aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorpav <pav@FreeBSD.org>2004-10-28 03:23:53 +0800
committerpav <pav@FreeBSD.org>2004-10-28 03:23:53 +0800
commit7a20bb09132cfd35ec834c797c8a63a8fd440104 (patch)
treeb9de1ddaca5d38543a861c976d11c82ed098992f
parentafc4044dd0f3b10df585d0b351249ae0be55e6e2 (diff)
downloadfreebsd-ports-gnome-7a20bb09132cfd35ec834c797c8a63a8fd440104.tar.gz
freebsd-ports-gnome-7a20bb09132cfd35ec834c797c8a63a8fd440104.tar.zst
freebsd-ports-gnome-7a20bb09132cfd35ec834c797c8a63a8fd440104.zip
- Update to 2.16.7, a security release:
Class: Unauthorized Bug Change Versions: 2.9 through 2.18rc2 and 2.19 Description: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it. Reference: https://bugzilla.mozilla.org/show_bug.cgi?id=252638 - Correct SQL command in pkg-message PR: ports/71161, ports/73166 Submitted by: Dmitry A Grigorovich <odip@bionet.nsc.ru>
Diffstat
-rw-r--r--devel/bugzilla/Makefile2
-rw-r--r--devel/bugzilla/distinfo4
-rw-r--r--devel/bugzilla/pkg-message5
-rw-r--r--devel/bugzilla2/Makefile2
-rw-r--r--devel/bugzilla2/distinfo4
-rw-r--r--devel/bugzilla2/pkg-message5
-rw-r--r--devel/bugzilla3/Makefile2
-rw-r--r--devel/bugzilla3/distinfo4
-rw-r--r--devel/bugzilla3/pkg-message5
9 files changed, 18 insertions, 15 deletions
diff --git a/devel/bugzilla/Makefile b/devel/bugzilla/Makefile
index d50ca0d12cd4..e1fba4a40db9 100644
--- a/devel/bugzilla/Makefile
+++ b/devel/bugzilla/Makefile
@@ -6,7 +6,7 @@
#
PORTNAME?= bugzilla
-PORTVERSION?= 2.16.6
+PORTVERSION?= 2.16.7
CATEGORIES?= devel
MASTER_SITES= ${MASTER_SITE_MOZILLA}
MASTER_SITE_SUBDIR= webtools webtools/archived
diff --git a/devel/bugzilla/distinfo b/devel/bugzilla/distinfo
index 6fbeef5f1553..4bea4993636b 100644
--- a/devel/bugzilla/distinfo
+++ b/devel/bugzilla/distinfo
@@ -1,2 +1,2 @@
-MD5 (bugzilla-2.16.6.tar.gz) = 5b694df8739be175f0358507f844b71d
-SIZE (bugzilla-2.16.6.tar.gz) = 1365080
+MD5 (bugzilla-2.16.7.tar.gz) = ee4c92bfd940521cc68ea91917f9f0dd
+SIZE (bugzilla-2.16.7.tar.gz) = 1368799
diff --git a/devel/bugzilla/pkg-message b/devel/bugzilla/pkg-message
index da839144465a..0474ba8f11ec 100644
--- a/devel/bugzilla/pkg-message
+++ b/devel/bugzilla/pkg-message
@@ -4,8 +4,9 @@
1. Create database user who has rights on bugs database manipulation
by following mysql commands:
- GRANT SELECT,INSERT,UPDATE,DELETE,INDEX, ALTER,CREATE,DROP,REFERENCES \
- ON <database>.* TO <dbuser>@<host> IDENTIFIED BY '<password>';
+ GRANT SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE,DROP,REFERENCES,\
+ LOCK TABLES ON <database>.* TO <dbuser>@<host> \
+ IDENTIFIED BY '<password>';
FLUSH PRIVILEGES;
where <database> is a bugs database name; <dbuser> is a bugs database
diff --git a/devel/bugzilla2/Makefile b/devel/bugzilla2/Makefile
index d50ca0d12cd4..e1fba4a40db9 100644
