmbsvicetto@gentoo.org>

5 files changed, 266 insertions, 0 deletions

diff --git a/www-apps/drupal/Manifest b/www-apps/drupal/Manifest
index f7657abae494..b2ab3284766a 100644
--- a/www-apps/drupal/Manifest
+++ b/www-apps/drupal/Manifest
@@ -1,6 +1,10 @@
 DIST drupal-7.73.tar.gz 3324289 BLAKE2B 85b40994ef336e8a155175597aaf36652850118400533b531d5bfe4ffd797abb9b362ccfb2a52cdf2e326fa4865492406c3ed4cf1a59a4e0aff0613c337c4301 SHA512 45f518ef8bc085eafc2292f6a41c17c2d034fa9261ba8c61549a46adb194020e036355c322abc64a355ff81d00ecd1f0acf0834d46ec028aac506c81f7297849
+DIST drupal-7.74.tar.gz 3324903 BLAKE2B a6c60955d103e53083f1f964c7a4facc11e4eb6543d191003277da7e28648ff20b10a83f3097c955be91b2fce2f9c39a0b7f84b3e5392dbf7874c55f7be934a7 SHA512 caaf9827ea786fce7ebcdddd4a4a404c0c8b642adb6a7fc436ebdb3db982576fa8fe6a43241e15c9164ec85a96248fb63001c7c2f867f33a2d366f8760f9e83c
 DIST drupal-8.8.10.tar.gz 19510031 BLAKE2B daae5669bdaa79ad1ae56a52993a390127fff56307b0256c0dfd9d118f1b09d3e8414b71334c74b01f9e9609870f75b25936bf72a78d051f543862d848daedb8 SHA512 1ebfb7f1f3d29ef00bd560e4ff4d236ee739bafb4f9687bce77dcd6da9746d42db4423a278b22a1b394bbf7eb769975eb69eaeeb16f4ea601cc13d9209309425
+DIST drupal-8.8.11.tar.gz 19510434 BLAKE2B d102c11d39b179419f014982401192f91117f96c25bd328439a620c2ba30c4ac0762ee2506d99519ba07cb86501b0adac84edb602c8d40eb0f68bf63766d0b79 SHA512 0c6dd1a3a6856ea2ea7fede6a62e000f186e8d9662cde15e5e5391f589bf2091378351b684d0d15d503e5a45b768fa5d866f7766b3a94bdf7ddd43127aa005ab
 DIST drupal-8.9.6.tar.gz 19789145 BLAKE2B aaa2c5e866fd74dc4e5d19bb4f00eae3333cb86b2b54969f31936cb627e2af0cc14b0e6d1d26b1366040cb3860752d3507b82341d706490fef35ff6ed5ca2316 SHA512 3938cca2736eb2a0fa5c2b12c0d8543f54d0480bbb42b51283f694aa67e7785b94e6d3b2bbeadfd304e9fc429c57b73c12243b178813b658537c42c1303c0d81
 DIST drupal-8.9.7.tar.gz 19791241 BLAKE2B dda9be1c810549134d591fd05f9fa52a59536ae5036bb87f23b972c732489efdc9278ba16e9c41d09e71448543543c12091b68273369af2ecde4d16afb7f039f SHA512 3bf9923e18a0fec49e06d798b555f5df7cd171cb341613a6619595bce7eeceb4ebb16160fc0b15ad845cfcf07edde67f5e103a286dc058b52fb9b078af8dd28e
+DIST drupal-8.9.9.tar.gz 19798680 BLAKE2B de2b20ce15d14763e2e8f63392a5d04185c1864b390310cd73d90df27758da8f223c59d4adac22801194de4dd3ec221f9b755ecf095e9da05d4c6d6a68b35877 SHA512 2a1a88c15aba6103812823bf08606806941480cb75536962654a329f9193a995b38f7434898ddaf057000f7f6d98b66db65772d2decd6e19db8a8f49f2aec318
 DIST drupal-9.0.6.tar.gz 16857960 BLAKE2B 0e85e16330b5c3df70443d2f516b0a5d4854db4c3e101dc29a04af7e76cb913b0349deb82643644e722d90c78f7ba4497b8712f229b4eede2fb867c95469d57f SHA512 ee5b0ab3f0fd25c70b6a44e10a2e54c945a3843c460d5769ba5022a82fc2726909f2c34b9823c5f82ee01d8145b739daf2fed3a78ef22454ad0db7f08a0812f1
 DIST drupal-9.0.7.tar.gz 16863270 BLAKE2B 6fa9ed549bf53c0c3a9ade1da8002c9fc7d6c8c29f9a258a82dcc0e0240dbf61892df6fd5997460076b759a1db79d3cd428f1441a067d0134092c9d43a5d8d73 SHA512 7ba5ba42d04e188b02908480ee483935799bca562bc2c927fc8fbf6862499eafd83a1680e19d692d7c08313d5801bf709af04c86285c32fe7ae6cd5c4c5539af
