Pullup ticket 509 - requested by Adrian Portelli

security update for bugzilla

Revisions pulled up:
- pkgsrc/devel/bugzilla/DESCR		1.2
- pkgsrc/devel/bugzilla/MESSAGE		1.2
- pkgsrc/devel/bugzilla/Makefile	1.6
- pkgsrc/devel/bugzilla/PLIST		1.3
- pkgsrc/devel/bugzilla/distinfo	1.5

   Module Name:		pkgsrc
   Committed By:	adrianp
   Date:		Sun May 15 17:04:32 UTC 2005

   Modified Files:
   	pkgsrc/devel/bugzilla: DESCR MESSAGE Makefile PLIST distinfo

   Log Message:
   - Update to 2.18.1
   - Two "Information Disclosure" security bugs fixed
   - From the ChangeLog:
   > + You can now enter a negative time for "Hours Worked"
   >   in the time-tracking area. (Bug 271276)
   >
   > + The BugMail.pm customization required for Windows (as
   >   described in the Bugzilla Guide) now actually works. (Bug 280911)
   >
   > + Users who were using Bugzilla 2.8 can now successfully upgrade
   >   to 2.18.1 (they couldn't upgrade to 2.18). (Bug 283403)
   >
   > + Dependency mails are now properly sent during a mass-change of bugs.
   >   (Bug 178157)

5 files changed, 40 insertions, 35 deletions

diff --git a/devel/bugzilla/DESCR b/devel/bugzilla/DESCR
index 2f5eaa6e968..1c8b62f76a8 100644
--- a/devel/bugzilla/DESCR
+++ b/devel/bugzilla/DESCR
@@ -1,18 +1,18 @@
-Bugzilla is a "Defect Tracking System" or "Bug-Tracking System". Defect 
-Tracking Systems allow individual or groups of developers to keep track of 
-outstanding bugs in their product effectively. Most commercial defect-tracking 
+Bugzilla is a "Defect Tracking System" or "Bug-Tracking System". Defect
+Tracking Systems allow individual or groups of developers to keep track of
+outstanding bugs in their product effectively. Most commercial defect-tracking
 software vendors charge enormous licensing fees. Despite being "free", Bugzilla
-has many features its expensive counterparts lack. Consequently, Bugzilla has 
+has many features its expensive counterparts lack. Consequently, Bugzilla has
 quickly become a favorite of hundreds of organizations across the globe.
 
 What Does Bugzilla Do?
 
-- Track bugs and code changes 
-- Communicate with teammates 
-- Submit and review patches 
-- Manage quality assurance (QA) 
+- Track bugs and code changes
+- Communicate with teammates
+- Submit and review patches
+- Manage quality assurance (QA)
 
-Bugzilla can help you get a handle on the software development process. 
-Successful projects often are the result of successful organization and 
-communication. Bugzilla is a powerful tool that will help your team get 
+Bugzilla can help you get a handle on the software development process.
+Successful projects often are the result of successful organization and
+communication. Bugzilla is a powerful tool that will help your team get
 organized and communicate effectively.
diff --git a/devel/bugzilla/MESSAGE b/devel/bugzilla/MESSAGE
index a6723f4db48..6761ce4ce37 100644
--- a/devel/bugzilla/MESSAGE
+++ b/devel/bugzilla/MESSAGE
@@ -1,5 +1,5 @@
 ===========================================================================
-$NetBSD: MESSAGE,v 1.1.1.1 2005/01/02 13:39:52 adrianp Exp $
+$NetBSD: MESSAGE,v 1.1.1.1.2.1 2005/05/18 11:59:31 salo Exp $
 
 To complete the setup you will need to read the Bugzilla-Guide.txt in order
 to setup mySQL properly.  In particular secion 2.2.2 of the document deals
@@ -12,11 +12,11 @@ check the settings in ${BZDIR}/localconfig and:
 You will need to make Bugzilla accessible through your HTTP server.
 If you are running Apache then you may add the following lines to httpd.conf:
 
-	DirectoryIndex index.cgi index.html			
+	DirectoryIndex index.cgi index.html
 	Include ${PKG_SYSCONFDIR}/httpd/bugzilla.conf
 
 to make Bugzilla accessible through:
-	
+
 	http://www.domain.com/bugzilla/index.cgi
 
