perl/request-tracker
SHA256
8
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- update to 4.2.12:

Browse Source 
+ This release is a security release which addresses the following
    vulnerabilities:
  ++ RT 4.0.0 and above are vulnerable to a cross-site scripting 
     (XSS) attack via the user and group rights management pages.  
     This vulnerability is assigned CVE-2015-5475.  
     It was discovered and reported by Marcin Kopeć at Data Reliance
     Shared Service Center.
  ++ RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS) 
     attack via the cryptography interface. This vulnerability could
     allow an attacker with a carefully-crafted key to inject JavaScript
     into RT's user interface. 
     Installations which use neither GnuPG nor S/MIME are unaffected.
  From 4.2.11:
  + improves indexing time for full-text search
  + improving support for Apache 2.4 and MySQL 5.5
  + Interactive command-line tools (including upgrade tools) will 
    now also default to displaying warnings to STDERR, to aid in
    awareness of potential errors.
- refreshed request-tracker-use_local_lib.patch

OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/request-tracker?expand=0&rev=46
This commit is contained in:
Lars Vogdt
2015-08-17 13:34:13 +00:00
committed by Git OBS Bridge
parent 0bac3653fd
commit a84fd24248
5 changed files with 219 additions and 126 deletions
Download Patch File Download Diff File Expand all files Collapse all files
request-tracker.changes
+24
View File
@@ -1,3 +1,27 @@
-------------------------------------------------------------------
Mon Aug 17 09:25:13 UTC 2015 - lars@linux-schulserver.de
- update to 4.2.12:
+ This release is a security release which addresses the following
vulnerabilities:
++ RT 4.0.0 and above are vulnerable to a cross-site scripting
(XSS) attack via the user and group rights management pages.
This vulnerability is assigned CVE-2015-5475.
It was discovered and reported by Marcin Kopeć at Data Reliance
Shared Service Center.
++ RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS)
attack via the cryptography interface. This vulnerability could
allow an attacker with a carefully-crafted key to inject JavaScript
into RT's user interface.
Installations which use neither GnuPG nor S/MIME are unaffected.
From 4.2.11:
+ improves indexing time for full-text search
+ improving support for Apache 2.4 and MySQL 5.5
+ Interactive command-line tools (including upgrade tools) will
now also default to displaying warnings to STDERR, to aid in
awareness of potential errors.
- refreshed request-tracker-use_local_lib.patch
-------------------------------------------------------------------
Mon Mar 30 15:03:07 UTC 2015 - darin@darins.net
request-tracker.spec
+1 -1
View File
@@ -21,7 +21,7 @@ Name: request-tracker
Summary: RT: Request Tracker
License: GPL-2.0+
Group: Productivity/Networking/Web/Utilities
Version: 4.2.10
Version: 4.2.12
Release: 0
Url: http://bestpractical.com/rt/
Source0: rt-%{version}.tar.gz
request-tracker-use_local_lib.patch
+191 -122
View File
@@ -1,6 +1,7 @@
diff -ru rt-4.2.5/bin/rt-crontool.in rt-4.2.5.mod/bin/rt-crontool.in
--- rt-4.2.5/bin/rt-crontool.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/bin/rt-crontool.in 2014-07-10 09:04:18.268077714 -0400
Index: rt-4.2.12/bin/rt-crontool.in
===================================================================
--- rt-4.2.12.orig/bin/rt-crontool.in
+++ rt-4.2.12/bin/rt-crontool.in
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
@@ -9,9 +10,23 @@ diff -ru rt-4.2.5/bin/rt-crontool.in rt-4.2.5.mod/bin/rt-crontool.in
use Carp;
# fix lib paths, some may be relative
diff -ru rt-4.2.5/bin/rt.in rt-4.2.5.mod/bin/rt.in
--- rt-4.2.5/bin/rt.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/bin/rt.in 2014-07-10 09:04:18.269077718 -0400
Index: rt-4.2.12/bin/rt-mailgate.in
===================================================================
--- rt-4.2.12.orig/bin/rt-mailgate.in
+++ rt-4.2.12/bin/rt-mailgate.in
@@ -54,7 +54,7 @@ rt-mailgate - Mail interface to RT.
