Version bump, bug 371467235914 thank Eric Martin for this job. Fixes multiple vulnerabilities, bug #371467 wrt GLSAMaker/CVETool Bot.

Package-Manager: portage-2.1.10.20/cvs/Linux x86_64

4 files changed, 257 insertions, 10 deletions

diff --git a/www-apps/rt/ChangeLog b/www-apps/rt/ChangeLog
index 7405e0664441..05bb6c0d8683 100644
--- a/www-apps/rt/ChangeLog
+++ b/www-apps/rt/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for www-apps/rt
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.60 2011/07/08 10:23:32 ssuominen Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/ChangeLog,v 1.61 2011/10/02 18:08:36 pva Exp $
+
+*rt-3.8.10 (02 Oct 2011)
+
+  02 Oct 2011; Peter Volkov <pva@gentoo.org> +rt-3.8.10.ebuild, metadata.xml:
+  Version bump, bug 371467235914 thank Eric Martin for this job. Fixes multiple
+  vulnerabilities, bug #371467 wrt GLSAMaker/CVETool Bot.
 
   08 Jul 2011; Samuli Suominen <ssuominen@gentoo.org> rt-3.6.7.ebuild:
   Convert from "useq" to "use".
diff --git a/www-apps/rt/Manifest b/www-apps/rt/Manifest
index 4b70c1dbd673..b4b9f18e1d1a 100644
--- a/www-apps/rt/Manifest
+++ b/www-apps/rt/Manifest
@@ -9,13 +9,15 @@ AUX rt.init.d 1013 RMD160 c6853447d8653cfbcf26316c0a432e3474298467 SHA1 bf7408b6
 AUX rt_apache2.conf 550 RMD160 a9f463c8f7c4803a32f0e8380e594c2eb6f5f05a SHA1 b11218515f2c43cd2738be71e4e3b25ce8b4bb38 SHA256 db52d05f10cb6ed1bb236ed9e6fc5cc7574b5949c5cb85b5719d0132cbb072cc
 AUX rt_apache2_fcgi.conf 989 RMD160 f88807ad0db9806ee2c638e998ab10e9339a9ed6 SHA1 92ea95bae0a8c2b31b058385b789e9b7fce4f8b1 SHA256 7dff43c9fb73daa06c9c4841199e7618758250129946ec9d20adf5a1852e4e91
 DIST rt-3.6.7.tar.gz 1764471 RMD160 f14ce94a2d9fcb243c6fae274fc5602cae4692cd SHA1 990fd47899bed1ec8e7d23556853fb3a70d95479 SHA256 5916fe002d3739e670aef49a4b12aa385e45eea4602adcf12feaef583a73f6c1
+DIST rt-3.8.10.tar.gz 5642566 RMD160 779ba2e04e87d20f30b03a9e7348c23b09062038 SHA1 98678a4ce4dbdfb13ceeeb88236d49bd0f5562c7 SHA256 d121ec6463ce919cef74c3ce3ab7e7213cb235726d05abd26c717a7eab6c1448
 EBUILD rt-3.6.7.ebuild 6180 RMD160 d82a6ef95dbba829dd0319cf6b0338f86a70aa73 SHA1 c9ffeb1015d26ab5a9c4e9f4ecb072de25b4bb4d SHA256 6fac9679d2f0dcdf8787df699d90e94f2c17e3ef489ca68822c844e7d2754ec8
-MISC ChangeLog 9333 RMD160 79a0213cdba07aa152fc145cbd0758cd82d5bedf SHA1 a28f522323aaf5114253261ab27b1c6f16350f6b SHA256 cd69134c3d7878b2c3d1b33e8a2cba205dfe21a5fdb3bf19a8ef75eb4d256123
-MISC metadata.xml 257 RMD160 3a1803d31571046ab2738b63ef3af80f1a878f60 SHA1 65afa75102c7330578ea6e7e4f088e28d27f7f36 SHA256 dfd87fdcfa6a29b74fe2dc1a08e6f21c0ee06fd12064c3b188288e92d81b99f7