--- a/devel/bugzilla2/Makefile
+++ b/devel/bugzilla2/Makefile
@@ -6,7 +6,7 @@
#
PORTNAME?= bugzilla
-PORTVERSION?= 2.16.6
+PORTVERSION?= 2.16.7
CATEGORIES?= devel
MASTER_SITES= ${MASTER_SITE_MOZILLA}
MASTER_SITE_SUBDIR= webtools webtools/archived
diff --git a/devel/bugzilla2/distinfo b/devel/bugzilla2/distinfo
index 6fbeef5f1553..4bea4993636b 100644
--- a/devel/bugzilla2/distinfo
+++ b/devel/bugzilla2/distinfo
@@ -1,2 +1,2 @@
-MD5 (bugzilla-2.16.6.tar.gz) = 5b694df8739be175f0358507f844b71d
-SIZE (bugzilla-2.16.6.tar.gz) = 1365080
+MD5 (bugzilla-2.16.7.tar.gz) = ee4c92bfd940521cc68ea91917f9f0dd
+SIZE (bugzilla-2.16.7.tar.gz) = 1368799
diff --git a/devel/bugzilla2/pkg-message b/devel/bugzilla2/pkg-message
index da839144465a..0474ba8f11ec 100644
--- a/devel/bugzilla2/pkg-message
+++ b/devel/bugzilla2/pkg-message
@@ -4,8 +4,9 @@
1. Create database user who has rights on bugs database manipulation
by following mysql commands:
- GRANT SELECT,INSERT,UPDATE,DELETE,INDEX, ALTER,CREATE,DROP,REFERENCES \
- ON <database>.* TO <dbuser>@<host> IDENTIFIED BY '<password>';
+ GRANT SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE,DROP,REFERENCES,\
+ LOCK TABLES ON <database>.* TO <dbuser>@<host> \
+ IDENTIFIED BY '<password>';
FLUSH PRIVILEGES;
where <database> is a bugs database name; <dbuser> is a bugs database
diff --git a/devel/bugzilla3/Makefile b/devel/bugzilla3/Makefile
index d50ca0d12cd4..e1fba4a40db9 100644
--- a/devel/bugzilla3/Makefile
+++ b/devel/bugzilla3/Makefile
@@ -6,7 +6,7 @@
#
PORTNAME?= bugzilla
-PORTVERSION?= 2.16.6
+PORTVERSION?= 2.16.7
CATEGORIES?= devel
MASTER_SITES= ${MASTER_SITE_MOZILLA}
MASTER_SITE_SUBDIR= webtools webtools/archived
diff --git a/devel/bugzilla3/distinfo b/devel/bugzilla3/distinfo
index 6fbeef5f1553..4bea4993636b 100644
--- a/devel/bugzilla3/distinfo
+++ b/devel/bugzilla3/distinfo
@@ -1,2 +1,2 @@
-MD5 (bugzilla-2.16.6.tar.gz) = 5b694df8739be175f0358507f844b71d
-SIZE (bugzilla-2.16.6.tar.gz) = 1365080
+MD5 (bugzilla-2.16.7.tar.gz) = ee4c92bfd940521cc68ea91917f9f0dd
+SIZE (bugzilla-2.16.7.tar.gz) = 1368799
diff --git a/devel/bugzilla3/pkg-message b/devel/bugzilla3/pkg-message
index da839144465a..0474ba8f11ec 100644
--- a/devel/bugzilla3/pkg-message
+++ b/devel/bugzilla3/pkg-message
@@ -4,8 +4,9 @@
1. Create database user who has rights on bugs database manipulation
by following mysql commands:
- GRANT SELECT,INSERT,UPDATE,DELETE,INDEX, ALTER,CREATE,DROP,REFERENCES \
- ON <database>.* TO <dbuser>@<host> IDENTIFIED BY '<password>';
+ GRANT SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE,DROP,REFERENCES,\
+ LOCK TABLES ON <database>.* TO <dbuser>@<host> \
+ IDENTIFIED BY '<password>';
FLUSH PRIVILEGES;
where <database> is a bugs database name; <dbuser> is a bugs database
generated by cgit (git 2.34.1) at 2024-11-24 18:35:31 +0800