Version bump wrt security bug #116036.

Package-Manager: portage-2.0.53

5 files changed, 72 insertions, 6 deletions

diff --git a/www-apps/mantisbt/ChangeLog b/www-apps/mantisbt/ChangeLog
index 8f4df8bc704f..d76db4f77fd6 100644
--- a/www-apps/mantisbt/ChangeLog
+++ b/www-apps/mantisbt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for www-apps/mantisbt
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/ChangeLog,v 1.21 2005/12/14 17:57:31 rl03 Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/ChangeLog,v 1.22 2005/12/19 14:06:44 rl03 Exp $
+
+*mantisbt-0.19.4 (19 Dec 2005)
+
+  19 Dec 2005; Renat Lumpau <rl03@gentoo.org> +files/0.19.4-debian.patch,
+  +mantisbt-0.19.4.ebuild:
+  Version bump wrt security bug #116036.
 
 *mantisbt-1.0.0_rc4 (14 Dec 2005)
 
diff --git a/www-apps/mantisbt/Manifest b/www-apps/mantisbt/Manifest
index 673db4b67f80..0f41b6283d48 100644
--- a/www-apps/mantisbt/Manifest
+++ b/www-apps/mantisbt/Manifest
@@ -1,23 +1,26 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 e3904ba1320e8f120dc79e6bbd1d3fbd ChangeLog 3120
+MD5 664c45fc85feb9bfca28ec673e2d307c ChangeLog 3295
 MD5 8fd686995bd33035d403d5d0971ece6d files/0.19.3-debian.patch 593
+MD5 7ab426f7d5548fd47c15c66320bd7ff2 files/0.19.4-debian.patch 593
 MD5 072dd6da83b18a0497e3376b597b20ef files/digest-mantisbt-0.19.3 66
+MD5 28728af7e2eb7b32266ef26d87b398c1 files/digest-mantisbt-0.19.4 66
 MD5 aaabd486081a3b2aeb22bddd759bb22d files/digest-mantisbt-1.0.0_rc2 68
 MD5 694f56f5cc639943cec54ee947f52c79 files/digest-mantisbt-1.0.0_rc3 68
 MD5 ef197bcb58d0107ed9e3c2fce460dafd files/digest-mantisbt-1.0.0_rc4 68
 MD5 97c947f30d07a6405194bed5981ceceb files/postinstall-en-1.0.0.txt 488
 MD5 35d6b6f4cf6611c8b6232b0c83c67f52 files/postinstall-en.txt 680
 MD5 86a7a4861c91624ef8c32ff8ecf66eb5 mantisbt-0.19.3.ebuild 1072
+MD5 e1f36a029de4aeffbec74443bdd581f7 mantisbt-0.19.4.ebuild 1071
 MD5 b8787b64b3c3b48b47ad5757dcf82a6d mantisbt-1.0.0_rc2.ebuild 959
 MD5 7482adb56759934e9b1db696dac6ab3e mantisbt-1.0.0_rc3.ebuild 959
 MD5 d6d0628a6bd491622c62308c73cb2876 mantisbt-1.0.0_rc4.ebuild 959
 MD5 f61bfa064e3acdfcd826e4a38b121196 metadata.xml 161
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.1 (GNU/Linux)
+Version: GnuPG v1.4.2 (GNU/Linux)
 
-iD8DBQFDoF0WEzitwsaoONoRAhxyAJ0bIAGOy11i1QZajm1yKamjlaQGEwCgoKhX
-qwSyIXqwL5HlbASANNX0+jk=
-=Q6st
+iD8DBQFDpr56EzitwsaoONoRApnVAKDOcnEh7u4EyyCF/2R+GJaho/zl0QCgsEAk
+6Mp/y5VSZTjs4SW+jSaT/NY=
+=TjOT
 -----END PGP SIGNATURE-----
diff --git a/www-apps/mantisbt/files/0.19.4-debian.patch b/www-apps/mantisbt/files/0.19.4-debian.patch
new file mode 100644
index 000000000000..38182b0511b0
--- /dev/null
+++ b/www-apps/mantisbt/files/0.19.4-debian.patch
@@ -0,0 +1,14 @@
+diff -upr mantis-0.19.4/core/database_api.php mantis-0.19.4-fixed/core/database_api.php
+--- mantis-0.19.4/core/database_api.php	2004-12-09 13:55:06.000000000 -0500
++++ mantis-0.19.4-fixed/core/database_api.php	2005-12-19 08:55:31.000000000 -0500
+@@ -9,6 +9,10 @@
+ 	# $Id: 0.19.4-debian.patch,v 1.1 2005/12/19 14:06:44 rl03 Exp $
+ 	# --------------------------------------------------------
+ 
++	# Patch for #0005956: Database system scanner via variable poisoning
++	if (isset($_REQUEST["g_db_type"]))
++		die("");
++
+ 	### Database ###
+ 
+ 	# This is the general interface for all database calls.
diff --git a/www-apps/mantisbt/files/digest-mantisbt-0.19.4 b/www-apps/mantisbt/files/digest-mantisbt-0.19.4
new file mode 100644
index 000000000000..f0c395c88963
--- /dev/null
+++ b/www-apps/mantisbt/files/digest-mantisbt-0.19.4
@@ -0,0 +1 @@
+MD5 6dd7282469f7be4fb2eeaff92942f448 mantis-0.19.4.tar.gz 1248235
diff --git a/www-apps/mantisbt/mantisbt-0.19.4.ebuild b/www-apps/mantisbt/mantisbt-0.19.4.ebuild
new file mode 100644
index 000000000000..0f7bae5aac8c
--- /dev/null
+++ b/www-apps/mantisbt/mantisbt-0.19.4.ebuild
@@ -0,0 +1,42 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/mantisbt-0.19.4.ebuild,v 1.1 2005/12/19 14:06:44 rl03 Exp $
+
+inherit webapp eutils
+
+S=${WORKDIR}/mantis-${PV}
+
+IUSE=""
+
+DESCRIPTION="PHP/MySQL/Web based bugtracking system"
+HOMEPAGE="http://www.mantisbt.org/"
+SRC_URI="mirror://sourceforge/${PN}/mantis-${PV}.tar.gz"
+
+KEYWORDS="~ppc ~x86"
+
+RDEPEND="
+	>=dev-db/mysql-3.23.32
+	>=net-www/apache-1.3
+	virtual/httpd-php
+"
+
+LICENSE="GPL-2"
+
+src_unpack() {
+	unpack ${A}
+	find ${S} -name .cvsignore -exec rm {} \;
+	epatch ${FILESDIR}/${PV}-debian.patch
+}
+
+src_install() {
+	webapp_src_preinst
+	dodoc doc/{CREDITS,CUSTOMIZATION,ChangeLog,LICENSE,README,UPGRADING}
+
+	cp -R *.php admin core css graphs images lang ${D}/${MY_HTDOCSDIR}
+	cp config_inc.php.sample ${D}/${MY_HTDOCSDIR}/config_inc.php
+
+	webapp_configfile ${MY_HTDOCSDIR}/config_inc.php
+	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
+	webapp_sqlscript mysql ${S}/sql/db_generate.sql
+	webapp_src_install
+}