Version bump wrt security bug #110326.

Package-Manager: portage-2.0.51.22-r2

5 files changed, 71 insertions, 5 deletions

diff --git a/www-apps/mantisbt/ChangeLog b/www-apps/mantisbt/ChangeLog
index 1fe4c7e3d45e..e2ae03cd1e77 100644
--- a/www-apps/mantisbt/ChangeLog
+++ b/www-apps/mantisbt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for www-apps/mantisbt
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/ChangeLog,v 1.15 2005/09/16 10:59:15 rl03 Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/ChangeLog,v 1.16 2005/10/24 14:41:57 rl03 Exp $
+
+*mantisbt-0.19.3 (24 Oct 2005)
+
+  24 Oct 2005; Renat Lumpau <rl03@gentoo.org> +files/0.19.3-debian.patch,
+  +mantisbt-0.19.3.ebuild:
+  Version bump wrt security bug #110326.
 
   16 Sep 2005; Renat Lumpau <rl03@gentoo.org> mantisbt-0.19.2.ebuild:
   Fixed ${S}
diff --git a/www-apps/mantisbt/Manifest b/www-apps/mantisbt/Manifest
index 9bb6e15121c0..7e40dbe34f64 100644
--- a/www-apps/mantisbt/Manifest
+++ b/www-apps/mantisbt/Manifest
@@ -1,19 +1,22 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
+MD5 d68392220b2e213281c425e87e86158f mantisbt-0.19.3.ebuild 1071
 MD5 f85cc6ed0dde400dc3a724c1de1cf042 mantisbt-0.19.2.ebuild 1070
 MD5 6ce1a5afa10c30a0f884d736ffcea1a3 mantisbt-1.0.0_rc2.ebuild 897
-MD5 5809ed45fc3a67a1e048eaf04d20eb07 ChangeLog 2330
+MD5 ed2f9c1409003badc87e5782f18a7e8c ChangeLog 2505
 MD5 f61bfa064e3acdfcd826e4a38b121196 metadata.xml 161
 MD5 54c147b8fc69cc791a2058df82cfacb5 files/0.19.2-debian.patch 3170
 MD5 aaabd486081a3b2aeb22bddd759bb22d files/digest-mantisbt-1.0.0_rc2 68
 MD5 35d6b6f4cf6611c8b6232b0c83c67f52 files/postinstall-en.txt 680
 MD5 19295fc78854d25c0fbde48abf533019 files/digest-mantisbt-0.19.2 66
+MD5 072dd6da83b18a0497e3376b597b20ef files/digest-mantisbt-0.19.3 66
 MD5 97c947f30d07a6405194bed5981ceceb files/postinstall-en-1.0.0.txt 488
+MD5 8fd686995bd33035d403d5d0971ece6d files/0.19.3-debian.patch 593
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (GNU/Linux)
 
-iD8DBQFDKqWYEzitwsaoONoRAggEAJ4kjYRhrn353/Qus3W/vtlTdwlOhgCgmhxd
-O/mIs+uTmEMZNUvL6EfAUVs=
-=0c9v
+iD8DBQFDXPLNEzitwsaoONoRAt5rAJ969j9WcUKL6Q2Zi6TE1Ra0kWCBjwCgncVj
++DWrQP+Sqtwrr00Lrk+vuug=
+=wTcd
 -----END PGP SIGNATURE-----
diff --git a/www-apps/mantisbt/files/0.19.3-debian.patch b/www-apps/mantisbt/files/0.19.3-debian.patch
new file mode 100644
index 000000000000..c9b68a416fb7
--- /dev/null
+++ b/www-apps/mantisbt/files/0.19.3-debian.patch
@@ -0,0 +1,14 @@
+diff -upr mantis-0.19.3/core/database_api.php mantis-0.19.3_fixed/core/database_api.php
+--- mantis-0.19.3/core/database_api.php	2004-12-09 13:55:06.000000000 -0500
++++ mantis-0.19.3_fixed/core/database_api.php	2005-10-24 10:30:31.000000000 -0400
+@@ -9,6 +9,10 @@
+ 	# $Id: 0.19.3-debian.patch,v 1.1 2005/10/24 14:41:57 rl03 Exp $
+ 	# --------------------------------------------------------
+ 
++	# Patch for #0005956: Database system scanner via variable poisoning
++	if (isset($_REQUEST["g_db_type"]))
++		die("");
++
+ 	### Database ###
+ 
+ 	# This is the general interface for all database calls.
diff --git a/www-apps/mantisbt/files/digest-mantisbt-0.19.3 b/www-apps/mantisbt/files/digest-mantisbt-0.19.3
new file mode 100644
index 000000000000..267334cf9206
--- /dev/null
+++ b/www-apps/mantisbt/files/digest-mantisbt-0.19.3
@@ -0,0 +1 @@
+MD5 b3c1d9f6f66bc5e7e236cc9449aa3ced mantis-0.19.3.tar.gz 1289136
diff --git a/www-apps/mantisbt/mantisbt-0.19.3.ebuild b/www-apps/mantisbt/mantisbt-0.19.3.ebuild
new file mode 100644
index 000000000000..b80cfe8e6797
--- /dev/null
+++ b/www-apps/mantisbt/mantisbt-0.19.3.ebuild
@@ -0,0 +1,42 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/mantisbt/mantisbt-0.19.3.ebuild,v 1.1 2005/10/24 14:41:57 rl03 Exp $
+
+inherit webapp eutils
+
+S=${WORKDIR}/mantis-${PV}
+
+IUSE=""
+
+DESCRIPTION="PHP/MySQL/Web based bugtracking system"
+HOMEPAGE="http://www.mantisbt.org/"
+SRC_URI="mirror://sourceforge/${PN}/mantis-${PV}.tar.gz"
+
+KEYWORDS="~ppc ~x86"
+
+RDEPEND="
+	>=dev-db/mysql-3.23.32
+	>=net-www/apache-1.3
+	virtual/httpd-php
+"
+
+LICENSE="GPL-2"
+
+src_unpack() {
+	unpack ${A}
+	find ${S} -name .cvsignore -exec rm {} \;
+	epatch ${FILESDIR}/${PV}-debian.patch
+}
+
+src_install() {
+	webapp_src_preinst
+	dodoc doc/{CREDITS,CUSTOMIZATION,ChangeLog,LICENSE,README,UPGRADING}
+
+	cp -R *.php admin core css graphs images lang ${D}/${MY_HTDOCSDIR}
+	cp config_inc.php.sample ${D}/${MY_HTDOCSDIR}/config_inc.php
+
+	webapp_configfile ${MY_HTDOCSDIR}/config_inc.php
+	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
+	webapp_sqlscript mysql ${S}/sql/db_generate.sql
+	webapp_src_install
+}