Pullup ticket #3808 - requested by spz

devel/rt3: security update

Revisions pulled up:
- devel/rt3/Makefile                                            1.49
- devel/rt3/Makefile.install                                    1.18
- devel/rt3/PLIST                                               1.21
- devel/rt3/distinfo                                            1.22
- devel/rt3/patches/patch-lib_RT_Action_CreateTickets.pm        deleted
- devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm             deleted
- devel/rt3/patches/patch-lib_RT_Transaction__Overlay.pm        deleted
- devel/rt3/patches/patch-share_html_Admin_CustomFields_Modify.html deleted
- devel/rt3/patches/patch-share_html_Search_Bulk.html           deleted
- devel/rt3/patches/patch-share_html_Search_Elements_SelectChartType deleted
- devel/rt3/patches/patch-share_html_Ticket_Elements_PreviewScrips deleted

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Fri May 25 19:55:44 UTC 2012

   Modified Files:
   	pkgsrc/devel/rt3: Makefile Makefile.install PLIST distinfo
   Removed Files:
   	pkgsrc/devel/rt3/patches: patch-lib_RT_Action_CreateTickets.pm
   	    patch-lib_RT_Ticket__Overlay.pm
   	    patch-lib_RT_Transaction__Overlay.pm
   	    patch-share_html_Admin_CustomFields_Modify.html
   	    patch-share_html_Search_Bulk.html
   	    patch-share_html_Search_Elements_SelectChartType
   	    patch-share_html_Ticket_Elements_PreviewScrips

   Log Message:
   Update RT to version 3.8.12:

   Changes from 3.8.11 to 3.8.12:
       This release, in addition to being a bugfix release, also resolves a
       number of security vulnerabilities.  It resolves CVE-2011-2082,
       CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
       CVE-2011-4459, and CVE-2011-4460.

        * Upgrade prototype.js to version 1.7, for compatibility with google
          charts.
        * Remove ie7.js, which is no longer used.
        * Ensure that TransactionBatch scripts are only run once.

   Changes from 3.8.10 to 3.8.11:
       This release contains a number of bugfixes and minor security updates
       since the 3.8.10 release, most notably:

        * Adjust FCGI dependency to one which resolves FCGI's CVE-2011-2766

        * New WebHttpOnlyCookies option, enabled by default, which hides RT's
          cookie from direct Javascript access.

        * Compatibility with perl 5.12 and 5.14, by removing deprecated "for
          qw(...)" and "defined %hash" syntax.

        * MySQL 5.5 compatibility, by specifying ENGINE=InnoDB rather than
          TYPE=InnoDB

        * Ensure that RT::Interface::Web's _Overlay, _Local, and _Vendor files
          are loaded correctly.

        * Fix session cleaner for on-disk sessions, broken since 3.8.0.

        * Ensure that only one "Based on" attribute is stored for each custom
          field.

        * Fix the loading of Shredder plugins, broken in 3.8.10.

1 files changed, 0 insertions, 49 deletions

diff --git a/devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm b/devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm
deleted file mode 100644
index fb179fcb4cf..00000000000
--- a/devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm
+++ /dev/null
@@ -1,49 +0,0 @@
-$NetBSD: patch-lib_RT_Ticket__Overlay.pm,v 1.1 2011/10/25 19:38:10 spz Exp $
-
-perl 5.14 qw() in for* fixes
-
---- lib/RT/Ticket_Overlay.pm.orig	2011-04-14 00:32:21.000000000 +0000
-+++ lib/RT/Ticket_Overlay.pm
-@@ -471,13 +471,13 @@ sub Create {
-     );
- 
- # Parameters passed in during an import that we probably don't want to touch, otherwise
--    foreach my $attr qw(id Creator Created LastUpdated LastUpdatedBy) {
-+    foreach my $attr ( qw(id Creator Created LastUpdated LastUpdatedBy) ) {
-         $params{$attr} = $args{$attr} if $args{$attr};
-     }
- 
-     # Delete null integer parameters
-     foreach my $attr
--        qw(TimeWorked TimeLeft TimeEstimated InitialPriority FinalPriority)
-+        ( qw(TimeWorked TimeLeft TimeEstimated InitialPriority FinalPriority) )
-     {
-         delete $params{$attr}
-           unless ( exists $params{$attr} && $params{$attr} );
-@@ -745,7 +745,7 @@ sub _Parse822HeadersForAttributes {
-         
-     }
- 
--    foreach my $date qw(due starts started resolved) {
-+    foreach my $date ( qw(due starts started resolved) ) {
-         my $dateobj = RT::Date->new($RT::SystemUser);
-         if ( defined ($args{$date}) and $args{$date} =~ /^\d+$/ ) {
-             $dateobj->Set( Format => 'unix', Value => $args{$date} );
-@@ -2600,7 +2600,7 @@ sub MergeInto {
-     }
- 
-     # Update time fields
--    foreach my $type qw(TimeEstimated TimeWorked TimeLeft) {
-+    foreach my $type ( qw(TimeEstimated TimeWorked TimeLeft) ) {
- 
-         my $mutator = "Set$type";
-         $MergeInto->$mutator(
-@@ -2608,7 +2608,7 @@ sub MergeInto {
- 
-     }
- #add all of this ticket's watchers to that ticket.
--    foreach my $watcher_type qw(Requestors Cc AdminCc) {
-+    foreach my $watcher_type ( qw(Requestors Cc AdminCc) ) {
- 
-         my $people = $self->$watcher_type->MembersObj;
-         my $addwatcher_type =  $watcher_type;