Version bump, security release fixing XSS vulnerability, see bug #170041.

Package-Manager: portage-2.1.2-r9

diff --git a/www-apps/trac/ChangeLog b/www-apps/trac/ChangeLog
index 92fccf608f63011cc57daf0359310c2d041fd67e..08f2b1b164b70de9096ddbed1a9e169b30cf839d 100644 (file)
--- a/www-apps/trac/ChangeLog
+++ b/www-apps/trac/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for www-apps/trac
 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.53 2007/02/25 11:50:05 mabi Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.54 2007/03/08 23:02:29 dju Exp $
+
+*trac-0.10.3.1 (08 Mar 2007)
+
+  08 Mar 2007; Julien Allanos <dju@gentoo.org> +trac-0.10.3.1.ebuild:
+  Version bump, security release fixing XSS vulnerability, see bug #170041.
 
   25 Feb 2007; Matti Bickel <mabi@gentoo.org> trac-0.10.3.ebuild:
   ppc stable (bug #159136)

diff --git a/www-apps/trac/Manifest b/www-apps/trac/Manifest
index 735f73dcbdbe0e42b2cb83068e4fd2711ea0cde1..828e4a9a209e26436383be1add50ee9b6abab402 100644 (file)
--- a/www-apps/trac/Manifest
+++ b/www-apps/trac/Manifest
@@ -1,6 +1,3 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 AUX 0.9.6-postinst-en.txt 2275 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 SHA1 4cce4d9e6514d6cb6ea425be23b5bcfa641aea37 SHA256 1b89d5b0d69da1aad5be058096e4237ddef9e0b1fd46909495f9297b6b63f85d
 MD5 1ef68ae7232130e8152d6e007afc4352 files/0.9.6-postinst-en.txt 2275
 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 files/0.9.6-postinst-en.txt 2275
@@ -18,12 +15,17 @@ MD5 4dc8d28369a56b8efd84fd118c2cb28b files/tracd.initd 743
 RMD160 ddc2bcf9dc907054882f35b5cc0f835c6fb450be files/tracd.initd 743
 SHA256 c55b46edae5e7600890c426362f7e00b3a5fd5290fe3616d189f809b8626265d files/tracd.initd 743
 DIST trac-0.10.1.tar.gz 439941 RMD160 13fc90cc6023d9279721eaa583be2a09bd42737d SHA1 076b1f71ede1ecce533c71d16f1c0740065cd2ee SHA256 a5528c5e5ca865842628ad5fc6984df774d61b72e13db34a525496e3136c87c7
+DIST trac-0.10.3.1.tar.gz 443713 RMD160 02b34dbb41d858c999627ee2201cdbd43e592576 SHA1 4735f453f9bea15d65b71bcbd0e4817ee21f104a SHA256 35cc090d6338a8aae8a902e4b41782a140284381baa9474051ac27fc89261476
 DIST trac-0.10.3.tar.gz 440811 RMD160 bfd3c16a2fb9e849ef068a0640a2c14cd2fb4423 SHA1 02f5f3e5904c8629123890b99ad6568ad5d12577 SHA256 b0d5826ff502172fec68d183088e1ac794369e848a541c031eeb53c3fe19da90
 DIST trac-0.9.6.tar.gz 339647 RMD160 3bf086f8c5a6b3b7d6584359dbc916f6ee61dfdc SHA1 b64b193ec014113341f493149e0de2876a32fc7d SHA256 67862c30c2dd0852ba4778a23bba79ab2387e9b40a85b40865cb76c4fa878dfc
 EBUILD trac-0.10.1.ebuild 3924 RMD160 1345b668c65ccaa6d97cae81d52eb4e17144b3c9 SHA1 7baf5894e3bcde073bc7d09f727c37aaa9b92f81 SHA256 666069aa928734bbbc4b07578b753a7d07f7706d1519f2fd0933603639832b34
 MD5 46eee9c3a383718620170d702c363f7b trac-0.10.1.ebuild 3924
 RMD160 1345b668c65ccaa6d97cae81d52eb4e17144b3c9 trac-0.10.1.ebuild 3924
