From 4eb4c23dc2934785c41e3255d4084e0fbceb65cb Mon Sep 17 00:00:00 2001 From: Julien Allanos Date: Thu, 8 Mar 2007 23:02:29 +0000 Subject: [PATCH] Version bump, security release fixing XSS vulnerability, see bug #170041. Package-Manager: portage-2.1.2-r9 --- www-apps/trac/ChangeLog | 7 +- www-apps/trac/Manifest | 26 +++-- www-apps/trac/files/digest-trac-0.10.3.1 | 3 + www-apps/trac/trac-0.10.3.1.ebuild | 129 +++++++++++++++++++++++ 4 files changed, 150 insertions(+), 15 deletions(-) create mode 100644 www-apps/trac/files/digest-trac-0.10.3.1 create mode 100644 www-apps/trac/trac-0.10.3.1.ebuild diff --git a/www-apps/trac/ChangeLog b/www-apps/trac/ChangeLog index 92fccf608f63..08f2b1b164b7 100644 --- a/www-apps/trac/ChangeLog +++ b/www-apps/trac/ChangeLog @@ -1,6 +1,11 @@ # ChangeLog for www-apps/trac # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.53 2007/02/25 11:50:05 mabi Exp $ +# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.54 2007/03/08 23:02:29 dju Exp $ + +*trac-0.10.3.1 (08 Mar 2007) + + 08 Mar 2007; Julien Allanos +trac-0.10.3.1.ebuild: + Version bump, security release fixing XSS vulnerability, see bug #170041. 25 Feb 2007; Matti Bickel trac-0.10.3.ebuild: ppc stable (bug #159136) diff --git a/www-apps/trac/Manifest b/www-apps/trac/Manifest index 735f73dcbdbe..828e4a9a209e 100644 --- a/www-apps/trac/Manifest +++ b/www-apps/trac/Manifest @@ -1,6 +1,3 @@ ------BEGIN PGP SIGNED MESSAGE----- -Hash: SHA1 - AUX 0.9.6-postinst-en.txt 2275 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 SHA1 4cce4d9e6514d6cb6ea425be23b5bcfa641aea37 SHA256 1b89d5b0d69da1aad5be058096e4237ddef9e0b1fd46909495f9297b6b63f85d MD5 1ef68ae7232130e8152d6e007afc4352 files/0.9.6-postinst-en.txt 2275 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 files/0.9.6-postinst-en.txt 2275 @@ -18,12 +15,17 @@ MD5 4dc8d28369a56b8efd84fd118c2cb28b files/tracd.initd 743 RMD160 ddc2bcf9dc907054882f35b5cc0f835c6fb450be files/tracd.initd 743 SHA256 c55b46edae5e7600890c426362f7e00b3a5fd5290fe3616d189f809b8626265d files/tracd.initd 743 DIST trac-0.10.1.tar.gz 439941 RMD160 13fc90cc6023d9279721eaa583be2a09bd42737d SHA1 076b1f71ede1ecce533c71d16f1c0740065cd2ee SHA256 a5528c5e5ca865842628ad5fc6984df774d61b72e13db34a525496e3136c87c7 +DIST trac-0.10.3.1.tar.gz 443713 RMD160 02b34dbb41d858c999627ee2201cdbd43e592576 SHA1 4735f453f9bea15d65b71bcbd0e4817ee21f104a SHA256 35cc090d6338a8aae8a902e4b41782a140284381baa9474051ac27fc89261476 DIST trac-0.10.3.tar.gz 440811 RMD160 bfd3c16a2fb9e849ef068a0640a2c14cd2fb4423 SHA1 02f5f3e5904c8629123890b99ad6568ad5d12577 SHA256 b0d5826ff502172fec68d183088e1ac794369e848a541c031eeb53c3fe19da90 DIST trac-0.9.6.tar.gz 339647 RMD160 3bf086f8c5a6b3b7d6584359dbc916f6ee61dfdc SHA1 b64b193ec014113341f493149e0de2876a32fc7d