+DIST drupal-9.0.8.tar.gz 16862449 BLAKE2B 63de723f5fb8fed8a46d5a9b04a905b65aa9ca61939703a7da1cc2b42502aac18a36f1f7dd95619e128d743ca4855fc51200f98ac5f52e426c9c2d62d9f86ba3 SHA512 9e1fb325d2fea4eed05834a700165b2212dd2ab476457c2ac650e8227a4e85f863f87e4125c1a98bd5a4fa1dbc421165a3c5279df67869552c1b7ced0fc04d7e
diff --git a/www-apps/drupal/drupal-7.74.ebuild b/www-apps/drupal/drupal-7.74.ebuild
new file mode 100644
index 000000000000..4fd21d3cac4f
--- /dev/null
+++ b/www-apps/drupal/drupal-7.74.ebuild
@@ -0,0 +1,58 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit webapp
+
+MY_PV=${PV:0:3}.0
+
+DESCRIPTION="PHP-based open-source platform and content management system"
+HOMEPAGE="https://www.drupal.org/"
+SRC_URI="https://ftp.drupal.org/files/projects/${P}.tar.gz"
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~x86"
+IUSE="+mysql postgres sqlite +uploadprogress"
+
+RDEPEND="
+	dev-lang/php[gd,hash(+),mysql?,pdo,postgres?,simplexml,sqlite?,xml]
+	virtual/httpd-php
+	uploadprogress? ( dev-php/pecl-uploadprogress )
+"
+
+need_httpd_cgi
+
+REQUIRED_USE="|| ( mysql postgres sqlite )"
+
+src_install() {
+	webapp_src_preinst
+
+	local docs="MAINTAINERS.txt LICENSE.txt INSTALL.txt CHANGELOG.txt INSTALL.mysql.txt INSTALL.pgsql.txt INSTALL.sqlite.txt UPGRADE.txt "
+	dodoc ${docs}
+	rm -f ${docs} INSTALL COPYRIGHT.txt || die
+
+	cp sites/default/{default.settings.php,settings.php} || die
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+
+	dodir "${MY_HTDOCSDIR}"/files
+	webapp_serverowned "${MY_HTDOCSDIR}"/files
+	webapp_serverowned "${MY_HTDOCSDIR}"/sites/default
+	webapp_serverowned "${MY_HTDOCSDIR}"/sites/default/settings.php
+
+	webapp_configfile "${MY_HTDOCSDIR}"/sites/default/settings.php
+	webapp_configfile "${MY_HTDOCSDIR}"/.htaccess
+
+	webapp_postinst_txt en "${FILESDIR}"/postinstall-en.txt
+
+	webapp_src_install
+}
+
+pkg_postinst() {
+	echo
+	ewarn "SECURITY NOTICE"
+	ewarn "If you plan on using SSL on your Drupal site, please consult the postinstall information:"
+	ewarn "\t# webapp-config --show-postinst ${PN} ${PV}"
+	echo
+}
diff --git a/www-apps/drupal/drupal-8.8.11.ebuild b/www-apps/drupal/drupal-8.8.11.ebuild
new file mode 100644
index 000000000000..50acdd30770d
--- /dev/null
+++ b/www-apps/drupal/drupal-8.8.11.ebuild
@@ -0,0 +1,68 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit webapp
+
+MY_PV=${PV:0:3}.0
+MY_P=${P/_/-}
+S="${WORKDIR}/${MY_P}"
+
+DESCRIPTION="PHP-based open-source platform and content management system"
+HOMEPAGE="https://www.drupal.org/"
+SRC_URI="https://ftp.drupal.org/files/projects/${MY_P}.tar.gz"
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~x86"
+IUSE="+mysql postgres sqlite +uploadprogress"
+
+RDEPEND="
+	dev-lang/php[gd,hash(+),mysql?,pdo,postgres?,simplexml,sqlite?,xml]
+	virtual/httpd-php
+	uploadprogress? ( dev-php/pecl-uploadprogress )
+"
+
+need_httpd_cgi
+
+REQUIRED_USE="|| ( mysql postgres sqlite )"
+
+src_install() {
+	webapp_src_preinst
+
+	local docs="LICENSE.txt README.txt core/MAINTAINERS.txt core/INSTALL.txt core/CHANGELOG.txt \
+		core/INSTALL.mysql.txt core/INSTALL.pgsql.txt core/INSTALL.sqlite.txt core/UPDATE.txt "
+
+	dodoc ${docs}
+	rm -f ${docs} core/INSTALL core/COPYRIGHT.txt core/LICENSE.txt || die
