diff options
| author | pav <pav@FreeBSD.org> | 2004-10-28 03:23:53 +0800 |
|---|---|---|
| committer | pav <pav@FreeBSD.org> | 2004-10-28 03:23:53 +0800 |
| commit | 7a20bb09132cfd35ec834c797c8a63a8fd440104 (patch) | |
| tree | b9de1ddaca5d38543a861c976d11c82ed098992f /devel/bugzilla2 | |
| parent | afc4044dd0f3b10df585d0b351249ae0be55e6e2 (diff) | |
| download | freebsd-ports-graphics-7a20bb09132cfd35ec834c797c8a63a8fd440104.tar.gz freebsd-ports-graphics-7a20bb09132cfd35ec834c797c8a63a8fd440104.tar.zst freebsd-ports-graphics-7a20bb09132cfd35ec834c797c8a63a8fd440104.zip | |
- Update to 2.16.7, a security release:
Class: Unauthorized Bug Change
Versions: 2.9 through 2.18rc2 and 2.19
Description: It is possible to send a carefully crafted HTTP POST
message to process_bug.cgi which will remove keywords from
a bug even if you don't have permissions to edit all bug
fields (the "editbugs" permission). Such changes are
reported in "bug changed" email notifications, so they are
easily detected and reversed if someone abuses it.
Reference: https://bugzilla.mozilla.org/show_bug.cgi?id=252638
- Correct SQL command in pkg-message
PR: ports/71161, ports/73166
Submitted by: Dmitry A Grigorovich <odip@bionet.nsc.ru>
Diffstat (limited to 'devel/bugzilla2')
| -rw-r--r-- | devel/bugzilla2/Makefile | 2 | ||||
| -rw-r--r-- | devel/bugzilla2/distinfo | 4 | ||||
| -rw-r--r-- | devel/bugzilla2/pkg-message | 5 |
3 files changed, 6 insertions, 5 deletions
diff --git a/devel/bugzilla2/Makefile b/devel/bugzilla2/Makefile index d50ca0d12cd..e1fba4a40db 100644 --- a/devel/bugzilla2/Makefile +++ b/devel/bugzilla2/Makefile @@ -6,7 +6,7 @@ # PORTNAME?= bugzilla -PORTVERSION?= 2.16.6 +PORTVERSION?= 2.16.7 CATEGORIES?= devel MASTER_SITES= ${MASTER_SITE_MOZILLA} MASTER_SITE_SUBDIR= webtools webtools/archived diff --git a/devel/bugzilla2/distinfo b/devel/bugzilla2/distinfo index 6fbeef5f155..4bea4993636 100644 --- a/devel/bugzilla2/distinfo +++ b/devel/bugzilla2/distinfo @@ -1,2 +1,2 @@ -MD5 (bugzilla-2.16.6.tar.gz) = 5b694df8739be175f0358507f844b71d -SIZE (bugzilla-2.16.6.tar.gz) = 1365080 +MD5 (bugzilla-2.16.7.tar.gz) = ee4c92bfd940521cc68ea91917f9f0dd +SIZE (bugzilla-2.16.7.tar.gz) = 1368799 diff --git a/devel/bugzilla2/pkg-message b/devel/bugzilla2/pkg-message index da839144465..0474ba8f11e 100644 --- a/devel/bugzilla2/pkg-message +++ b/devel/bugzilla2/pkg-message @@ -4,8 +4,9 @@ 1. Create database user who has rights on bugs database manipulation by following mysql commands: - GRANT SELECT,INSERT,UPDATE,DELETE,INDEX, ALTER,CREATE,DROP,REFERENCES \ - ON <database>.* TO <dbuser>@<host> IDENTIFIED BY '<password>'; + GRANT SELECT,INSERT,UPDATE,DELETE,INDEX,ALTER,CREATE,DROP,REFERENCES,\ + LOCK TABLES ON <database>.* TO <dbuser>@<host> \ + IDENTIFIED BY '<password>'; FLUSH PRIVILEGES; where <database> is a bugs database name; <dbuser> is a bugs database |