Removed vulnerable rt-3.6.3, rt-3.6.6, added rt-3.6.7 (sec issue #230007).

(Portage version: 2.1.4.4)

3 files changed, 10 insertions, 247 deletions

diff --git a/www-apps/rt/ChangeLog b/www-apps/rt/ChangeLog
index 16eb8b5b3ae9..775ba574c2ef 100644
--- a/www-apps/rt/ChangeLog
+++ b/www-apps/rt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for www-apps/rt
 # Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.56 2008/04/03 09:57:12 hollow Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.57 2008/07/01 16:48:46 wrobel Exp $
+
+*rt-3.6.7 (01 Jul 2008)
+
+  01 Jul 2008; wrobel@gentoo.org -rt-3.6.3.ebuild, -rt-3.6.6.ebuild,
+  +rt-3.6.7.ebuild:
+  Removed vulnerable rt-3.6.3, rt-3.6.6, added rt-3.6.7 (sec issue #230007).
 
   03 Apr 2008; Benedikt Böhm <hollow@gentoo.org>
   -files/3.4.5/postinstall-en.txt, -files/3.4.5/reconfig,
diff --git a/www-apps/rt/rt-3.6.3.ebuild b/www-apps/rt/rt-3.6.3.ebuild
deleted file mode 100644
index eaa5cb010c18..000000000000
--- a/www-apps/rt/rt-3.6.3.ebuild
+++ /dev/null
@@ -1,244 +0,0 @@
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.3.ebuild,v 1.10 2008/04/03 09:57:12 hollow Exp $
-
-inherit webapp eutils depend.apache
-
-IUSE="mysql postgres fastcgi lighttpd"
-
-DESCRIPTION="RT is an enterprise-grade ticketing system"
-HOMEPAGE="http://www.bestpractical.com/rt/"
-SRC_URI="http://download.bestpractical.com/pub/${PN}/release/${P}.tar.gz"
-
-KEYWORDS="~amd64 ~ppc ~x86"
-
-DEPEND="
-	>=dev-lang/perl-5.8.3
-
-	>=dev-perl/Params-Validate-0.02
-	dev-perl/Cache-Cache
-	>=dev-perl/Exception-Class-1.14
-	>dev-perl/HTML-Mason-1.23
-	dev-perl/MLDBM
-	dev-perl/FreezeThaw
-	>=virtual/perl-Digest-MD5-2.27
-	>=virtual/perl-CGI-2.92
-	>=virtual/perl-Storable-2.08
-	>=dev-perl/Apache-Session-1.53
-	>=dev-perl/XML-RSS-1.05
-	>=dev-perl/HTTP-Server-Simple-0.07
-	>=dev-perl/HTTP-Server-Simple-Mason-0.09
-	dev-perl/GD
-	dev-perl/GDGraph
-	dev-perl/GDTextUtil
-	>=dev-perl/Text-WikiFormat-0.76
-
-	!lighttpd? (
-		>=dev-perl/Apache-DBI-0.92
-		!fastcgi? ( >=www-apache/libapreq2-2.06
-					>=dev-perl/HTML-Mason-1.31 )
-		fastcgi? ( dev-perl/FCGI )
-	)
-	lighttpd? ( dev-perl/FCGI )
-
-	mysql? ( >=dev-perl/DBD-mysql-2.1018 )
-	postgres? ( >=dev-perl/DBD-Pg-1.43 )
-
-	>=virtual/perl-Getopt-Long-2.24
-
-	dev-perl/HTML-Tree
-	dev-perl/HTML-Format
-	dev-perl/libwww-perl
-
-	dev-perl/Calendar-Simple
-
-	virtual/perl-digest-base
-	>=dev-perl/DBI-1.37
-	dev-perl/Test-Inline
-	>=dev-perl/class-returnvalue-0.40
-	>=dev-perl/dbix-searchbuilder-1.39
-	dev-perl/text-template
-	>=virtual/perl-File-Spec-0.8
-	dev-perl/HTML-Parser
-	>=dev-perl/HTML-Scrubber-0.08
-	virtual/perl-libnet
-	>=dev-perl/log-dispatch-2.0
-	>=virtual/perl-locale-maketext-1.06
-	>=dev-perl/locale-maketext-lexicon-0.32