use strict;
use warnings;
-
+use lib '__vendorperl__';
use Getopt::Long;
my $opts = { };
Index: rt-4.2.12/bin/rt.in
===================================================================
--- rt-4.2.12.orig/bin/rt.in
+++ rt-4.2.12/bin/rt.in
@@ -51,6 +51,7 @@
use strict;
@@ -20,179 +35,233 @@ diff -ru rt-4.2.5/bin/rt.in rt-4.2.5.mod/bin/rt.in
if ( $ARGV[0] && $ARGV[0] =~ /^(?:--help|-h)$/ ) {
require Pod::Usage;
diff -ru rt-4.2.5/bin/rt-mailgate.in rt-4.2.5.mod/bin/rt-mailgate.in
--- rt-4.2.5/bin/rt-mailgate.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/bin/rt-mailgate.in 2014-07-10 09:04:18.270077725 -0400
@@ -54,6 +54,7 @@
use strict;
use warnings;
+use lib '__vendorperl__';
use Getopt::Long;
diff -ru rt-4.2.5/sbin/rt-attributes-viewer.in rt-4.2.5.mod/sbin/rt-attributes-viewer.in
--- rt-4.2.5/sbin/rt-attributes-viewer.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-attributes-viewer.in 2014-07-10 09:04:18.270077725 -0400
@@ -48,6 +48,7 @@
Index: rt-4.2.12/sbin/rt-attributes-viewer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-attributes-viewer.in
+++ rt-4.2.12/sbin/rt-attributes-viewer.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-clean-sessions.in rt-4.2.5.mod/sbin/rt-clean-sessions.in
--- rt-4.2.5/sbin/rt-clean-sessions.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-clean-sessions.in 2014-07-10 09:04:18.270077725 -0400
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-dump-metadata.in rt-4.2.5.mod/sbin/rt-dump-metadata.in
--- rt-4.2.5/sbin/rt-dump-metadata.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-dump-metadata.in 2014-07-10 09:04:18.271077733 -0400
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
# As we specify that XML is UTF-8 and we output it to STDOUT, we must be sure
# it is UTF-8 so further XMLin will not break
diff -ru rt-4.2.5/sbin/rt-email-dashboards.in rt-4.2.5.mod/sbin/rt-email-dashboards.in
--- rt-4.2.5/sbin/rt-email-dashboards.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-email-dashboards.in 2014-07-10 09:04:18.271077733 -0400
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-email-digest.in rt-4.2.5.mod/sbin/rt-email-digest.in
--- rt-4.2.5/sbin/rt-email-digest.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-email-digest.in 2014-07-10 09:04:18.272077740 -0400
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use warnings;
use strict;
+use lib '__vendorperl__';
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
diff -ru rt-4.2.5/sbin/rt-email-group-admin.in rt-4.2.5.mod/sbin/rt-email-group-admin.in
--- rt-4.2.5/sbin/rt-email-group-admin.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-email-group-admin.in 2014-07-10 09:04:18.272077740 -0400
@@ -85,6 +85,7 @@
use warnings;
Index: rt-4.2.12/sbin/rt-clean-sessions.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-clean-sessions.in
+++ rt-4.2.12/sbin/rt-clean-sessions.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-fulltext-indexer.in rt-4.2.5.mod/sbin/rt-fulltext-indexer.in
--- rt-4.2.5/sbin/rt-fulltext-indexer.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-fulltext-indexer.in 2014-07-10 09:04:18.272077740 -0400
require File::Spec;
Index: rt-4.2.12/sbin/rt-dump-metadata.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-dump-metadata.in
+++ rt-4.2.12/sbin/rt-dump-metadata.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# As we specify that XML is UTF-8 and we output it to STDOUT, we must be sure
# it is UTF-8 so further XMLin will not break
binmode( STDOUT, ":utf8" );
Index: rt-4.2.12/sbin/rt-email-dashboards.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-email-dashboards.in
+++ rt-4.2.12/sbin/rt-email-dashboards.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
Index: rt-4.2.12/sbin/rt-email-digest.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-email-digest.in
+++ rt-4.2.12/sbin/rt-email-digest.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use warnings;
use strict;
-
+use lib '__vendorperl__';
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
require Cwd;
Index: rt-4.2.12/sbin/rt-email-group-admin.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-email-group-admin.in
+++ rt-4.2.12/sbin/rt-email-group-admin.in
@@ -86,7 +86,7 @@ Your development team will be notified o
use warnings;
use strict;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
Index: rt-4.2.12/sbin/rt-fulltext-indexer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-fulltext-indexer.in
+++ rt-4.2.12/sbin/rt-fulltext-indexer.in
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
no warnings 'once';
use 5.010;
# fix lib paths, some may be relative
diff -ru rt-4.2.5/sbin/rt-server.in rt-4.2.5.mod/sbin/rt-server.in
--- rt-4.2.5/sbin/rt-server.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-server.in 2014-07-10 09:04:18.273077747 -0400
@@ -48,6 +48,7 @@
Index: rt-4.2.12/sbin/rt-importer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-importer.in
+++ rt-4.2.12/sbin/rt-importer.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN {
require File::Spec;
