Update to 4.0.10 (CVE-2013-0785, CVE-2013-0786)

.gitignore

@@ -8,3 +8,9 @@ bugzilla-3.6.1.tar.gz
 /bugzilla-4.0.2.tar.gz
 /bugzilla-4.0.3.tar.gz
 /bugzilla-4.0.4.tar.gz
+/bugzilla-4.0.5.tar.gz
+/bugzilla-4.0.6.tar.gz
+/bugzilla-4.0.7.tar.gz
+/bugzilla-4.0.8.tar.gz
+/bugzilla-4.0.9.tar.gz
+/bugzilla-4.0.10.tar.gz

bugzilla.spec

@@ -4,7 +4,7 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 4.0.4
+Version: 4.0.10
 Group: Applications/Publishing
 Release: 1%{?dist}
 License: MPLv1.1
@@ -43,40 +43,15 @@ Summary: Bugzilla contributed scripts
 Group: Applications/Publishing
 BuildRequires: python
 
-# RPM 4.8 style:
-# Filter underspecified dependencies        
-# Remove all optional modules from the requires stream
-%filter_from_requires /perl(sanitycheck.cgi)/d
-# mod_perl modules
-%filter_from_requires /perl(Apache2::Const)/d; /perl(Apache2::ServerUtil)/d
-%filter_from_requires /perl(Apache2::SizeLimit)/d; /perl(ModPerl::RegistryLoader)/d
-# authentification modules
-%filter_from_requires /perl(Authen::Radius)/d; /perl(Net::LDAP)/d
-# database modules
-%filter_from_requires /perl(DBD::Oracle)/d; /perl(DBD::Pg)/d
-%filter_from_requires /perl(DBI::db)/d; /perl(DBI::st)/d
-# inbound email modules
-%filter_from_requires /perl(Email::MIME::Attachment::Stripper)/d; /perl(Email::Reply)/d
-# bug moving modules
-%filter_from_requires /perl(MIME::Parser)/d; /perl(XML::Twig)/d
-# xml-rpc and json-rpc modules
-%filter_from_requires /perl(XMLRPC::Lite)/d; /perl(XMLRPC::Transport::HTTP)/d
-%filter_from_requires /perl(HTTP::Message)/d; /perl(Test::Taint)/d
-# extension modules
-%filter_from_requires /perl(Image::Magick)/d
-# and remove the extensions from the provides stream
-%filter_from_provides /perl(Bugzilla::Extension::BmpConvert)/d; /perl(Bugzilla::Extension::Example)/d
-%filter_setup
+%{?perl_default_filter}
 
-# RPM 4.9 style:
-# Filter underspecified dependencies        
-# Remove all optional modules from the requires stream
+# Remove private modules from the requires stream
 %global __requires_exclude %__requires_exclude|^perl\\(sanitycheck.cgi\\)$
+
+# Remove all optional modules from the requires stream
 # mod_perl modules
-%global __requires_exclude %__requires_exclude|^perl\\(Apache2::Const\\)$
-%global __requires_exclude %__requires_exclude|^perl\\(Apache2::ServerUtil\\)$
-%global __requires_exclude %__requires_exclude|^perl\\(Apache2::SizeLimit\\)$
-%global __requires_exclude %__requires_exclude|^perl\\(ModPerl::RegistryLoader\\)$
+%global __requires_exclude %__requires_exclude|^perl\\(Apache2::
+%global __requires_exclude %__requires_exclude|^perl\\(ModPerl::
 # authentification modules
 %global __requires_exclude %__requires_exclude|^perl\\(Authen::Radius\\)$
 %global __requires_exclude %__requires_exclude|^perl\\(Net::LDAP\\)$
@@ -92,15 +67,14 @@ BuildRequires: python
 %global __requires_exclude %__requires_exclude|^perl\\(MIME::Parser\\)$
 %global __requires_exclude %__requires_exclude|^perl\\(XML::Twig\\)$
 # xml-rpc and json-rpc modules
-%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC::Lite\\)$
-%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC::Transport::HTTP\\)$
+%global __requires_exclude %__requires_exclude|^perl\\(XMLRPC::
 %global __requires_exclude %__requires_exclude|^perl\\(HTTP::Message\\)$
 %global __requires_exclude %__requires_exclude|^perl\\(Test::Taint\\)$
 # extension modules
 %global __requires_exclude %__requires_exclude|^perl\\(Image::Magick\\)$
+
 # and remove the extensions from the provides stream
-%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension::BmpConvert\\)$
-%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension::Example\\)$
+%global __requires_exclude %__requires_exclude|^perl\\(Bugzilla::Extension::
 
 %description
 Bugzilla is a popular bug tracking system used by multiple open source projects
@@ -122,6 +96,7 @@ Contributed scripts and functions for Bugzilla
 %patch0 -p1
 %patch1 -p1
 rm -f Bugzilla/Constants.pm.orig
+rm -f Bugzilla/Install/Requirements.pm.orig
 # Remove bundled libs
 rm -rf lib/CGI*
 
@@ -238,6 +213,26 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/contrib/yp_nomail.sh
 
 %changelog
+* Wed Feb 20 2013 Emmanuel Seyman <emmanuel@seyman.fr> - 4.0.10-1
+- Update to 4.0.10 (CVE-2013-0785, CVE-2013-0786)
+
+* Wed Nov 14 2012 Emmanuel Seyman <emmanuel@seyman.fr> - 4.0.9-1
+- Update to 4.0.9
+
+* Sun Sep 02 2012 Emmanuel Seyman <emmanuel@seyman.fr> - 4.0.8-1
+- Update to 4.0.8 (CVE-2012-3981)
+
+* Mon Jul 30 2012 Emmanuel Seyman <emmanuel.seyman@club-internet.fr> - 4.0.7-1
+- Update to 4.0.7 (CVE-2012-1969)
+
+* Fri Apr 20 2012 Emmanuel Seyman <emmanuel.seyman@club-internet.fr> - 4.0.6-1
+- Update to 4.0.6 (CVE-2012-0465, CVE-2012-0466)
+
+* Fri Feb 24 2012 Emmanuel Seyman <emmanuel.seyman@club-internet.fr> - 4.0.5-1
+- Update to 4.0.5 to fix security issues (CVE-2012-0453)
+- Block all ModPerl::* and Apache2::* from requires
+- Remove rpm4.8 filters
+
 * Wed Feb  1 2012 Emmanuel Seyman <emmanuel.seyman@club-internet.fr> - 4.0.4-1
 - Update to 4.0.4 to fix security flaws (#786550)
 - Remove JSON:RPC patch, upstreamed (bmo #706753)

sources

@@ -1 +1 @@
-2feaf81535eb3058017517532f8bac3a  bugzilla-4.0.4.tar.gz
+977683616925972d80fea398682a4e76  bugzilla-4.0.10.tar.gz