Update to 4.4.10

fixed security flaws) (CVE-2014-1571, CVE-2014-8630)
- Remove bundled binary files (#1000245)
- Add webdot directory perms to apache configuration

.gitignore

@@ -19,3 +19,7 @@ bugzilla-3.6.1.tar.gz
 /bugzilla-4.2.7.tar.gz
 /bugzilla-4.2.9.tar.gz
 /bugzilla-4.4.4.tar.gz
+/bugzilla-4.4.5.tar.gz
+/bugzilla-4.4.6.tar.gz
+/bugzilla-4.4.8.tar.gz
+/bugzilla-4.4.10.tar.gz

bugzilla-httpd-conf

@@ -17,3 +17,7 @@ Alias /bugzilla /usr/share/bugzilla
   AddType application/vnd.mozilla.xul+xml .xul
   AddType application/rdf+xml .rdf
 </Directory>
+
+<Directory /var/lib/bugzilla/data/webdot>
+  Require all granted
+</Directory>

bugzilla.spec

@@ -4,7 +4,7 @@
 Summary: Bug tracking system
 URL: http://www.bugzilla.org/
 Name: bugzilla
-Version: 4.4.4
+Version: 4.4.10
 Group: Applications/Publishing
 Release: 1%{?dist}
 License: MPLv1.1
@@ -108,6 +108,11 @@ rm -f Bugzilla/Constants.pm.orig
 rm -f Bugzilla/Install/Requirements.pm.orig
 # Remove bundled libs
 rm -rf lib/CGI*
+# Remove bundled binary files
+rm -f js/yui/*/*.swf
+# these files are only used for testing Bugzilla code
+# see https://bugzilla.mozilla.org/show_bug.cgi?id=995209
+rm Build.PL MANIFEST.SKIP
 
 # Deal with changing /usr/local paths here instead of via patches
 %{__perl} -pi -e 's|/usr/local/bin/python\b|%{__python}|' contrib/*.py
@@ -142,6 +147,7 @@ mkdir -p ${RPM_BUILD_ROOT}/%{bzdatadir}
 mkdir -p ${RPM_BUILD_ROOT}/%{_sysconfdir}/bugzilla
 install -m 0644 -D -p %{SOURCE1}  ${RPM_BUILD_ROOT}%{_sysconfdir}/httpd/conf.d/bugzilla.conf
 install -m 0755 -D -p %{SOURCE3}  ${RPM_BUILD_ROOT}%{bzinstallprefix}/bugzilla/cron.daily
+rm ${RPM_BUILD_ROOT}%{bzinstallprefix}/bugzilla/LICENSE
 
 %post
 (pushd %{bzinstallprefix}/bugzilla > /dev/null
@@ -154,6 +160,7 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/*.pl
 %{bzinstallprefix}/bugzilla/Bugzilla.pm
 %{bzinstallprefix}/bugzilla/robots.txt
+%{bzinstallprefix}/bugzilla/taskgraph.json
 %{bzinstallprefix}/bugzilla/Bugzilla
 %{bzinstallprefix}/bugzilla/extensions
 %{bzinstallprefix}/bugzilla/images
@@ -170,6 +177,7 @@ popd > /dev/null)
 %defattr(-,root,root,-)
 %doc README
 %doc README.fedora
+%license LICENSE
 %dir %{bzdatadir}
 %defattr(0750,root,apache,-)
 %dir %{_sysconfdir}/bugzilla
@@ -221,6 +229,22 @@ popd > /dev/null)
 %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm
 
 %changelog
+* Sun Sep 13 2015 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.10-1
+- Update to 4.4.10
+- Use %%license to flag the LICENSE file
+
+* Sat Jan 31 2015 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.8-1
+- Update to 4.4.8 (fixes regressions in 4.4.7 which itself
+  fixed security flaws) (CVE-2014-1571, CVE-2014-8630)
+- Remove bundled binary files (#1000245)
+- Add webdot directory perms to apache configuration
+
+* Wed Oct 08 2014 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.6-1
+- Update to 4.4.6
+
+* Fri Jul 25 2014 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.5-1
+- Update to 4.4.5 which fixes a security bug (CVE-2014-1546)
+
 * Mon Jul 07 2014 Emmanuel Seyman <emmanuel@seyman.fr> - 4.4.4-1
 - Update to 4.4.4
 

sources

@@ -1 +1 @@
-234ee253eed5a38707c4d53f1124a85a  bugzilla-4.4.4.tar.gz
+c0490b7461a0d6520d118c720e1c3f37  bugzilla-4.4.10.tar.gz