 SHA256 666069aa928734bbbc4b07578b753a7d07f7706d1519f2fd0933603639832b34 trac-0.10.1.ebuild 3924
+EBUILD trac-0.10.3.1.ebuild 3935 RMD160 8501858d6e2eaf478fd9bd7f3adc2bcc983bdf35 SHA1 4950f7ad4d7a20bdebe1ff94d638bbf04f34e337 SHA256 d4f52dd4c5e2a05086311775a88e4ced1b06e93bd5f339ccb951fd4ae0886c55
+MD5 cff2aa8701fb3854e40023b0ac6841f1 trac-0.10.3.1.ebuild 3935
+RMD160 8501858d6e2eaf478fd9bd7f3adc2bcc983bdf35 trac-0.10.3.1.ebuild 3935
+SHA256 d4f52dd4c5e2a05086311775a88e4ced1b06e93bd5f339ccb951fd4ae0886c55 trac-0.10.3.1.ebuild 3935
 EBUILD trac-0.10.3.ebuild 3932 RMD160 48fe7d5ebc834c9590a9efcc96d9b63acbdb859f SHA1 1cc19ce2db4b5c72081c3c68020a48beddc2b7d6 SHA256 ccfbcaf5f56935933cb32223311e473d32fc3688ba1d248671c6385e50040181
 MD5 09932ace4099c789acbbc26a96351cc2 trac-0.10.3.ebuild 3932
 RMD160 48fe7d5ebc834c9590a9efcc96d9b63acbdb859f trac-0.10.3.ebuild 3932
@@ -32,10 +34,10 @@ EBUILD trac-0.9.6.ebuild 3158 RMD160 5133838b24c969d64e51b121485152082a850d52 SH
 MD5 014108e0d18c79770a9d89f01f2f0dae trac-0.9.6.ebuild 3158
 RMD160 5133838b24c969d64e51b121485152082a850d52 trac-0.9.6.ebuild 3158
 SHA256 13a05b01957917fe42f14e3efa2984262fcbed94ef88665c0f9040a1d711fe42 trac-0.9.6.ebuild 3158
-MISC ChangeLog 9349 RMD160 85db0f1d34e0ea30065803c1334361037dbe22dd SHA1 2783ef0ada7e083d265075503d5c6eeb97ec8622 SHA256 4632407ee0f80d0cb673d23e7fb50380b05339c7964c0560b42ae037c3778400
-MD5 03ee8ecb8353885a472f73c9a718f30b ChangeLog 9349
-RMD160 85db0f1d34e0ea30065803c1334361037dbe22dd ChangeLog 9349
-SHA256 4632407ee0f80d0cb673d23e7fb50380b05339c7964c0560b42ae037c3778400 ChangeLog 9349
+MISC ChangeLog 9525 RMD160 172766dd97e84743d410b3c30df8bb44513efee3 SHA1 d092a186397dbb21e35dc62b28dae6d593eb11d6 SHA256 29c0ed55f1dd9ab6eb61d1685e88781ea1242b2912af16e770f2f6691403da70
+MD5 09bfb62e947f627d3808b06bd622a669 ChangeLog 9525
+RMD160 172766dd97e84743d410b3c30df8bb44513efee3 ChangeLog 9525
+SHA256 29c0ed55f1dd9ab6eb61d1685e88781ea1242b2912af16e770f2f6691403da70 ChangeLog 9525
 MISC metadata.xml 220 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 SHA1 2cf693a9408713395fdedb16da9edd6b33e5c2e7 SHA256 09bece3580791397bbf0b4d68ff9ac4abbc37150cf11fe7848f924119ca76b84
 MD5 fc3b5dec4ccef02547c54bf840024aa6 metadata.xml 220
 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 metadata.xml 220
@@ -46,13 +48,9 @@ SHA256 a0cd4933dde76336d6b601e3d2b8454c7dee2f32e88d437a79212094b2095f7f files/di
 MD5 c72034b263afb4bffe68edf9ab447626 files/digest-trac-0.10.3 235
 RMD160 4346649969e05523bd96a383a109c2c64b3c49a3 files/digest-trac-0.10.3 235
 SHA256 a861320180f72af7f7082b8fd962e592551241686b46513e2532d91495b77b5a files/digest-trac-0.10.3 235
+MD5 e6a8b6fe523dba0866401ff0c9fccebe files/digest-trac-0.10.3.1 241
+RMD160 7dbf03a343fc032002fd793010220ee5df9a7b03 files/digest-trac-0.10.3.1 241
