Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2012-05-28 12:51:01 by Matthias Scheler | Files touched by this commit (11) | |
Log message:
Pullup ticket #3808 - requested by spz
devel/rt3: security update
Revisions pulled up:
- devel/rt3/Makefile 1.49
- devel/rt3/Makefile.install 1.18
- devel/rt3/PLIST 1.21
- devel/rt3/distinfo 1.22
- devel/rt3/patches/patch-lib_RT_Action_CreateTickets.pm deleted
- devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm deleted
- devel/rt3/patches/patch-lib_RT_Transaction__Overlay.pm deleted
- devel/rt3/patches/patch-share_html_Admin_CustomFields_Modify.html deleted
- devel/rt3/patches/patch-share_html_Search_Bulk.html deleted
- devel/rt3/patches/patch-share_html_Search_Elements_SelectChartType deleted
- devel/rt3/patches/patch-share_html_Ticket_Elements_PreviewScrips deleted
---
Module Name: pkgsrc
Committed By: spz
Date: Fri May 25 19:55:44 UTC 2012
Modified Files:
pkgsrc/devel/rt3: Makefile Makefile.install PLIST distinfo
Removed Files:
pkgsrc/devel/rt3/patches: patch-lib_RT_Action_CreateTickets.pm
patch-lib_RT_Ticket__Overlay.pm
patch-lib_RT_Transaction__Overlay.pm
patch-share_html_Admin_CustomFields_Modify.html
patch-share_html_Search_Bulk.html
patch-share_html_Search_Elements_SelectChartType
patch-share_html_Ticket_Elements_PreviewScrips
Log message:
Update RT to version 3.8.12:
Changes from 3.8.11 to 3.8.12:
This release, in addition to being a bugfix release, also resolves a
number of security vulnerabilities. It resolves CVE-2011-2082,
CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
CVE-2011-4459, and CVE-2011-4460.
* Upgrade prototype.js to version 1.7, for compatibility with google
charts.
* Remove ie7.js, which is no longer used.
* Ensure that TransactionBatch scripts are only run once.
Changes from 3.8.10 to 3.8.11:
This release contains a number of bugfixes and minor security updates
since the 3.8.10 release, most notably:
* Adjust FCGI dependency to one which resolves FCGI's CVE-2011-2766
* New WebHttpOnlyCookies option, enabled by default, which hides RT's
cookie from direct Javascript access.
* Compatibility with perl 5.12 and 5.14, by removing deprecated "for
qw(...)" and "defined %hash" syntax.
* MySQL 5.5 compatibility, by specifying ENGINE=InnoDB rather than
TYPE=InnoDB
* Ensure that RT::Interface::Web's _Overlay, _Local, and _Vendor files
are loaded correctly.
* Fix session cleaner for on-disk sessions, broken since 3.8.0.
* Ensure that only one "Based on" attribute is stored for each \
custom
field.
* Fix the loading of Shredder plugins, broken in 3.8.10.
|
Next | Query returned 1 messages, browsing 1 to 10 | previous