Index: rt-4.2.12/sbin/rt-preferences-viewer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-preferences-viewer.in
+++ rt-4.2.12/sbin/rt-preferences-viewer.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
Index: rt-4.2.12/sbin/rt-serializer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-serializer.in
+++ rt-4.2.12/sbin/rt-serializer.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN {
require File::Spec;
Index: rt-4.2.12/sbin/rt-server.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-server.in
+++ rt-4.2.12/sbin/rt-server.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use warnings;
use strict;
-
+use lib '__vendorperl__';
BEGIN {
die <<EOT if ${^TAINT};
diff -ru rt-4.2.5/sbin/rt-session-viewer.in rt-4.2.5.mod/sbin/rt-session-viewer.in
--- rt-4.2.5/sbin/rt-session-viewer.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-session-viewer.in 2014-07-10 09:04:18.274077754 -0400
@@ -48,6 +48,7 @@
RT does not run under Perl's "taint mode". Remove -T from the command
Index: rt-4.2.12/sbin/rt-session-viewer.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-session-viewer.in
+++ rt-4.2.12/sbin/rt-session-viewer.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-setup-database.in rt-4.2.5.mod/sbin/rt-setup-database.in
--- rt-4.2.5/sbin/rt-setup-database.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-setup-database.in 2014-07-10 09:04:18.274077754 -0400
require File::Spec;
Index: rt-4.2.12/sbin/rt-setup-database.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-setup-database.in
+++ rt-4.2.12/sbin/rt-setup-database.in
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
use 5.010;
use vars qw($Nobody $SystemUser $item);
diff -ru rt-4.2.5/sbin/rt-setup-fulltext-index.in rt-4.2.5.mod/sbin/rt-setup-fulltext-index.in
--- rt-4.2.5/sbin/rt-setup-fulltext-index.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-setup-fulltext-index.in 2014-07-10 09:04:18.275077761 -0400
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
Index: rt-4.2.12/sbin/rt-setup-fulltext-index.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-setup-fulltext-index.in
+++ rt-4.2.12/sbin/rt-setup-fulltext-index.in
@@ -49,7 +49,7 @@
use strict;
use warnings;
+use lib '__vendorperl__';
no warnings 'once';
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
diff -ru rt-4.2.5/sbin/rt-shredder.in rt-4.2.5.mod/sbin/rt-shredder.in
--- rt-4.2.5/sbin/rt-shredder.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-shredder.in 2014-07-10 09:04:18.275077761 -0400
@@ -109,6 +109,7 @@
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
Index: rt-4.2.12/sbin/rt-shredder.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-shredder.in
+++ rt-4.2.12/sbin/rt-shredder.in
@@ -110,7 +110,7 @@ L<RT::Shredder>
use strict;
use warnings FATAL => 'all';
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
diff -ru rt-4.2.5/sbin/rt-test-dependencies rt-4.2.5.mod/sbin/rt-test-dependencies
--- rt-4.2.5/sbin/rt-test-dependencies 2014-06-12 13:17:53.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-test-dependencies 2014-07-10 09:09:12.933132200 -0400
@@ -54,6 +54,7 @@
require File::Spec;
Index: rt-4.2.12/sbin/rt-test-dependencies.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-test-dependencies.in
+++ rt-4.2.12/sbin/rt-test-dependencies.in
@@ -53,6 +53,7 @@
use strict;
use warnings;
no warnings qw(numeric redefine);
+use lib '__vendorperl__';
no warnings qw(numeric redefine);
use Getopt::Long;
use Cwd qw(abs_path);
my %args;
diff -ru rt-4.2.5/sbin/rt-test-dependencies.in rt-4.2.5.mod/sbin/rt-test-dependencies.in
--- rt-4.2.5/sbin/rt-test-dependencies.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-test-dependencies.in 2014-07-10 09:09:20.509184683 -0400
@@ -54,6 +54,7 @@
use strict;
use warnings;
no warnings qw(numeric redefine);
+use lib '__vendorperl__';
use Getopt::Long;
use Cwd qw(abs_path);
my %args;
diff -ru rt-4.2.5/sbin/rt-validator.in rt-4.2.5.mod/sbin/rt-validator.in
--- rt-4.2.5/sbin/rt-validator.in 2014-06-05 21:50:35.000000000 -0400
+++ rt-4.2.5.mod/sbin/rt-validator.in 2014-07-10 09:04:18.278077782 -0400
Index: rt-4.2.12/sbin/rt-validate-aliases.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-validate-aliases.in
+++ rt-4.2.12/sbin/rt-validate-aliases.in
@@ -48,6 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
+use lib '__vendorperl__';
use Text::ParseWords qw//;
use Getopt::Long;
Index: rt-4.2.12/sbin/rt-validator.in
===================================================================
--- rt-4.2.12.orig/sbin/rt-validator.in
+++ rt-4.2.12/sbin/rt-validator.in
@@ -48,7 +48,7 @@
# END BPS TAGGED BLOCK }}}
use strict;
use warnings;
-
+use lib '__vendorperl__';
# fix lib paths, some may be relative
BEGIN { # BEGIN RT CMD BOILERPLATE
require File::Spec;
rt-4.2.10.tar.gz
-3
View File
@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:86258ac7771465be0beae1d8d14d05610c5a938cede418143b8fd7203ccd3eb6
size 7628431
rt-4.2.12.tar.gz
+3
View File
@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e21220c609706dc9977a13309d78a4d9171455ae823cf549311342cedd837264
size 7537620