Version bump. Fixes CVE-2010-1204 (3.2, 3.4, 3.6) and CVE-2010-0180 (3.6 only)

Package-Manager: portage-2.2_rc67_p182/cvs/Linux x86_64

5 files changed, 325 insertions, 2 deletions

diff --git a/www-apps/bugzilla/ChangeLog b/www-apps/bugzilla/ChangeLog
index e9eb2a1db3ce..2caa44be728d 100644
--- a/www-apps/bugzilla/ChangeLog
+++ b/www-apps/bugzilla/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for www-apps/bugzilla
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/bugzilla/ChangeLog,v 1.164 2010/05/08 17:11:01 armin76 Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/bugzilla/ChangeLog,v 1.165 2010/06/30 09:19:50 tove Exp $
+
+*bugzilla-3.6.1 (30 Jun 2010)
+*bugzilla-3.4.7 (30 Jun 2010)
+*bugzilla-3.2.7 (30 Jun 2010)
+
+  30 Jun 2010; Torsten Veller <tove@gentoo.org> +bugzilla-3.2.7.ebuild,
+  +bugzilla-3.4.7.ebuild, +bugzilla-3.6.1.ebuild:
+  Version bump. Fixes CVE-2010-1204 (3.2, 3.4, 3.6) and CVE-2010-0180 (3.6
+  only)
 
   08 May 2010; Raúl Porcel <armin76@gentoo.org> bugzilla-3.6.ebuild:
   Add ~alpha/~ia64/~sparc wrt #315793
diff --git a/www-apps/bugzilla/Manifest b/www-apps/bugzilla/Manifest
index c1e71a5121b9..1277ba94c19d 100644
--- a/www-apps/bugzilla/Manifest
+++ b/www-apps/bugzilla/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX 2.20/apache.htaccess 94 RMD160 7492341edfe6ff1396908ceb6fbeccfadc8822df SHA1 a65742dcb5802ec889e3550dac545323128d0d7d SHA256 c20815b7f9b92a6971d0372e34e4c24b700c5e7228e8903bc7715aa3e6e22709
 AUX 2.20/bugzilla.cron.daily 115 RMD160 248700f6e811dd958fc3774b63c07d5e85ae477e SHA1 f7811fd35ce2abc6f8358abfdb5afd5b903d6cf4 SHA256 004cf631625c9a6f2b0aeccf2a2ead815008f59029326c13b28658586023b241
 AUX 2.20/bugzilla.cron.tab 54 RMD160 199919c125f0b214e17d6eadf909f7172b025137 SHA1 cbfc9f2051c3ce7f2f968f65a683c0fe7c8884df SHA256 ccbc9369bf52e6afd91e31ba2a89fa9a0bbbdae080e0fa7eb26d06fa21ef1eab
@@ -24,15 +27,28 @@ DIST bugzilla-2.20.6.tar.gz 2079216 RMD160 93e2db0b3acc250bb274d28fe2cdb6db9b63c
 DIST bugzilla-2.22.7.tar.gz 2113576 RMD160 cb1657fb4dbff8b73f834b3fc671ff4eebc7c5bd SHA1 93af1543565585dbbae1d791459b762b1399d7c4 SHA256 efb2fc9cfc16b64d1c050b6f0b2a8248f36d86cff5213f9c97891146f4ee68d9
 DIST bugzilla-3.0.11.tar.gz 2424830 RMD160 a6eea0e8f7437d3c2904f2994842d736b2911ec1 SHA1 8aa5365a9b681bb89cabc2f096fb2de763517918 SHA256 fd099ade3c66ee42d7e955e8ae6be9ed41d12e3653cb5cbd44ab6b42e4638c28
 DIST bugzilla-3.2.6.tar.gz 2397184 RMD160 21e0bbe78e40b10ffbb6476732da92cc1ed700f5 SHA1 82ff34108146a26a8eb4e6b562b53d0aeea7ec64 SHA256 8fcfd5a6bf184a3cc26b3154b65678bc416286bb3171ee2303e466eb7da586ce
+DIST bugzilla-3.2.7.tar.gz 2395423 RMD160 8fb00ce74829f2d4e2cbb2fea02ec1c417a7d1e9 SHA1 f89987f9711b54b7fa5e7591a313047e7a2712b4 SHA256 2df71642ecc222ebf75f621707e8fdb4ddfd21c40f50d262eb35df37bd909b5d