-	dev-perl/locale-maketext-fuzzy
-	>=dev-perl/MIME-tools-5.417
-	>=dev-perl/MailTools-1.60
-	dev-perl/text-wrapper
-	dev-perl/Time-modules
-	dev-perl/TimeDate
-	virtual/perl-Time-HiRes
-	virtual/perl-File-Temp
-	dev-perl/TermReadKey
-	dev-perl/text-autoformat
-	>=dev-perl/Text-Quoted-1.3
-	>=dev-perl/Tree-Simple-1.04
-	virtual/perl-Scalar-List-Utils
-	dev-perl/Module-Versions-Report
-	dev-perl/Cache-Simple-TimedExpiry
-	dev-perl/UNIVERSAL-require
-	dev-perl/regexp-common
-"
-
-RDEPEND="
-	${DEPEND}
-	virtual/mta
-	!lighttpd? ( ${APACHE2_DEPEND} )
-	lighttpd? ( >=www-servers/lighttpd-1.3.13 )
-"
-
-LICENSE="GPL-2"
-
-add_user_rt() {
-	# add new user
-	# suexec2 requires uid >= 1000; enewuser is of no help here
-	# From: Mike Frysinger <vapier@gentoo.org>
-	# Date: Fri, 17 Jun 2005 08:41:44 -0400
-	# i'd pick a 5 digit # if i were you
-
-	local euser="rt"
-
-	# first check if username rt exists
-	if [[ ${euser} == $(egetent passwd "${euser}" | cut -d: -f1) ]] ; then
-		# check uid
-		rt_uid=$(egetent passwd "${euser}" | cut -d: -f3)
-		if $(expr ${rt_uid} '<' 1000 > /dev/null); then
-			ewarn "uid of user rt is less than 1000. suexec2 will not work."
-			ewarn "If you want to use FastCGI, please delete the user 'rt'"
-			ewarn "from your system and re-emerge www-apps/rt"
-			epause
-		fi
-		return 0 # all is well
-	fi
-
-	# add user
-	# stolen from enewuser
-	local pwrange euid
-
-	pwrange=$(seq 10001 11001)
-	for euid in ${pwrange} ; do
-		[[ -z $(egetent passwd ${euid}) ]] && break
-	done
-	if [[ ${euid} == "11001" ]]; then
-		# she gets around, doesn't she?
-		die "No available uid's found"
-	fi
-
-	elog " - Userid: ${euid}"
-
-	enewuser rt ${euid} -1 /dev/null rt > /dev/null
-	return 0
-}
-
-pkg_setup() {
-	webapp_pkg_setup
-
-	ewarn
-	ewarn "If you are upgrading from an existing _RT2_ installation,"
-	ewarn "stop this ebuild (Ctrl-C now), download the upgrade tool,"
-	ewarn "http://bestpractical.com/pub/rt/devel/rt2-to-rt3.tar.gz"
-	ewarn "and follow the included instructions."
-	ewarn
-	epause 5
-	enewgroup rt >/dev/null
-	add_user_rt || die "Could not add user"
-}
-
-src_unpack() {
-	unpack ${A}
-	cd ${S}
-
-	# add Gentoo-specific layout
-	cat ${FILESDIR}/config.layout-gentoo >> config.layout
-	sed -e "s|PREFIX|${D}/${MY_HOSTROOTDIR}/${PF}|
-			s|HTMLDIR|${D}/${MY_HTDOCSDIR}|g" -i ./config.layout || die
-
-	# don't need to check dev dependencies
-	sed -e "s|\$args{'with-DEV'} =1;|#\$args{'with-DEV'} =1;|" -i sbin/rt-test-dependencies.in || die
-}
-
-src_compile() {
-
-	local web="apache"
-	useq lighttpd && web="lighttpd"
-
-	local dbtype=""
-	local dba=""
-
-	if useq mysql; then
-		dbtype="--with-db-type=mysql"
-		dba="--with-db-dba=root"
-	fi