+SHA256 5d720577a23194c55479b5739ed29a3b6228bd4fb3c7a5162443410dd6c9bc3f files/digest-trac-0.10.3.1 241
 MD5 ef7e6e6a4bfbbaa52235699344830326 files/digest-trac-0.9.6 232
 RMD160 7e8faa5459569fc27f03dc441c9d7b9c34e00d9b files/digest-trac-0.9.6 232
 SHA256 a44608e686cc8466aa7c2fe9a8722b43bb7b4c2436e032801b02703c27820742 files/digest-trac-0.9.6 232
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.6 (GNU/Linux)
-
-iD8DBQFF4XgZfNMcoUhJ7GwRAoIJAJ41uyu6zc2d48NGWR0MPh07wlV9dwCglFYf
-fvHn3BlTLXuJYQPlZfRJtZA=
-=J2NP
------END PGP SIGNATURE-----

diff --git a/www-apps/trac/files/digest-trac-0.10.3.1 b/www-apps/trac/files/digest-trac-0.10.3.1
new file mode 100644 (file)
index 0000000..d2cc24d
--- /dev/null
+++ b/www-apps/trac/files/digest-trac-0.10.3.1
@@ -0,0 +1,3 @@
+MD5 b625af0ca7cab8b7f79d92778efd6d7d trac-0.10.3.1.tar.gz 443713
+RMD160 02b34dbb41d858c999627ee2201cdbd43e592576 trac-0.10.3.1.tar.gz 443713
+SHA256 35cc090d6338a8aae8a902e4b41782a140284381baa9474051ac27fc89261476 trac-0.10.3.1.tar.gz 443713

diff --git a/www-apps/trac/trac-0.10.3.1.ebuild b/www-apps/trac/trac-0.10.3.1.ebuild
new file mode 100644 (file)
index 0000000..0e364e4
--- /dev/null
+++ b/www-apps/trac/trac-0.10.3.1.ebuild
@@ -0,0 +1,129 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/trac-0.10.3.1.ebuild,v 1.1 2007/03/08 23:02:29 dju Exp $
+
+inherit distutils webapp
+
+DESCRIPTION="Trac is a minimalistic web-based project management, wiki and bug/issue tracking system."
+HOMEPAGE="http://trac.edgewall.com/"
+SRC_URI="http://ftp.edgewall.com/pub/trac/${P}.tar.gz"
+
+LICENSE="trac"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~sparc ~x86"
+IUSE="cgi fastcgi mysql postgres sqlite enscript silvercity"
+
+# doing so because utils (such as trac-admin), manpages... overlap
+SLOT="0"
+WEBAPP_MANUAL_SLOT="yes"
+
+# we need to depend on virtual/httpd-cgi to pull apache/lighttpd/whatever in when USE cgi
+# we need to depend on virtual/httpd-fcgi to pull mod_fastcgi/lighttpd/whatever in when USE fastcgi
+# we need to depend on virtual/httpd-python to pull mod_python/whatever in when USE python (python
+# is rather confusing here, as dev-lang/python is a required dependency, but httpd-python isn't)
+DEPEND="${DEPEND}
+       >=dev-lang/python-2.3
+       app-text/pytextile
+       >=dev-python/docutils-0.3.9
+       dev-libs/clearsilver
+       >=dev-util/subversion-1.3.2
+       mysql? (
+               >=virtual/mysql-4.1
+               >=dev-python/mysql-python-1.2.1
+       )
+       sqlite? (
+               >=dev-db/sqlite-3.3.4
+               >=dev-python/pysqlite-2.3
+       )
+       postgres? ( >=dev-python/psycopg-2 )
+       enscript? ( app-text/enscript )
+       silvercity? ( app-text/silvercity )"
+
+# The following function should be added to eutils.eclass (see bug #143572):
+
+# Generate an standard error message for missing USE flags
+# in existing packages, and die.