SHA256 67862c30c2dd0852ba4778a23bba79ab2387e9b40a85b40865cb76c4fa878dfc EBUILD trac-0.10.1.ebuild 3924 RMD160 1345b668c65ccaa6d97cae81d52eb4e17144b3c9 SHA1 7baf5894e3bcde073bc7d09f727c37aaa9b92f81 SHA256 666069aa928734bbbc4b07578b753a7d07f7706d1519f2fd0933603639832b34 MD5 46eee9c3a383718620170d702c363f7b trac-0.10.1.ebuild 3924 RMD160 1345b668c65ccaa6d97cae81d52eb4e17144b3c9 trac-0.10.1.ebuild 3924 SHA256 666069aa928734bbbc4b07578b753a7d07f7706d1519f2fd0933603639832b34 trac-0.10.1.ebuild 3924 +EBUILD trac-0.10.3.1.ebuild 3935 RMD160 8501858d6e2eaf478fd9bd7f3adc2bcc983bdf35 SHA1 4950f7ad4d7a20bdebe1ff94d638bbf04f34e337 SHA256 d4f52dd4c5e2a05086311775a88e4ced1b06e93bd5f339ccb951fd4ae0886c55 +MD5 cff2aa8701fb3854e40023b0ac6841f1 trac-0.10.3.1.ebuild 3935 +RMD160 8501858d6e2eaf478fd9bd7f3adc2bcc983bdf35 trac-0.10.3.1.ebuild 3935 +SHA256 d4f52dd4c5e2a05086311775a88e4ced1b06e93bd5f339ccb951fd4ae0886c55 trac-0.10.3.1.ebuild 3935 EBUILD trac-0.10.3.ebuild 3932 RMD160 48fe7d5ebc834c9590a9efcc96d9b63acbdb859f SHA1 1cc19ce2db4b5c72081c3c68020a48beddc2b7d6 SHA256 ccfbcaf5f56935933cb32223311e473d32fc3688ba1d248671c6385e50040181 MD5 09932ace4099c789acbbc26a96351cc2 trac-0.10.3.ebuild 3932 RMD160 48fe7d5ebc834c9590a9efcc96d9b63acbdb859f trac-0.10.3.ebuild 3932 @@ -32,10 +34,10 @@ EBUILD trac-0.9.6.ebuild 3158 RMD160 5133838b24c969d64e51b121485152082a850d52 SH MD5 014108e0d18c79770a9d89f01f2f0dae trac-0.9.6.ebuild 3158 RMD160 5133838b24c969d64e51b121485152082a850d52 trac-0.9.6.ebuild 3158 SHA256 13a05b01957917fe42f14e3efa2984262fcbed94ef88665c0f9040a1d711fe42 trac-0.9.6.ebuild 3158 -MISC ChangeLog 9349 RMD160 85db0f1d34e0ea30065803c1334361037dbe22dd SHA1 2783ef0ada7e083d265075503d5c6eeb97ec8622 SHA256 4632407ee0f80d0cb673d23e7fb50380b05339c7964c0560b42ae037c3778400 -MD5 03ee8ecb8353885a472f73c9a718f30b ChangeLog 9349 -RMD160 85db0f1d34e0ea30065803c1334361037dbe22dd ChangeLog 9349 -SHA256 4632407ee0f80d0cb673d23e7fb50380b05339c7964c0560b42ae037c3778400 ChangeLog 9349 +MISC ChangeLog 9525 RMD160 172766dd97e84743d410b3c30df8bb44513efee3 SHA1 d092a186397dbb21e35dc62b28dae6d593eb11d6 SHA256 29c0ed55f1dd9ab6eb61d1685e88781ea1242b2912af16e770f2f6691403da70 +MD5 09bfb62e947f627d3808b06bd622a669 ChangeLog 9525 +RMD160 172766dd97e84743d410b3c30df8bb44513efee3 ChangeLog 9525 +SHA256 29c0ed55f1dd9ab6eb61d1685e88781ea1242b2912af16e770f2f6691403da70 ChangeLog 9525 MISC metadata.xml 220 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 SHA1 2cf693a9408713395fdedb16da9edd6b33e5c2e7 SHA256 09bece3580791397bbf0b4d68ff9ac4abbc37150cf11fe7848f924119ca76b84 MD5 fc3b5dec4ccef02547c54bf840024aa6 metadata.xml 220 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 metadata.xml 220 @@ -46,13 +48,9 @@ SHA256 a0cd4933dde76336d6b601e3d2b8454c7dee2f32e88d437a79212094b2095f7f