+
+	cp sites/default/{default.settings.php,settings.php} || die
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+
+	dodir "${MY_HTDOCSDIR}"/files
+	webapp_serverowned "${MY_HTDOCSDIR}"/files
+
+	webapp_configfile "${MY_HTDOCSDIR}"/sites/default/settings.php
+	webapp_configfile "${MY_HTDOCSDIR}"/.htaccess
+
+	webapp_postinst_txt en "${FILESDIR}"/postinstall-en.txt
+
+	webapp_src_install
+}
+
+pkg_postinst() {
+	echo
+	ewarn "SECURITY NOTICE"
+	ewarn "If you plan on using SSL on your Drupal site, please consult the postinstall information:"
+	ewarn "\t# webapp-config --show-postinst ${PN} ${PV}"
+	echo
+	ewarn "If this is a new install, unless you want anyone with network access to your server to be"
+	ewarn "able to run the setup, you'll have to configure your web server to limit access to it."
+	echo
+	ewarn "If you're doing a new drupal-8 install, you'll have to copy /sites/default/default.services.yml"
+	ewarn "to /sites/default/services.yml and grant it write permissions to your web server."
+	ewarn "Just follow the instructions of the drupal setup and be sure to resolve any permissions issue"
+	ewarn "reported by the setup."
+	echo
+}
diff --git a/www-apps/drupal/drupal-8.9.9.ebuild b/www-apps/drupal/drupal-8.9.9.ebuild
new file mode 100644
index 000000000000..50acdd30770d
--- /dev/null
+++ b/www-apps/drupal/drupal-8.9.9.ebuild
@@ -0,0 +1,68 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit webapp
+
+MY_PV=${PV:0:3}.0
+MY_P=${P/_/-}
+S="${WORKDIR}/${MY_P}"
+
+DESCRIPTION="PHP-based open-source platform and content management system"
+HOMEPAGE="https://www.drupal.org/"
+SRC_URI="https://ftp.drupal.org/files/projects/${MY_P}.tar.gz"
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~x86"
+IUSE="+mysql postgres sqlite +uploadprogress"
+
+RDEPEND="
+	dev-lang/php[gd,hash(+),mysql?,pdo,postgres?,simplexml,sqlite?,xml]
+	virtual/httpd-php
+	uploadprogress? ( dev-php/pecl-uploadprogress )
+"
+
+need_httpd_cgi
+
+REQUIRED_USE="|| ( mysql postgres sqlite )"
+
+src_install() {
+	webapp_src_preinst
+
+	local docs="LICENSE.txt README.txt core/MAINTAINERS.txt core/INSTALL.txt core/CHANGELOG.txt \
+		core/INSTALL.mysql.txt core/INSTALL.pgsql.txt core/INSTALL.sqlite.txt core/UPDATE.txt "
+
+	dodoc ${docs}
+	rm -f ${docs} core/INSTALL core/COPYRIGHT.txt core/LICENSE.txt || die
+
+	cp sites/default/{default.settings.php,settings.php} || die
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+
+	dodir "${MY_HTDOCSDIR}"/files
+	webapp_serverowned "${MY_HTDOCSDIR}"/files
+
+	webapp_configfile "${MY_HTDOCSDIR}"/sites/default/settings.php
+	webapp_configfile "${MY_HTDOCSDIR}"/.htaccess
+
+	webapp_postinst_txt en "${FILESDIR}"/postinstall-en.txt
+
+	webapp_src_install
+}
+
+pkg_postinst() {
+	echo
+	ewarn "SECURITY NOTICE"
+	ewarn "If you plan on using SSL on your Drupal site, please consult the postinstall information:"
+	ewarn "\t# webapp-config --show-postinst ${PN} ${PV}"
+	echo
+	ewarn "If this is a new install, unless you want anyone with network access to your server to be"
+	ewarn "able to run the setup, you'll have to configure your web server to limit access to it."