 DIST bugzilla-3.4.5.tar.gz 2468790 RMD160 c3212c2bee3c0fb8e8a865be66bf7499e0fb8ad6 SHA1 058464849fee51f959293898d93cb092648a3011 SHA256 313fbdc35c15f47d2d56d4cf1450fe27edddf4621783fad6183dec1a6e5ae6eb
 DIST bugzilla-3.4.6.tar.gz 2468688 RMD160 9004f4f8174c2e37ed5473bcdba5f55a519d605b SHA1 623f868aecb21c174cc2e74e599eb16e3210a03f SHA256 cfe3d2c526420bd7911420102d214afa2a559840c262101a69877347f44a4d12
+DIST bugzilla-3.4.7.tar.gz 2470986 RMD160 863098e48bfb55f7d58689faa6ca6d471532a5e0 SHA1 4a1baea63abbc7eddaa0451fcd04fcd59755ddf5 SHA256 acdb3eda7ee3ec26b8e4ad52bf63e75922b540bd8634280a04c538b4fa00da9a
+DIST bugzilla-3.6.1.tar.gz 2631968 RMD160 bf9630cd428dc85b9c48da3c46b9ef76e0d300fe SHA1 149d0a83e3ffffab148cc743f4e0e0a66b322540 SHA256 a8e343558628ba020bbb92844f665650a90ade080b248e757a34aa958ca16573
 DIST bugzilla-3.6.tar.gz 2629396 RMD160 961457243202f189db2bbeecf810c0a7703786a0 SHA1 d81dbb89d60f7399de6c5cf233edcb3cb9159ec9 SHA256 9ea0c093113212db3e45963f19a1000b7204adae23982ec67b36c673a1d50a6e
 EBUILD bugzilla-2.20.6.ebuild 1807 RMD160 36b7e9b4236df61106b5b67866a505c11e4a7b20 SHA1 fc449c8baaea86cc2e650a365431083a7f54319b SHA256 719312b39668001f984b0cbe599d7d0c911836f1eae17ff50f5b19d2f5bded0d
 EBUILD bugzilla-2.22.7.ebuild 1881 RMD160 b6db3ba3477b452851d76be22de653b0b77efe28 SHA1 9e8365d5cd0f4374b5b253eec1608929d17dc172 SHA256 c8fc6c4e057edd298c53b32c49185e47c731f0491e0e9988df35c1c6c8f70b8d
 EBUILD bugzilla-3.0.11.ebuild 2146 RMD160 226b1f6d4ab5d8c06a00cb8beb0c9a7dcb31d509 SHA1 a2f73242ff77f8c5cc997394bb9787859d2626ce SHA256 ce7a622913737729cd5d3d5a259fd90ea0264c60af6bfd2e7e8170662a141db1
 EBUILD bugzilla-3.2.6.ebuild 2114 RMD160 5dbeb12a7c3403529c6e7e60c1b46b882ac1281d SHA1 f11ac72a25d29c8e626afc6195dfc529a0a3049e SHA256 3430f9de2110671bc711bfd98d4ada30055070527382916969b2f7f778a687f1
+EBUILD bugzilla-3.2.7.ebuild 2121 RMD160 4bd2401dae1e5fecfccd4ee734281d7306253b09 SHA1 121b9f101e34aff55046e45cca46623e39da29f3 SHA256 e6ff8a8e096116e39ab836f178eac2b1419dac73ab83a5c75e3167dc1384d4bc
 EBUILD bugzilla-3.4.5.ebuild 2433 RMD160 6d141080c87b2f99f4cfffc17020b4eef40dd42a SHA1 c81693815c34b581c3500443ee843c5a5b081357 SHA256 555769e181ab89527ad491b39463f27882a54b618911762a17389c8afbb43e34
 EBUILD bugzilla-3.4.6.ebuild 2440 RMD160 2d50318496e7eca8228ee028ad4aeafaba77413d SHA1 6da873a7a3d95728f2ef70b0eff883a7c16560cc SHA256 d9cf039c7e4778aa41f382cf2b9ee02acd94f052392029843b0286fe9a2b3356
+EBUILD bugzilla-3.4.7.ebuild 2440 RMD160 061b1080d2e67cf412de0fd0b50f9d1c44317de1 SHA1 183b1917f83c5436afc5ae1600428c7a1b697ac4 SHA256 e49dffc1c303c4c31692021152bf98b453cab2b42cecec398e5553eb1274e9bc
+EBUILD bugzilla-3.6.1.ebuild 2477 RMD160 52382ade0fcf4707791a36a1385993ce6930b5c0 SHA1 e598582096a50f29ea10ba13508bd2bddf73343a SHA256 ecac8bea044e852bd995ccab33f74ba917a83152c38218d1545b769ab99e8e45
 EBUILD bugzilla-3.6.ebuild 2478 RMD160 b55988206d24e0223007eef01f5188633f8bbde6 SHA1 65b8de068b5bcd1c7fd9b42b808b543a177e3482 SHA256 5469f88fc591f4adfa13051867f8916024ca562c425b77a92fdd3f510319fd11