files/di MD5 c72034b263afb4bffe68edf9ab447626 files/digest-trac-0.10.3 235 RMD160 4346649969e05523bd96a383a109c2c64b3c49a3 files/digest-trac-0.10.3 235 SHA256 a861320180f72af7f7082b8fd962e592551241686b46513e2532d91495b77b5a files/digest-trac-0.10.3 235 +MD5 e6a8b6fe523dba0866401ff0c9fccebe files/digest-trac-0.10.3.1 241 +RMD160 7dbf03a343fc032002fd793010220ee5df9a7b03 files/digest-trac-0.10.3.1 241 +SHA256 5d720577a23194c55479b5739ed29a3b6228bd4fb3c7a5162443410dd6c9bc3f files/digest-trac-0.10.3.1 241 MD5 ef7e6e6a4bfbbaa52235699344830326 files/digest-trac-0.9.6 232 RMD160 7e8faa5459569fc27f03dc441c9d7b9c34e00d9b files/digest-trac-0.9.6 232 SHA256 a44608e686cc8466aa7c2fe9a8722b43bb7b4c2436e032801b02703c27820742 files/digest-trac-0.9.6 232 ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.6 (GNU/Linux) - -iD8DBQFF4XgZfNMcoUhJ7GwRAoIJAJ41uyu6zc2d48NGWR0MPh07wlV9dwCglFYf -fvHn3BlTLXuJYQPlZfRJtZA= -=J2NP ------END PGP SIGNATURE----- diff --git a/www-apps/trac/files/digest-trac-0.10.3.1 b/www-apps/trac/files/digest-trac-0.10.3.1 new file mode 100644 index 000000000000..d2cc24d6d83e --- /dev/null +++ b/www-apps/trac/files/digest-trac-0.10.3.1 @@ -0,0 +1,3 @@ +MD5 b625af0ca7cab8b7f79d92778efd6d7d trac-0.10.3.1.tar.gz 443713 +RMD160 02b34dbb41d858c999627ee2201cdbd43e592576 trac-0.10.3.1.tar.gz 443713 +SHA256 35cc090d6338a8aae8a902e4b41782a140284381baa9474051ac27fc89261476 trac-0.10.3.1.tar.gz 443713 diff --git a/www-apps/trac/trac-0.10.3.1.ebuild b/www-apps/trac/trac-0.10.3.1.ebuild new file mode 100644 index 000000000000..0e364e415aa3 --- /dev/null +++ b/www-apps/trac/trac-0.10.3.1.ebuild @@ -0,0 +1,129 @@ +# Copyright 1999-2007 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/trac-0.10.3.1.ebuild,v 1.1 2007/03/08 23:02:29 dju Exp $ + +inherit distutils webapp + +DESCRIPTION="Trac is a minimalistic web-based project management, wiki and bug/issue tracking system." +HOMEPAGE="http://trac.edgewall.com/" +SRC_URI="http://ftp.edgewall.com/pub/trac/${P}.tar.gz" + +LICENSE="trac" +KEYWORDS="~amd64 ~ppc ~ppc64 ~sparc ~x86" +IUSE="cgi fastcgi mysql postgres sqlite enscript silvercity" + +# doing so because utils (such as trac-admin), manpages... overlap +SLOT="0" +WEBAPP_MANUAL_SLOT="yes" + +# we need to depend on virtual/httpd-cgi to pull apache/lighttpd/whatever in when USE cgi +# we need to depend on virtual/httpd-fcgi to pull mod_fastcgi/lighttpd/whatever in when USE fastcgi +# we need to depend on virtual/httpd-python to pull mod_python/whatever in when USE python (python +# is rather confusing here, as dev-lang/python is a required dependency, but httpd-python isn't) +DEPEND="${DEPEND} + >=dev-lang/python-2.3 + app-text/pytextile + >=dev-python/docutils-0.3.9 + dev-libs/clearsilver + >=dev-util/subversion-1.3.2 + mysql? ( + >=virtual/mysql-4.1 + >=dev-python/mysql-python-1.2.1 + ) + sqlite? ( + >=dev-db/sqlite-3.3.4 + >=dev-python/pysqlite-2.3 + ) + postgres? ( >=dev-python/psycopg-2 ) + enscript? ( app-text/enscript ) + silvercity? ( app-text/silvercity )" + +# The following function should be added to eutils.eclass (see bug #143572): + +# Generate an standard error message for missing USE flags +# in existing packages, and die. +# +# Usage: built_with_use_error [] +# ex: built_with_use_error dev-util/subversion python +# or: built_with_use_error net-www/apache LDAP ldap +# +# Typical usage: +# if ! built_with_use dev-util/subversion python ; then +# built_with_use_error dev-util/subversion python +# fi +# +# Note: when is not specified, is used for the USE flag name. +built_with_use_error() { + local package=$1 + local func=$2 + local use_flag=$3 + + [[ -z ${use_flag} ]] && use_flag=${func} + + eerror "Your ${package} package has been built without" + eerror "${func} support, please enable the '${use_flag}' USE flag and" + eerror "re-emerge ${package}." + elog "You can enable this USE flag either globally in /etc/make.conf," + elog "or just for specific packages in /etc/portage/package.use." + die "${package} missing ${func} support" +} + +pkg_setup () { + if ! use mysql && ! use postgres && ! use sqlite ; then + eerror "You must select at least one database backend, by enabling" + eerror "at least one of the 'mysql', 'postgres' or 'sqlite' USE flags." + die "no database backend selected" + fi + + if ! built_with_use dev-util/subversion python ; then + built_with_use_error dev-util/subversion python + fi + + if ! built_with_use dev-libs/clearsilver python ; then + built_with_use_error dev-libs/clearsilver python + fi + + ebegin "Creating tracd group and user" + enewgroup tracd + enewuser tracd -1 -1 -1 tracd + eend ${?} + + webapp_pkg_setup +} + +src_install () { + # project environments might go in here + keepdir /var/lib/trac + + webapp_src_preinst + distutils_src_install + + dodoc AUTHORS INSTALL RELEASE THANKS UPGRADE + rm ${D}/usr/share/doc/${P}/MANIFEST.in.gz + rm ${D}/usr/share/doc/${P}/PKG-INFO.gz + + docinto contrib + dodoc contrib/* + + # if needed, install cgi/fcgi scripts for webapp-config + local my_dir=${D}/usr/share/trac + if use cgi ; then + mv ${my_dir}/cgi-bin/trac.cgi ${D}${MY_CGIBINDIR} || die + fi + if use fastcgi ; then + mv ${my_dir}/cgi-bin/trac.fcgi ${D}${MY_CGIBINDIR} || die + fi + rm -rf ${my_dir}/cgi-bin || die + + for lang in en; do + webapp_postinst_txt ${lang} ${FILESDIR}/postinst-${lang}.txt + done + + # copy graphics, css & js + cp -r htdocs/* ${D}/${MY_HTDOCSDIR} + + webapp_src_install + + newconfd "${FILESDIR}"/tracd.confd tracd + newinitd "${FILESDIR}"/tracd.initd tracd +} -- 2.26.2