+EBUILD rt-3.8.10.ebuild 6175 RMD160 14af0cd5f9c734826782b2a9b0ae7b88a6218da8 SHA1 71b6c6c114bdabf170638409d840cc07fdc460ac SHA256 647a741fa1b15c525b469e97fc801ecb35bee6c57c3705334e1997c9c6524861
+MISC ChangeLog 9570 RMD160 fb345369d0827e232438dc3101710aa02db6d889 SHA1 2116330259ad897cdc9e8feb3bcbfe07df61ce30 SHA256 50e8c7b865cbae28c0bafb9deda2e8951f35df80bf64a4970c1350a2b64bae19
+MISC metadata.xml 524 RMD160 295179b59cac47383471772520c6afaca965a448 SHA1 6e4ee23e5e9f00ce247226aacb3c133c9b35e3bc SHA256 589ec91d467e77ce4708fe59d3e4818137dd8188647461fbd68da4e4fcabfb92
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iF4EAREIAAYFAk4W2lUACgkQXkR9YqOcLPFTUAD7BoBDt8tjFuq5+M1NMFyIKZk+
-ArTfiENRwZ1MTZAS0LgA/2Ae+qDZOmmLRvaMzROSf0XK8JSsngNK+rOek4imebCP
-=39Nt
+iF4EAREIAAYFAk6IqEoACgkQGrk+8vGYmwfILQEA75S43R7wQNgKdW64+8jKuPT2
+aJY7O7wsSKWHMU0coVABAMEdJ9e7iqdX6Z1gdjjn6Um/Bu5qAvfVr/dFuKLZ38vr
+=Fojw
 -----END PGP SIGNATURE-----
diff --git a/www-apps/rt/metadata.xml b/www-apps/rt/metadata.xml
index c41b8edbe3af..a7a0bc83ef61 100644
--- a/www-apps/rt/metadata.xml
+++ b/www-apps/rt/metadata.xml
@@ -1,8 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
-  <herd>web-apps</herd>
-  <use>
-    <flag name="lighttpd">Add <pkg>www-servers/lighttpd</pkg> support</flag>
-  </use>
+	<herd>web-apps</herd>
+ 	<maintainer>
+		<email>eric.joshua.martin@gmail.com</email>
+		<name>Eric Martin</name>
+	</maintainer>
+ 	<maintainer>
+		<email>pva@gentoo.org</email>
+		<name>Peter Volkov</name>
+	</maintainer>
+	<use>
+		<flag name="lighttpd">Add <pkg>www-servers/lighttpd</pkg> support</flag>
+	</use>
+	<longdescription>RT is an enterprise-grade ticketing system</longdescription>
 </pkgmetadata>
diff --git a/www-apps/rt/rt-3.8.10.ebuild b/www-apps/rt/rt-3.8.10.ebuild
new file mode 100644
index 000000000000..3271ccf0e014
--- /dev/null
+++ b/www-apps/rt/rt-3.8.10.ebuild
@@ -0,0 +1,230 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/rt/rt-3.8.10.ebuild,v 1.1 2011/10/02 18:08:36 pva Exp $
+
+inherit webapp eutils depend.apache confutils
+
+DESCRIPTION="RT is an enterprise-grade ticketing system"
+HOMEPAGE="http://www.bestpractical.com/rt/"
+SRC_URI="http://download.bestpractical.com/pub/${PN}/release/${P}.tar.gz"
+
+KEYWORDS="~amd64 ~ppc ~x86"
+LICENSE="GPL-2"
+IUSE="mysql postgres fastcgi lighttpd"
+
+DEPEND="
+	>=dev-lang/perl-5.8.3
+
+	>=dev-perl/Apache-Session-1.53
+	dev-perl/Cache-Simple-TimedExpiry
+	dev-perl/Calendar-Simple
+	>=dev-perl/class-returnvalue-0.40
+	>=dev-perl/CSS-Squish-0.06
+	>=dev-perl/DBI-1.37
+	>=dev-perl/dbix-searchbuilder-1.53
+	>=dev-perl/Devel-StackTrace-1.19
+	dev-perl/GD
+	dev-perl/GDGraph
+	dev-perl/GDTextUtil
+	dev-perl/HTML-Format
+	>dev-perl/HTML-Mason-1.31
+	dev-perl/HTML-Parser
+	>=dev-perl/HTML-Scrubber-0.08