 IMPORTANTLY: CHANGE YOUR DATABASE PASSWORD FROM THE DEFAULT !!
diff --git a/devel/bugzilla/Makefile b/devel/bugzilla/Makefile
index 42c938ff974..3d8c274d0ca 100644
--- a/devel/bugzilla/Makefile
+++ b/devel/bugzilla/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.4 2005/01/17 23:03:17 adrianp Exp $
+# $NetBSD: Makefile,v 1.4.2.1 2005/05/18 11:59:31 salo Exp $
 #
 
-DISTNAME=	bugzilla-2.18
+DISTNAME=	bugzilla-2.18.1
 CATEGORIES=	www devel
 MASTER_SITES=	http://ftp.mozilla.org/pub/mozilla.org/webtools/
 
@@ -13,7 +13,7 @@ DEPENDS+=	p5-AppConfig>=1.52:../../devel/p5-AppConfig
 DEPENDS+=	p5-CGI>=2.93:../../www/p5-CGI
 DEPENDS+=	p5-File-Spec>=0.82:../../devel/p5-File-Spec
 DEPENDS+=	p5-File-Temp-[0-9]*:../../devel/p5-File-Temp
-#DEPENDS+=	p5-Template-Toolkit>=2.08:../../www/p5-Template-Toolkit
+DEPENDS+=	p5-Template-Toolkit>=2.08:../../www/p5-Template-Toolkit
 DEPENDS+=	p5-Text-Tabs+Wrap>=2001.0131:../../textproc/p5-Text-Tabs+Wrap
 DEPENDS+=	p5-TimeDate>=1.14:../../time/p5-TimeDate
 DEPENDS+=	p5-DBD-mysql>=2.1010:../../databases/p5-DBD-mysql
@@ -109,6 +109,8 @@ do-install:
 	${CHOWN} -R ${SHAREOWN}:${SHAREGRP} ${BZDIR}/template
 	${INSTALL_DATA} ${WRKSRC}/skins/standard/*.css ${BZDIR}/skins/standard
 	${INSTALL_DATA} ${WRKSRC}/docs/images/*.gif ${BZDIR}/docs/images
+	${INSTALL_DATA} ${WRKSRC}/docs/images/*.png ${BZDIR}/docs/images
+	${INSTALL_DATA} ${WRKSRC}/docs/images/*.xml ${BZDIR}/docs/images
 	${INSTALL_DATA} ${WRKSRC}/docs/images/callouts/*.gif \
 		${BZDIR}/docs/images/callouts
 