-MISC ChangeLog 27997 RMD160 e63825d84b841370251b947a583ef07f8f965618 SHA1 aa4d4d33d480d7b180d7b75709459365e09fc076 SHA256 426e307a8144c3c55de4af477aecf95fddfd8cd0e4d9fb58461509f2ebd20af1
+MISC ChangeLog 28291 RMD160 8d22f5c344b308da44c4a1b8c8b8c1879a0f0ac3 SHA1 9d0181ae61823224dc142ef19402c141cd62261a SHA256 634b0522ce5c51411b6118f4d655c5e427122eeb598144823011e58dafa5192f
 MISC metadata.xml 299 RMD160 f7465f32665923c1477e57d29804c6bcbdb5332f SHA1 c67523f618c37d3e5e576dc2a5dcdd895b71e008 SHA256 258613f9f7391942eb3b8d252a06c5ec47cea080621b408ae1cda78bd2c67f7e
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.15 (GNU/Linux)
+
+iEYEARECAAYFAkwrDDwACgkQV3J2n04EauxVWACfYoa6hShMnbpKyV5kETcQL24D
+I7oAoLddEjZZEDjxZe/NznNt7S1BzXqC
+=dTR8
+-----END PGP SIGNATURE-----
diff --git a/www-apps/bugzilla/bugzilla-3.2.7.ebuild b/www-apps/bugzilla/bugzilla-3.2.7.ebuild
new file mode 100644
index 000000000000..dfb2d96f5b45
--- /dev/null
+++ b/www-apps/bugzilla/bugzilla-3.2.7.ebuild
@@ -0,0 +1,92 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/bugzilla/bugzilla-3.2.7.ebuild,v 1.1 2010/06/30 09:19:51 tove Exp $
+
+EAPI="2"
+
+inherit webapp depend.apache versionator eutils
+
+MY_PB=3.0
+
+DESCRIPTION="Bugzilla is the Bug-Tracking System from the Mozilla project"
+SRC_URI="http://ftp.mozilla.org/pub/mozilla.org/webtools/${P}.tar.gz"
+HOMEPAGE="http://www.bugzilla.org"
+
+LICENSE="MPL-1.1 NPL-1.1"
+KEYWORDS="~alpha ~amd64 ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+
+IUSE="modperl extras graphviz mysql postgres"
+
+RDEPEND="
+	virtual/httpd-cgi
+	>=dev-lang/perl-5.8.8
+
+	>=dev-perl/DBI-1.601
+	>=dev-perl/Email-MIME-1.900
+	>=dev-perl/Email-MIME-Encodings-1.313
+	>=dev-perl/Email-Send-2.190
+	>=dev-perl/MIME-tools-5.427
+	>=dev-perl/Template-Toolkit-2.19
+	>=dev-perl/TimeDate-1.16
+	>=virtual/perl-CGI-3.29
+	>=virtual/perl-File-Spec-3.27.01
+	>=virtual/perl-MIME-Base64-3.07
+
+	mysql? ( >=dev-perl/DBD-mysql-4.00.5 )
+	postgres? ( >=dev-perl/DBD-Pg-1.49 )
+	graphviz? ( media-gfx/graphviz )
+
+	modperl? (
+		>=dev-perl/Apache-DBI-1.06
+		www-apache/mod_perl:1
+	)
+
+	extras? (
+		dev-perl/Authen-SASL
+		>=dev-perl/Chart-2.4.1
+		dev-perl/Email-MIME-Attachment-Stripper
+		dev-perl/Email-Reply
+		>=dev-perl/GD-2.35
+		dev-perl/GDGraph
+		dev-perl/GDTextUtil
+		>=dev-perl/HTML-Parser-3.60
+		dev-perl/HTML-Scrubber
+		dev-perl/libwww-perl
+		>=dev-perl/PatchReader-0.9.5
+		dev-perl/perl-ldap
+		dev-perl/SOAP-Lite
+		dev-perl/Template-GD
+		dev-perl/XML-Twig
+		media-gfx/imagemagick[perl]
+	)
+"
+
+want_apache modperl
+
+pkg_setup() {
+	depend.apache_pkg_setup modperl
+	webapp_pkg_setup
+}
+
+src_prepare() {
+	ecvs_clean
+}
+
+src_install () {
+	webapp_src_preinst
+
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+	for f in bugzilla.cron.daily bugzilla.cron.tab; do
