diff --git a/.gitignore b/.gitignore index 106dae3..5431b16 100644 --- a/.gitignore +++ b/.gitignore @@ -8,3 +8,9 @@ bugzilla-3.6.1.tar.gz /bugzilla-4.0.2.tar.gz /bugzilla-4.0.3.tar.gz /bugzilla-4.0.4.tar.gz +/bugzilla-4.0.5.tar.gz +/bugzilla-4.0.6.tar.gz +/bugzilla-4.0.7.tar.gz +/bugzilla-4.0.8.tar.gz +/bugzilla-4.0.9.tar.gz +/bugzilla-4.0.10.tar.gz diff --git a/bugzilla.spec b/bugzilla.spec index fa2843e..a7027eb 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -4,7 +4,7 @@ Summary: Bug tracking system URL: http://www.bugzilla.org/ Name: bugzilla -Version: 4.0.4 +Version: 4.0.10 Group: Applications/Publishing Release: 1%{?dist} License: MPLv1.1 @@ -43,40 +43,15 @@ Summary: Bugzilla contributed scripts Group: Applications/Publishing BuildRequires: python -# RPM 4.8 style: -# Filter underspecified dependencies -# Remove all optional modules from the requires stream -%filter_from_requires /perl(sanitycheck.cgi)/d -# mod_perl modules -%filter_from_requires /perl(Apache2::Const)/d; /perl(Apache2::ServerUtil)/d -%filter_from_requires /perl(Apache2::SizeLimit)/d; /perl(ModPerl::RegistryLoader)/d -# authentification modules -%filter_from_requires /perl(Authen::Radius)/d; /perl(Net::LDAP)/d -# database modules -%filter_from_requires /perl(DBD::Oracle)/d; /perl(DBD::Pg)/d -%filter_from_requires /perl(DBI::db)/d; /perl(DBI::st)/d -# inbound email modules -%filter_from_requires /perl(Email::MIME::Attachment::Stripper)/d; /perl(Email::Reply)/d -# bug moving modules -%filter_from_requires /perl(MIME::Parser)/d; /perl(XML::Twig)/d -# xml-rpc and json-rpc modules -%filter_from_requires /perl(XMLRPC::Lite)/d; /perl(XMLRPC::Transport::HTTP)/d -%filter_from_requires /perl(HTTP::Message)/d; /perl(Test::Taint)/d -# extension modules -%filter_from_requires /perl(Image::Magick)/d -# and remove the extensions from the provides stream -%filter_from_provides /perl(Bugzilla::Extension::BmpConvert)/d; /perl(Bugzilla::Extension::Example)/d -%filter_setup +%{?perl_default_filter} -# RPM 4.9 style: -# Filter underspecified dependencies -# Remove all optional modules from the requires stream +# Remove private modules from the requires stream %global __requires_exclude %__requires_exclude|^perl\\(sanitycheck.cgi\\)$ + +# Remove all optional modules from the requires stream # mod_perl modules -%global __requires_exclude %__requires_exclude|^perl\\(Apache2::Const\\)$ -%global __requires_exclude %__requires_exclude|^perl\\(Apache2::ServerUtil\\)$ -%global __requires_exclude %__requires_exclude|^perl\\(Apache2::SizeLimit\\)$ -%global __requires_exclude %__requires_exclude|^perl\\(ModPerl::RegistryLoader\\)$ +%global __requires_exclude %__requires_exclude|^perl\\(Apache2:: +%global __requires_exclude %__requires_exclude|^perl\\(ModPerl:: # authentification modules %global __requires_exclude %__requires_exclude|^perl\\(Authen::Radius\\)$ %global __requires_exclude %__requires_exclude|^perl\\(Net::LDAP\\)$ @@ -92,15 +67,14 @@ BuildRequires: python %global __requires_exclude %__requires_exclude|^perl\\(MIME::Parser\\)$ %global __requires_exclude %__requires_exclude|^perl\\(XML::Twig\\)$ # xml-rpc and json-rpc modules -%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC::Lite\\)$ -%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC::Transport::HTTP\\)$ +%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC:: %global __requires_exclude %__requires_exclude|^perl\\(HTTP::Message\\)$ %global __requires_exclude %__requires_exclude|^perl\\(Test::Taint\\)$ # extension modules %global __requires_exclude %__requires_exclude|^perl\\(Image::Magick\\)$ + # and remove the extensions from the provides stream -%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension::BmpConvert\\)$ -%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension::Example\\)$ +%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension:: %description Bugzilla is a popular bug tracking system used by multiple open source projects @@ -122,6 +96,7 @@ Contributed scripts and functions for Bugzilla %patch0 -p1 %patch1 -p1 rm -f Bugzilla/Constants.pm.orig +rm -f Bugzilla/Install/Requirements.pm.orig # Remove bundled libs rm -rf lib/CGI* @@ -238,6 +213,26 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/yp_nomail.sh %changelog +* Wed Feb 20 2013 Emmanuel Seyman - 4.0.10-1 +- Update to 4.0.10 (CVE-2013-0785, CVE-2013-0786) + +* Wed Nov 14 2012 Emmanuel Seyman - 4.0.9-1 +- Update to 4.0.9 + +* Sun Sep 02 2012 Emmanuel Seyman - 4.0.8-1 +- Update to 4.0.8 (CVE-2012-3981) + +* Mon Jul 30 2012 Emmanuel Seyman - 4.0.7-1 +- Update to 4.0.7 (CVE-2012-1969) + +* Fri Apr 20 2012 Emmanuel Seyman - 4.0.6-1 +- Update to 4.0.6 (CVE-2012-0465, CVE-2012-0466) + +* Fri Feb 24 2012 Emmanuel Seyman - 4.0.5-1 +- Update to 4.0.5 to fix security issues (CVE-2012-0453) +- Block all ModPerl::* and Apache2::* from requires +- Remove rpm4.8 filters + * Wed Feb 1 2012 Emmanuel Seyman - 4.0.4-1 - Update to 4.0.4 to fix security flaws (#786550) - Remove JSON:RPC patch, upstreamed (bmo #706753) diff --git a/sources b/sources index afed430..427ce30 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -2feaf81535eb3058017517532f8bac3a bugzilla-4.0.4.tar.gz +977683616925972d80fea398682a4e76 bugzilla-4.0.10.tar.gz