+	dev-perl/HTML-Tree
+	>=dev-perl/HTTP-Server-Simple-0.07
+	>=dev-perl/HTTP-Server-Simple-Mason-0.09
+	dev-perl/libwww-perl
+	dev-perl/locale-maketext-fuzzy
+	>=dev-perl/locale-maketext-lexicon-0.32
+	>=dev-perl/log-dispatch-2.0
+	>=dev-perl/MailTools-1.60
+	>=dev-perl/MIME-tools-5.417
+	dev-perl/Module-Versions-Report
+	dev-perl/regexp-common
+	dev-perl/TermReadKey
+	dev-perl/text-autoformat
+	>=dev-perl/Text-Quoted-2.02
+	dev-perl/text-template
+	>=dev-perl/Text-WikiFormat-0.76
+	dev-perl/text-wrapper
+	dev-perl/TimeDate
+	dev-perl/Time-modules
+	>=dev-perl/Tree-Simple-1.04
+	dev-perl/UNIVERSAL-require
+	>=dev-perl/XML-RSS-1.05
+	>=virtual/perl-CGI-2.92
+	virtual/perl-digest-base
+	>=virtual/perl-Digest-MD5-2.27
+	>=virtual/perl-File-Spec-0.8
+	virtual/perl-File-Temp
+	>=virtual/perl-Getopt-Long-2.24
+	virtual/perl-libnet
+	>=virtual/perl-locale-maketext-1.06
+	virtual/perl-Scalar-List-Utils
+	>=virtual/perl-Storable-2.08
+	virtual/perl-Time-HiRes
+
+	!lighttpd? ( dev-perl/Apache-DBI )
+	lighttpd? ( dev-perl/FCGI )
+	fastcgi? ( dev-perl/FCGI )
+	mysql? ( >=dev-perl/DBD-mysql-2.1018 )
+	postgres? ( >=dev-perl/DBD-Pg-1.43 )
+"
+
+RDEPEND="${DEPEND}
+	virtual/mta
+	!lighttpd? ( ${APACHE2_DEPEND} )
+	lighttpd? ( >=www-servers/lighttpd-1.3.13 )
+"
+
+need_httpd_cgi
+
+add_user_rt() {
+	# add new user
+	# suexec2 requires uid >= 1000; enewuser is of no help here
+	# From: Mike Frysinger <vapier@gentoo.org>
+	# Date: Fri, 17 Jun 2005 08:41:44 -0400
+	# i'd pick a 5 digit # if i were you
+
+	local euser="rt"
+
+	# first check if username rt exists
+	if [[ ${euser} == $(egetent passwd "${euser}" | cut -d: -f1) ]] ; then
+		# check uid
+		rt_uid=$(egetent passwd "${euser}" | cut -d: -f3)
+		if $(expr ${rt_uid} '<' 1000 > /dev/null); then
+			ewarn "uid of user rt is less than 1000. suexec2 will not work."
+			ewarn "If you want to use FastCGI, please delete the user 'rt'"
+			ewarn "from your system and re-emerge www-apps/rt"
+			epause
+		fi
+		return 0 # all is well
+	fi
+
+	# add user
+	# stolen from enewuser
+	local pwrange euid
+
+	pwrange=$(seq 10001 11001)
+	for euid in ${pwrange} ; do
+		[[ -z $(egetent passwd ${euid}) ]] && break
+	done
+	if [[ ${euid} == "11001" ]]; then
+		# she gets around, doesn't she?
+		die "No available uid's found"
+	fi
+
+	elog " - Userid: ${euid}"
+
+	enewuser rt ${euid} -1 /dev/null rt > /dev/null
+	return 0
+}
+
+pkg_setup() {
+	webapp_pkg_setup
+	ewarn
+	ewarn "If you are upgrading from an existing _RT2_ installation,"
+	ewarn "stop this ebuild (Ctrl-C now), download the upgrade tool,"
+	ewarn "http://bestpractical.com/pub/rt/devel/rt2-to-rt3.tar.gz"
+	ewarn "and follow the included instructions."