diff --git a/devel/bugzilla/PLIST b/devel/bugzilla/PLIST
index 03104e7874e..623b0efae61 100644
--- a/devel/bugzilla/PLIST
+++ b/devel/bugzilla/PLIST
@@ -1,10 +1,14 @@
-@comment $NetBSD: PLIST,v 1.2 2005/01/17 23:03:17 adrianp Exp $
+@comment $NetBSD: PLIST,v 1.2.2.1 2005/05/18 11:59:31 salo Exp $
+share/bugzilla/1x1.gif
 share/examples/bugzilla/bugzilla.conf
 share/examples/bugzilla/localconfig
-share/bugzilla/1x1.gif
 share/bugzilla/Bugzilla.pm
 share/bugzilla/Bugzilla/Attachment.pm
 share/bugzilla/Bugzilla/Auth.pm
+share/bugzilla/Bugzilla/Auth/CGI.pm
+share/bugzilla/Bugzilla/Auth/Cookie.pm
+share/bugzilla/Bugzilla/Auth/DB.pm
+share/bugzilla/Bugzilla/Auth/LDAP.pm
 share/bugzilla/Bugzilla/Bug.pm
 share/bugzilla/Bugzilla/BugMail.pm
 share/bugzilla/Bugzilla/CGI.pm
@@ -22,10 +26,6 @@ share/bugzilla/Bugzilla/Template.pm
 share/bugzilla/Bugzilla/Token.pm
 share/bugzilla/Bugzilla/User.pm
 share/bugzilla/Bugzilla/Util.pm
-share/bugzilla/Bugzilla/Auth/CGI.pm
-share/bugzilla/Bugzilla/Auth/Cookie.pm
-share/bugzilla/Bugzilla/Auth/DB.pm
-share/bugzilla/Bugzilla/Auth/LDAP.pm
 share/bugzilla/Bugzilla/Template/Plugin/Bugzilla.pm
 share/bugzilla/Bugzilla/Template/Plugin/Hook.pm
 share/bugzilla/CGI.pl
@@ -53,6 +53,7 @@ share/bugzilla/docs/html/administration.html
 share/bugzilla/docs/html/bug_page.html
 share/bugzilla/docs/html/bugreports.html
 share/bugzilla/docs/html/cmdline.html
+share/bugzilla/docs/html/cmdline-bugmail.html
 share/bugzilla/docs/html/components.html
 share/bugzilla/docs/html/configuration.html
 share/bugzilla/docs/html/conventions.html
@@ -68,6 +69,7 @@ share/bugzilla/docs/html/disclaimer.html
 share/bugzilla/docs/html/extraconfig.html
 share/bugzilla/docs/html/faq.html
 share/bugzilla/docs/html/flags.html
+share/bugzilla/docs/html/flags-overview.html
 share/bugzilla/docs/html/gfdl-0.html
 share/bugzilla/docs/html/gfdl-1.html
 share/bugzilla/docs/html/gfdl-10.html
@@ -112,8 +114,6 @@ share/bugzilla/docs/html/using-intro.html
 share/bugzilla/docs/html/using.html
 share/bugzilla/docs/html/versions.html
 share/bugzilla/docs/html/voting.html
-share/bugzilla/docs/html/cmdline-bugmail.html
-share/bugzilla/docs/html/flags-overview.html
 share/bugzilla/docs/html/general-advice.html
 share/bugzilla/docs/html/lifecycle.html
 share/bugzilla/docs/html/modules-manual-optional.html
@@ -125,12 +125,15 @@ share/bugzilla/docs/html/security-webserver.html
 share/bugzilla/docs/html/security.html
 share/bugzilla/docs/html/trbl-index.html
 share/bugzilla/docs/html/trbl-relogin-everyone.html
+share/bugzilla/docs/html/trbl-passwd-encryption.html
 share/bugzilla/docs/html/trouble-filetemp.html
-share/bugzilla/docs/html/x2868.html
-share/bugzilla/docs/html/x2875.html
-share/bugzilla/docs/html/x2885.html
-share/bugzilla/docs/html/x2890.html
-share/bugzilla/docs/html/x2944.html
+share/bugzilla/docs/html/x2918.html
+share/bugzilla/docs/html/x2925.html
+share/bugzilla/docs/html/x2935.html
+share/bugzilla/docs/html/x2940.html
+share/bugzilla/docs/html/x2994.html
+share/bugzilla/docs/images/bzLifecycle.png
+share/bugzilla/docs/images/bzLifecycle.xml
 share/bugzilla/docs/images/callouts/1.gif
 share/bugzilla/docs/images/callouts/2.gif
 share/bugzilla/docs/images/callouts/3.gif
@@ -369,7 +372,7 @@ share/bugzilla/template/en/default/sidebar.xul.tmpl
 @dirrm share/bugzilla/template/en
 @dirrm share/bugzilla/template
 @exec ${MKDIR} %D/share/examples/bugzilla
-@dirrm share/examples/bugzilla        
+@dirrm share/examples/bugzilla
 @dirrm share/doc/bugzilla
 @dirrm share/bugzilla/js
 @dirrm share/bugzilla/docs/html
diff --git a/devel/bugzilla/distinfo b/devel/bugzilla/distinfo
index 10ade39e9ac..3a0538a22b6 100644
--- a/devel/bugzilla/distinfo
+++ b/devel/bugzilla/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.4 2005/02/23 22:24:10 agc Exp $
+$NetBSD: distinfo,v 1.4.2.1 2005/05/18 11:59:31 salo Exp $
 
-SHA1 (bugzilla-2.18.tar.gz) = 308e306309dbf1f6b284d2f3533e7c463e263558
-RMD160 (bugzilla-2.18.tar.gz) = 1aeaa402e8902a9dbd4b0b1103e8dfd56e4e7090
-Size (bugzilla-2.18.tar.gz) = 1490302 bytes
+SHA1 (bugzilla-2.18.1.tar.gz) = ec582315d2a909929045494b5ad11ffe97fc63bf
+RMD160 (bugzilla-2.18.1.tar.gz) = fbcecb2ec617fc2291aed680787464b72b312a50
+Size (bugzilla-2.18.1.tar.gz) = 1542054 bytes