+		doins "${FILESDIR}"/${MY_PB}/${f}
+	done
+
+	webapp_hook_script "${FILESDIR}"/${MY_PB}/reconfig
+	webapp_postinst_txt en "${FILESDIR}"/${MY_PB}/postinstall-en.txt
+	webapp_src_install
+
+	# bug #124282
+	chmod +x "${D}${MY_HTDOCSDIR}"/*.cgi
+	# configuration must be executable
+	chmod u+x "${D}${MY_HTDOCSDIR}"/checksetup.pl
+}
diff --git a/www-apps/bugzilla/bugzilla-3.4.7.ebuild b/www-apps/bugzilla/bugzilla-3.4.7.ebuild
new file mode 100644
index 000000000000..e8cbed748127
--- /dev/null
+++ b/www-apps/bugzilla/bugzilla-3.4.7.ebuild
@@ -0,0 +1,102 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/bugzilla/bugzilla-3.4.7.ebuild,v 1.1 2010/06/30 09:19:51 tove Exp $
+
+EAPI="2"
+
+inherit webapp depend.apache versionator eutils
+
+MY_PB=$(get_version_component_range 1-2)
+
+DESCRIPTION="Bugzilla is the Bug-Tracking System from the Mozilla project"
+SRC_URI="http://ftp.mozilla.org/pub/mozilla.org/webtools/${P}.tar.gz"
+HOMEPAGE="http://www.bugzilla.org"
+
+LICENSE="MPL-1.1 NPL-1.1"
+# KEYWORDS="~alpha ~amd64 ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+KEYWORDS="~alpha ~amd64 ~ia64 ~ppc ~sparc ~x86"
+
+IUSE="modperl extras graphviz mysql postgres"
+
+RDEPEND="
+	virtual/httpd-cgi
+	>=dev-lang/perl-5.8.8
+
+	>=dev-perl/DBI-1.601
+	>=dev-perl/DateTime-0.50
+	>=dev-perl/DateTime-Locale-0.43
+	>=dev-perl/DateTime-TimeZone-0.71
+	>=dev-perl/URI-1.38
+	>=dev-perl/Email-MIME-1.900
+	>=dev-perl/Email-MIME-Encodings-1.313
+	>=dev-perl/Email-Send-2.190
+	>=dev-perl/MIME-tools-5.427
+	>=dev-perl/Template-Toolkit-2.22
+	>=dev-perl/TimeDate-1.16
+	>=virtual/perl-CGI-3.29
+	>=virtual/perl-Digest-SHA-5.46
+	>=virtual/perl-File-Spec-3.27.01
+	>=virtual/perl-MIME-Base64-3.07
+
+	mysql? ( >=dev-perl/DBD-mysql-4.00.5 )
+	postgres? ( >=dev-perl/DBD-Pg-1.49 )
+	graphviz? ( media-gfx/graphviz )
+
+	modperl? (
+		>=dev-perl/Apache-DBI-1.06
+		www-apache/mod_perl:1
+	)
+
+	extras? (
+		dev-perl/Authen-SASL
+		>=dev-perl/Chart-2.4.1
+		dev-perl/Email-MIME-Attachment-Stripper
+		dev-perl/Email-Reply
+		>=dev-perl/GD-2.35
+		dev-perl/GDGraph
+		dev-perl/GDTextUtil
+		>=dev-perl/HTML-Parser-3.60
+		dev-perl/HTML-Scrubber
+		dev-perl/libwww-perl
+		>=dev-perl/PatchReader-0.9.5
+		dev-perl/perl-ldap
+		dev-perl/SOAP-Lite
+		dev-perl/Template-GD
+		dev-perl/XML-Twig
+		media-gfx/imagemagick[perl]
+		dev-perl/TheSchwartz
+		dev-perl/Daemon-Generic
+	)
+"
+# from extras we miss:
+# (nothing)
+
+want_apache modperl
+
+pkg_setup() {
+	depend.apache_pkg_setup modperl
+	webapp_pkg_setup
+}
+
+src_prepare() {
+	ecvs_clean
+}
+
+src_install () {
+	webapp_src_preinst
+
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+	for f in bugzilla.cron.daily bugzilla.cron.tab; do
+		doins "${FILESDIR}"/${MY_PB}/${f} || die
+	done
+
+	webapp_hook_script "${FILESDIR}"/${MY_PB}/reconfig
+	webapp_postinst_txt en "${FILESDIR}"/${MY_PB}/postinstall-en.txt