-	if useq postgres;then
-		dbtype="--with-db-type=Pg"
-		dba="--with-db-dba=postgres"
-	fi
-	if useq postgres && useq mysql; then
-		ewarn "Both mysql and postgres USE flags enabled, default is mysql."
-		ewarn "You can set the default value in RT_SiteConfig before DB init."
-		dbtype="--with-db-type=mysql"
-		dba="--with-db-dba=root"
-	fi
-
-	./configure --enable-layout=Gentoo \
-		--with-bin-owner=rt \
-		--with-libs-owner=rt \
-		--with-libs-group=rt \
-		--with-rt-group=rt \
-		--with-web-user=${web} \
-		--with-web-group=${web} \
-		${dbtype} ${dba}
-
-	# check for missing deps and ask to report if something is broken
-	local myconf="--verbose $(use_with mysql) \
-		$(use_with postgres postgresql) \
-		$(use_with fastcgi) \
-		$(use_with lighttpd fastcgi)"
-	if ! useq fastcgi && ! useq lighttpd ; then
-		myconf="${myconf} --with-modperl2"
-	fi
-
-	/usr/bin/perl ./sbin/rt-test-dependencies ${myconf} > ${T}/t
-	if grep -q "MISSING" ${T}/t; then
-		ewarn "Missing Perl dependency!"
-		ewarn
-		cat ${T}/t | grep MISSING
-		ewarn
-		ewarn "Please run perl-cleaner. If the problem persists,"
-		ewarn "please file a bug in the Gentoo Bugzilla with the information above"
-		die "Missing dependencies."
-	fi
-}
-
-src_install() {
-	webapp_src_preinst
-
-	make install
-
-	# make sure we don't clobber existing site configuration
-	rm -f ${D}/${MY_HOSTROOTDIR}/${PF}/etc/RT_SiteConfig.pm
-
-	# copy upgrade files
-	cp -R etc/upgrade ${D}/${MY_HOSTROOTDIR}/${PF}
-
-	cd ${D}
-	grep -Rl "${D}" * | xargs dosed
-
-	if useq lighttpd; then
-		newinitd ${FILESDIR}/${PN}.init.d ${PN}
-		newconfd ${FILESDIR}/${PN}.conf.d ${PN}
-		dosed "s/@@PF@@/${PF}/g" /etc/conf.d/${PN}
-	else
-		local CONF="rt_apache2_fcgi.conf rt_apache2.conf"
-		cd ${FILESDIR} && cp ${CONF} ${D}/${MY_HOSTROOTDIR}/${PF}/etc
-	fi
-	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
-	webapp_hook_script ${FILESDIR}/reconfig
-
-	webapp_serverowned ${MY_HOSTROOTDIR}/${PF}/var
-	webapp_src_install
-}
diff --git a/www-apps/rt/rt-3.6.6.ebuild b/www-apps/rt/rt-3.6.7.ebuild
index e07752a19fa3..99b75edb8cbe 100644
--- a/www-apps/rt/rt-3.6.6.ebuild
+++ b/www-apps/rt/rt-3.6.7.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2008 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.6.ebuild,v 1.2 2008/04/03 09:57:12 hollow Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.6.7.ebuild,v 1.1 2008/07/01 16:48:46 wrobel Exp $
 
 inherit webapp eutils depend.apache confutils
 
@@ -21,7 +21,8 @@ DEPEND="
 	>=dev-perl/class-returnvalue-0.40
 	>=dev-perl/CSS-Squish-0.06
 	>=dev-perl/DBI-1.37
-	>=dev-perl/dbix-searchbuilder-1.50
+	>=dev-perl/dbix-searchbuilder-1.53
+	>=dev-perl/Devel-StackTrace-1.19
 	dev-perl/GD
 	dev-perl/GDGraph
 	dev-perl/GDTextUtil