+#
+# Usage: built_with_use_error <category/package> <functionality> [<USE flag>]
+#    ex: built_with_use_error dev-util/subversion python
+#    or: built_with_use_error net-www/apache LDAP ldap
+#
+# Typical usage:
+#      if ! built_with_use dev-util/subversion python ; then
+#        built_with_use_error dev-util/subversion python
+#   fi
+#
+# Note: when <USE flag> is not specified, <functionality> is used for the USE flag name.
+built_with_use_error() {
+       local package=$1
+       local func=$2
+       local use_flag=$3
+
+       [[ -z ${use_flag} ]] && use_flag=${func}
+
+       eerror "Your ${package} package has been built without"
+       eerror "${func} support, please enable the '${use_flag}' USE flag and"
+       eerror "re-emerge ${package}."
+       elog "You can enable this USE flag either globally in /etc/make.conf,"
+       elog "or just for specific packages in /etc/portage/package.use."
+       die "${package} missing ${func} support"
+}
+
+pkg_setup () {
+       if ! use mysql && ! use postgres && ! use sqlite ; then
+               eerror "You must select at least one database backend, by enabling"
+               eerror "at least one of the 'mysql', 'postgres' or 'sqlite' USE flags."
+               die "no database backend selected"
+       fi
+
+       if ! built_with_use dev-util/subversion python ; then
+               built_with_use_error dev-util/subversion python
+       fi
+
+       if ! built_with_use dev-libs/clearsilver python ; then
+               built_with_use_error dev-libs/clearsilver python
+       fi
+
+       ebegin "Creating tracd group and user"
+       enewgroup tracd
+       enewuser tracd -1 -1 -1 tracd
+       eend ${?}
+
+       webapp_pkg_setup
+}
+
+src_install () {
+       # project environments might go in here
+       keepdir /var/lib/trac
+
+       webapp_src_preinst
+       distutils_src_install
+
+       dodoc AUTHORS INSTALL RELEASE THANKS UPGRADE
+       rm ${D}/usr/share/doc/${P}/MANIFEST.in.gz
+       rm ${D}/usr/share/doc/${P}/PKG-INFO.gz
+
+       docinto contrib
+       dodoc contrib/*
+
+       # if needed, install cgi/fcgi scripts for webapp-config
+       local my_dir=${D}/usr/share/trac
+       if use cgi ; then
+               mv ${my_dir}/cgi-bin/trac.cgi ${D}${MY_CGIBINDIR} || die
+       fi
+       if use fastcgi ; then
+               mv ${my_dir}/cgi-bin/trac.fcgi ${D}${MY_CGIBINDIR} || die
+       fi
+       rm -rf ${my_dir}/cgi-bin || die
+
+       for lang in en; do
+               webapp_postinst_txt ${lang} ${FILESDIR}/postinst-${lang}.txt
+       done
+
+       # copy graphics, css & js
+       cp -r htdocs/* ${D}/${MY_HTDOCSDIR}
+
+       webapp_src_install
+
+       newconfd "${FILESDIR}"/tracd.confd tracd
+       newinitd "${FILESDIR}"/tracd.initd tracd
+}