Fix for bz 212355 - multiple vulns

bugzilla.spec

@@ -6,13 +6,14 @@ URL: http://www.bugzilla.org/
 Name: bugzilla
 Version: 2.22
 Group: Applications/Publishing
-Release: 6%{?dist}
+Release: 7%{?dist}
 License: MPL
 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz
 Source1: bugzilla-httpd-conf
 Source2: README.fedora.bugzilla
 Patch0: bugzilla-data-dir.patch
 Patch1: bugzilla-config-path.patch
+Patch2: bugzilla-bz212355-fixvuln.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildArch: noarch
 Requires: smtpdaemon, webserver, graphviz, patchutils
@@ -40,6 +41,7 @@ Contributed scripts and functions for Bugzilla
 %setup -q -n %{name}-%{version}
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 # Filter unwanted Requires:
 cat << \EOF > %{name}-req
@@ -125,6 +127,9 @@ popd > /dev/null
 %{bzinstallprefix}/bugzilla/contrib
 
 %changelog
+* Wed Nov  8 2006 John Berninger <johnw at berningeronline dot net> - 2.22-7
+- Fixes for bz # 212355
+
 * Tue Jun 26 2006 John Berninger <johnw at berningeronline dot net> - 2.22-6
 - Clean up BugzillaEmail requires (filter it out)