+	webapp_src_install
+
+	# bug #124282
+	chmod +x "${D}${MY_HTDOCSDIR}"/*.cgi
+	# configuration must be executable
+	chmod u+x "${D}${MY_HTDOCSDIR}"/checksetup.pl
+}
diff --git a/www-apps/bugzilla/bugzilla-3.6.1.ebuild b/www-apps/bugzilla/bugzilla-3.6.1.ebuild
new file mode 100644
index 000000000000..c92ef8044b5b
--- /dev/null
+++ b/www-apps/bugzilla/bugzilla-3.6.1.ebuild
@@ -0,0 +1,104 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/bugzilla/bugzilla-3.6.1.ebuild,v 1.1 2010/06/30 09:19:51 tove Exp $
+
+EAPI="2"
+
+inherit webapp depend.apache versionator eutils
+
+MY_PB=$(get_version_component_range 1-2)
+
+DESCRIPTION="Bugzilla is the Bug-Tracking System from the Mozilla project"
+SRC_URI="http://ftp.mozilla.org/pub/mozilla.org/webtools/${P}.tar.gz"
+HOMEPAGE="http://www.bugzilla.org"
+
+LICENSE="MPL-1.1 NPL-1.1"
+# KEYWORDS="~alpha ~amd64 ~ia64 ~ppc ~ppc64 ~sparc ~x86"
+KEYWORDS="~alpha ~amd64 ~ia64 ~sparc ~x86"
+
+IUSE="modperl extras graphviz mysql postgres"
+
+RDEPEND="
+	virtual/httpd-cgi
+	>=dev-lang/perl-5.8.8
+
+	>=dev-perl/DBI-1.601
+	>=dev-perl/DateTime-0.50
+	>=dev-perl/DateTime-Locale-0.43
+	>=dev-perl/DateTime-TimeZone-0.71
+	>=dev-perl/URI-1.38
+	>=dev-perl/Email-MIME-1.900
+	>=dev-perl/Email-MIME-Encodings-1.313
+	>=dev-perl/Email-Send-2.190
+	>=dev-perl/MIME-tools-5.427
+	>=dev-perl/Template-Toolkit-2.22
+	>=dev-perl/TimeDate-1.16
+	>=virtual/perl-CGI-3.33
+	>=virtual/perl-Digest-SHA-5.46
+	>=virtual/perl-File-Spec-3.27.01
+	>=virtual/perl-MIME-Base64-3.07
+
+	mysql? ( >=dev-perl/DBD-mysql-4.00.5 )
+	postgres? ( >=dev-perl/DBD-Pg-1.49 )
+	graphviz? ( media-gfx/graphviz )
+
+	modperl? (
+		>=dev-perl/Apache-DBI-1.06
+		www-apache/mod_perl:1
+	)
+
+	extras? (
+		dev-perl/Authen-SASL
+		>=dev-perl/Chart-2.4.1
+		dev-perl/Email-MIME-Attachment-Stripper
+		dev-perl/Email-Reply
+		>=dev-perl/GD-2.35
+		dev-perl/GDGraph
+		dev-perl/GDTextUtil
+		>=dev-perl/HTML-Parser-3.60
+		dev-perl/HTML-Scrubber
+		dev-perl/JSON-RPC
+		dev-perl/libwww-perl
+		>=dev-perl/PatchReader-0.9.5
+		dev-perl/perl-ldap
+		dev-perl/SOAP-Lite
+		dev-perl/Template-GD
+		dev-perl/Test-Taint
+		dev-perl/XML-Twig
+		media-gfx/imagemagick[perl]
+		dev-perl/TheSchwartz
+		dev-perl/Daemon-Generic
+	)
+"
+# from extras we miss:
+# (nothing)
+
+want_apache modperl
+
+pkg_setup() {
+	depend.apache_pkg_setup modperl
+	webapp_pkg_setup
+}
+
+src_prepare() {
+	ecvs_clean
+}
+
+src_install () {
+	webapp_src_preinst
+
+	insinto "${MY_HTDOCSDIR}"
+	doins -r .
+	for f in bugzilla.cron.daily bugzilla.cron.tab; do
+		doins "${FILESDIR}"/${MY_PB}/${f} || die
+	done
+
+	webapp_hook_script "${FILESDIR}"/${MY_PB}/reconfig
+	webapp_postinst_txt en "${FILESDIR}"/${MY_PB}/postinstall-en.txt
+	webapp_src_install
+
+	# bug #124282
+	chmod +x "${D}${MY_HTDOCSDIR}"/*.cgi
+	# configuration must be executable
+	chmod u+x "${D}${MY_HTDOCSDIR}"/checksetup.pl
+}