+	ewarn
+	epause 5
+	enewgroup rt >/dev/null
+	add_user_rt || die "Could not add user"
+}
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	# add Gentoo-specific layout
+	cat "${FILESDIR}"/config.layout-gentoo >> config.layout
+	sed -e "s|PREFIX|${D}/${MY_HOSTROOTDIR}/${PF}|
+			s|HTMLDIR|${D}/${MY_HTDOCSDIR}|g" -i ./config.layout || die
+
+	# don't need to check dev dependencies
+	sed -e "s|\$args{'with-DEV'} =1;|#\$args{'with-DEV'} =1;|" -i sbin/rt-test-dependencies.in || die
+}
+
+src_compile() {
+	local web="apache"
+	use lighttpd && web="lighttpd"
+
+	local dbtype dba
+
+	if use mysql; then
+		dbtype="--with-db-type=mysql"
+		dba="--with-db-dba=root"
+	fi
+	if use postgres;then
+		dbtype="--with-db-type=Pg"
+		dba="--with-db-dba=postgres"
+	fi
+	if use postgres && use mysql; then
+		ewarn "Both mysql and postgres USE flags enabled, default is mysql."
+		ewarn "You can set the default value in RT_SiteConfig before DB init."
+		dbtype="--with-db-type=mysql"
+		dba="--with-db-dba=root"
+	fi
+
+	./configure --enable-layout=Gentoo \
+		--with-bin-owner=rt \
+		--with-libs-owner=rt \
+		--with-libs-group=rt \
+		--with-rt-group=rt \
+		--with-web-user=${web} \
+		--with-web-group=${web} \
+		${dbtype} ${dba}
+
+	# check for missing deps and ask to report if something is broken
+	local myconf="--verbose \
+		$(enable_extension_withonly mysql mysql) \
+		$(enable_extension_withonly postgresql postgres) \
+		$(enable_extension_withonly fastcgi fastcgi) \
+		$(enable_extension_withonly fastcgi lighttpd)" \
+
+	if ! use fastcgi && ! use lighttpd; then
+		myconf="${myconf} --with-modperl2"
+	fi
+
+	/usr/bin/perl ./sbin/rt-test-dependencies ${myconf} > "${T}"/t
+	if grep -q "MISSING" "${T}"/t; then
+		ewarn "Missing Perl dependency!"
+		ewarn
+		cat "${T}"/t | grep MISSING
+		ewarn
+		ewarn "Please run perl-cleaner. If the problem persists,"
+		ewarn "please file a bug in the Gentoo Bugzilla with the information above"
+		die "Missing dependencies."
+	fi
+}
+
+src_install() {
+	webapp_src_preinst
+	emake install || die
+
+	# make sure we don't clobber existing site configuration
+	rm -f "${D}"/${MY_HOSTROOTDIR}/${PF}/etc/RT_SiteConfig.pm
+
+	# fix paths
+	find "${D}" -type f -print0 | xargs -0 sed -i -e "s:${D}::g"
+
+	# copy upgrade files
+	insinto "${MY_HOSTROOTDIR}/${PF}"
+	doins -r etc/upgrade
+
+	if use lighttpd; then
+		newinitd "${FILESDIR}"/${PN}.init.d ${PN}
+		newconfd "${FILESDIR}"/${PN}.conf.d ${PN}
+		dosed "s/@@PF@@/${PF}/g" /etc/conf.d/${PN}
+	else
+		doins "${FILESDIR}"/{rt_apache2_fcgi.conf,rt_apache2.conf}
+	fi
+
+	webapp_serverowned "${MY_HOSTROOTDIR}"/${PF}/var
+
+	webapp_postinst_txt en "${FILESDIR}"/postinstall-en.txt
+	webapp_hook_script "${FILESDIR}"/reconfig
+
+	webapp_src_install
+}