+	echo
+	ewarn "If you're doing a new drupal-8 install, you'll have to copy /sites/default/default.services.yml"
+	ewarn "to /sites/default/services.yml and grant it write permissions to your web server."
+	ewarn "Just follow the instructions of the drupal setup and be sure to resolve any permissions issue"
+	ewarn "reported by the setup."
+	echo
+}
diff --git a/www-apps/drupal/drupal-9.0.8.ebuild b/www-apps/drupal/drupal-9.0.8.ebuild
new file mode 100644
index 000000000000..50acdd30770d
--- /dev/null
+++ b/www-apps/drupal/drupal-9.0.8.ebuild
@@ -0,0 +1,68 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit webapp
+
+MY_PV=${PV:0:3}.0
+MY_P=${P/_/-}
+S="${WORKDIR}/${MY_P}"
+
+DESCRIPTION="PHP-based open-source platform and content management system"
+HOMEPAGE="https://www.drupal.org/"
+SRC_URI="https://ftp.drupal.org/files/projects/${MY_P}.tar.gz"
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~x86"
+IUSE="+mysql postgres sqlite +uploadprogress"
+
+RDEPEND="
+	dev-lang/php[gd,hash(+),mysql?,pdo,postgres?,simplexml,sqlite?,xml]
+	virtual/httpd-php
+	uploadprogress? ( dev-php/pecl-uploadprogress )
+"
+
+need_httpd_cgi
+
+REQUIRED_USE="|| ( mysql postgres sqlite )"
+
+src_install() {
+	webapp_src_preinst
+
+	local docs="LICENSE.txt README.txt core/MAINTAINERS.txt core/INSTALL.txt core/CHANGELOG.txt \
+		core/INSTALL.mysql.txt core/INSTALL.pgsql.txt core/INSTALL.sqlite.txt core/UPDATE.txt "
+
+	dodoc ${docs}
+	rm -f ${docs} core/INSTALL core/COPYRIGHT.txt core/LICENSE.txt || die
+
+	cp sites/default/{default.settings.php,settings.php} || die
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+
+	dodir "${MY_HTDOCSDIR}"/files
+	webapp_serverowned "${MY_HTDOCSDIR}"/files
+
+	webapp_configfile "${MY_HTDOCSDIR}"/sites/default/settings.php
+	webapp_configfile "${MY_HTDOCSDIR}"/.htaccess
+
+	webapp_postinst_txt en "${FILESDIR}"/postinstall-en.txt
+
+	webapp_src_install
+}
+
+pkg_postinst() {
+	echo
+	ewarn "SECURITY NOTICE"
+	ewarn "If you plan on using SSL on your Drupal site, please consult the postinstall information:"
+	ewarn "\t# webapp-config --show-postinst ${PN} ${PV}"
+	echo
+	ewarn "If this is a new install, unless you want anyone with network access to your server to be"
+	ewarn "able to run the setup, you'll have to configure your web server to limit access to it."
+	echo
+	ewarn "If you're doing a new drupal-8 install, you'll have to copy /sites/default/default.services.yml"
+	ewarn "to /sites/default/services.yml and grant it write permissions to your web server."
+	ewarn "Just follow the instructions of the drupal setup and be sure to resolve any permissions issue"
+	ewarn "reported by the setup."
+	echo
+}