diff options
| author | adrianp <adrianp@pkgsrc.org> | 2008-05-06 19:36:39 +0000 |
|---|---|---|
| committer | adrianp <adrianp@pkgsrc.org> | 2008-05-06 19:36:39 +0000 |
| commit | 81129e511842c7f1bf359fd86af7974a88fab600 (patch) | |
| tree | 60e075dda9a77e43a6e69db73f52d8f11b8a0a81 /devel/bugzilla | |
| parent | 0f925bb1b4d11e230ce9145af28c397ddf02932b (diff) | |
| download | pkgsrc-81129e511842c7f1bf359fd86af7974a88fab600.tar.gz | |
2.22.4
Class: Cross-Site Scripting
Versions: 2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
the "Long Format" of a bug list, which is the same thing),
there was a cross-site scripting hole--arbitrary text
from a particular URL parameter could be injected into the
page without filtering.
Diffstat (limited to 'devel/bugzilla')
| -rw-r--r-- | devel/bugzilla/Makefile | 6 | ||||
| -rw-r--r-- | devel/bugzilla/PLIST | 6 | ||||
| -rw-r--r-- | devel/bugzilla/distinfo | 8 |
3 files changed, 12 insertions, 8 deletions
diff --git a/devel/bugzilla/Makefile b/devel/bugzilla/Makefile index 56316d31627..a35bd97bd37 100644 --- a/devel/bugzilla/Makefile +++ b/devel/bugzilla/Makefile @@ -1,7 +1,7 @@ -# $NetBSD: Makefile,v 1.28 2008/03/03 17:45:34 jlam Exp $ +# $NetBSD: Makefile,v 1.29 2008/05/06 19:36:39 adrianp Exp $ # -DISTNAME= bugzilla-2.22.3 +DISTNAME= bugzilla-2.22.4 CATEGORIES= www devel MASTER_SITES= ${MASTER_SITE_MOZILLA_ALL:=webtools/} @@ -9,6 +9,8 @@ MAINTAINER= adrianp@NetBSD.org HOMEPAGE= http://www.bugzilla.org/ COMMENT= Web based bug tracking system +CONFLICTS+= bugzilla-3.[0-9]* + DEPENDS+= p5-AppConfig>=1.52:../../devel/p5-AppConfig DEPENDS+= p5-CGI>=2.93:../../www/p5-CGI DEPENDS+= p5-DBI>=1.38:../../databases/p5-DBI diff --git a/devel/bugzilla/PLIST b/devel/bugzilla/PLIST index d2512a55852..f090f455d6a 100644 --- a/devel/bugzilla/PLIST +++ b/devel/bugzilla/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.13 2007/08/25 09:49:34 adrianp Exp $ +@comment $NetBSD: PLIST,v 1.14 2008/05/06 19:36:39 adrianp Exp $ share/bugzilla/Bugzilla.pm share/bugzilla/Bugzilla/Attachment.pm share/bugzilla/Bugzilla/Auth.pm @@ -70,6 +70,9 @@ share/bugzilla/config.cgi share/bugzilla/createaccount.cgi share/bugzilla/describecomponents.cgi share/bugzilla/describekeywords.cgi +share/bugzilla/docs/html/keywords.html +share/bugzilla/docs/html/sanitycheck.html +share/bugzilla/docs/html/x767.html share/bugzilla/docs/html/Bugzilla-Guide.html share/bugzilla/docs/html/about.html share/bugzilla/docs/html/administration.html @@ -156,7 +159,6 @@ share/bugzilla/docs/html/using.html share/bugzilla/docs/html/versions.html share/bugzilla/docs/html/voting.html share/bugzilla/docs/html/whining.html -share/bugzilla/docs/html/x763.html share/bugzilla/duplicates.cgi share/bugzilla/duplicates.xul share/bugzilla/editclassifications.cgi diff --git a/devel/bugzilla/distinfo b/devel/bugzilla/distinfo index 75847ac364c..0326fa81138 100644 --- a/devel/bugzilla/distinfo +++ b/devel/bugzilla/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.14 2007/08/25 09:49:34 adrianp Exp $ +$NetBSD: distinfo,v 1.15 2008/05/06 19:36:39 adrianp Exp $ -SHA1 (bugzilla-2.22.3.tar.gz) = 461d1a754cdc4a9e26fc6936c48fbd7cf71fab14 -RMD160 (bugzilla-2.22.3.tar.gz) = 787f84e343297b1a8caee8310354e01f7c8cc2f8 -Size (bugzilla-2.22.3.tar.gz) = 1940974 bytes +SHA1 (bugzilla-2.22.4.tar.gz) = 37b53606e04f00d21460f03f27c9a2dd2fda2820 +RMD160 (bugzilla-2.22.4.tar.gz) = bb5850ffcf85e08b18393569341255edfdd9d672 +Size (bugzilla-2.22.4.tar.gz) = 2114034 bytes SHA1 (patch-aa) = 1139740aac7497c85f274ae4153a867abe8194a2 |