Pullup ticket 600 - requested by Adrian Portelli

security update for bugzilla

Revisions pulled up:
- pkgsrc/devel/bugzilla/Makefile	1.8
- pkgsrc/devel/bugzilla/PLIST		1.4
- pkgsrc/devel/bugzilla/distinfo	1.7

    Module Name:    pkgsrc
    Committed By:   adrianp
    Date:           Thu Jul 14 10:26:29 UTC 2005

    Modified Files:
            pkgsrc/devel/bugzilla: Makefile PLIST distinfo

    Log Message:
    - Update to 2.18.3
    - Update addresses two security issues
    - From the ChangeLog:

    > Version 2.18.2
    > --------------
    >
    > + You can now create accounts with createaccount.cgi even
    >   when the "requirelogin" parameter is turned on. (Bug 294778)
    >
    > + Bugs that are in disabled groups may not show a padlock
    >   on the bug list, or may otherwise behave strangely. You
    >   can now fix this using sanitycheck.cgi. (Bug 277454)
    >
    > + If sendmail dies while you are marking a bug
    >   as a duplicate, the duplicates table will no longer become
    >   corrupted. (Bug 225042)
    >
    > + Any user can change a flag on any bug. This also allows the
    >   attacker to expose the summary of any bug, even a hidden bug.
    >
    > + Summaries of private bugs are sometimes exposed under a very rare
    >   condition if you use MySQL replication.
    >
    > Version 2.18.3
    > --------------
    >
    > + The query.cgi page was broken in 2.18.2 by bug 300138.
    >   That is now fixed.

3 files changed, 12 insertions, 13 deletions

diff --git a/devel/bugzilla/Makefile b/devel/bugzilla/Makefile
index 5a6e288a461..c51a7dd42a9 100644
--- a/devel/bugzilla/Makefile
+++ b/devel/bugzilla/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.7 2005/06/17 22:58:02 adrianp Exp $
+# $NetBSD: Makefile,v 1.7.2.1 2005/07/14 22:01:51 snj Exp $
 #
 
-DISTNAME=	bugzilla-2.18.1
-PKGREVISION=	1
+DISTNAME=	bugzilla-2.18.3
 CATEGORIES=	www devel
 MASTER_SITES=	http://ftp.mozilla.org/pub/mozilla.org/webtools/
 
diff --git a/devel/bugzilla/PLIST b/devel/bugzilla/PLIST
index 57fe19e3035..1cfbc0e1b3d 100644
--- a/devel/bugzilla/PLIST
+++ b/devel/bugzilla/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2005/05/15 17:04:32 adrianp Exp $
+@comment $NetBSD: PLIST,v 1.3.2.1 2005/07/14 22:01:51 snj Exp $
 share/bugzilla/1x1.gif
 share/examples/bugzilla/bugzilla.conf
 share/examples/bugzilla/localconfig
@@ -127,11 +127,11 @@ share/bugzilla/docs/html/trbl-index.html
 share/bugzilla/docs/html/trbl-relogin-everyone.html
 share/bugzilla/docs/html/trbl-passwd-encryption.html
 share/bugzilla/docs/html/trouble-filetemp.html
-share/bugzilla/docs/html/x2918.html
-share/bugzilla/docs/html/x2925.html
-share/bugzilla/docs/html/x2935.html
-share/bugzilla/docs/html/x2940.html
-share/bugzilla/docs/html/x2994.html
+share/bugzilla/docs/html/x2941.html
+share/bugzilla/docs/html/x2948.html
+share/bugzilla/docs/html/x2958.html
+share/bugzilla/docs/html/x2963.html
+share/bugzilla/docs/html/x3017.html
 share/bugzilla/docs/images/bzLifecycle.png
 share/bugzilla/docs/images/bzLifecycle.xml
 share/bugzilla/docs/images/callouts/1.gif
diff --git a/devel/bugzilla/distinfo b/devel/bugzilla/distinfo
index ccab3274785..28fce8c6599 100644
--- a/devel/bugzilla/distinfo
+++ b/devel/bugzilla/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2005/06/17 22:58:02 adrianp Exp $
+$NetBSD: distinfo,v 1.6.2.1 2005/07/14 22:01:51 snj Exp $
 
-SHA1 (bugzilla-2.18.1.tar.gz) = ec582315d2a909929045494b5ad11ffe97fc63bf
-RMD160 (bugzilla-2.18.1.tar.gz) = fbcecb2ec617fc2291aed680787464b72b312a50
-Size (bugzilla-2.18.1.tar.gz) = 1542054 bytes
+SHA1 (bugzilla-2.18.3.tar.gz) = c0916d8dc00955ec03e5af4f3b215b351047684a
+RMD160 (bugzilla-2.18.3.tar.gz) = c683f387c33379196cf5c3abad64bb02314dbc29
+Size (bugzilla-2.18.3.tar.gz) = 1649951 bytes
 SHA1 (patch-aa) = 8b25ff33bb77ce226b52ccf97ec7c91c1e95a6a1