this has a security update in it (javascript injection if you allow
users access to a custom field). anyone using this want to give it
a spin?
this is still in the 3.6 release series (there is also a 3.8) and
looks like a fairly straightforward update (no notes in UPGRADING).
needs the just-committed p5-Text-Quoted update.
Index: Makefile
===================================================================
RCS file: /cvs/ports/www/rt/Makefile,v
retrieving revision 1.4
diff -u -p -r1.4 Makefile
--- Makefile 15 Sep 2007 20:38:26 -0000 1.4
+++ Makefile 23 Oct 2009 16:54:32 -0000
@@ -2,8 +2,7 @@
COMMENT= industrial-grade ticketing system
-DISTNAME= rt-3.6.3
-PKGNAME= ${DISTNAME}p1
+DISTNAME= rt-3.6.9
CATEGORIES= www
HOMEPAGE= http://www.bestpractical.com/rt/
@@ -14,7 +13,8 @@ MASTER_SITES= http://www.fsck.com/pub/r
ftp://ftp.eu.uu.net/pub/unix/ticketing/rt/release/
RUN_DEPENDS= ::converters/p5-Calendar-Simple \
- ::databases/p5-DBIx-SearchBuilder \
+
:p5-DBIx-SearchBuilder->=0.53:databases/p5-DBIx-SearchBuilder \
+ :p5-Devel-StackTrace->=1.19:devel/p5-Devel-StackTrace \
::devel/p5-Locale-Maketext-Fuzzy \
::devel/p5-Locale-Maketext-Lexicon \
::devel/p5-Log-Dispatch \
@@ -31,7 +31,7 @@ RUN_DEPENDS= ::converters/p5-Calendar-S
::graphics/p5-GD-Graph \
::mail/p5-MIME-tools \
::textproc/p5-Regexp-Common \
- ::textproc/p5-Text-Quoted \
+ :p5-Text-Quoted->=2.02:textproc/p5-Text-Quoted \
::textproc/p5-Text-Template \
::textproc/p5-Text-WikiFormat \
::textproc/p5-Text-Wrapper \
@@ -40,6 +40,7 @@ RUN_DEPENDS= ::converters/p5-Calendar-S
::www/p5-Apache-DBI \
::www/p5-Apache-Session \
::www/p5-Apache-Test \
+ :p5-CSS-Squish->=0.06:www/p5-CSS-Squish \
::www/p5-HTML-Format \
::www/p5-HTML-Scrubber \
::www/p5-HTTP-Server-Simple-Mason
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/rt/distinfo,v
retrieving revision 1.2
diff -u -p -r1.2 distinfo
--- distinfo 5 Apr 2007 17:26:25 -0000 1.2
+++ distinfo 23 Oct 2009 16:54:32 -0000
@@ -1,5 +1,5 @@
-MD5 (rt-3.6.3.tar.gz) = 1rL6kwRB8WtlMKoAZl64xw==
-RMD160 (rt-3.6.3.tar.gz) = PqtFTTdDNOXfSTnCxK8xZiixKWU=
-SHA1 (rt-3.6.3.tar.gz) = eT3kZVwPp7v9Oqbu7+Wh0UPQdnc=
-SHA256 (rt-3.6.3.tar.gz) = /Cnx/ZWzzUgT4/ve8YgujNbEUWxms+eCNycr3SAKGmc=
-SIZE (rt-3.6.3.tar.gz) = 1602818
+MD5 (rt-3.6.9.tar.gz) = BCZUjvxVKB9hDWKM9Whw8A==
+RMD160 (rt-3.6.9.tar.gz) = HF6OMv8039RZL3U/nom8BdeEL/w=
+SHA1 (rt-3.6.9.tar.gz) = 6qo9bZuelVunxNwMm07KPQKtb+8=
+SHA256 (rt-3.6.9.tar.gz) = rFgLuzkVENnp3EWSgLnn+uXqoRWh7DmO/xsJcNxYUgU=
+SIZE (rt-3.6.9.tar.gz) = 1603425
Index: patches/patch-Makefile_in
===================================================================
RCS file: /cvs/ports/www/rt/patches/patch-Makefile_in,v
retrieving revision 1.1.1.1
diff -u -p -r1.1.1.1 patch-Makefile_in
--- patches/patch-Makefile_in 19 Mar 2007 23:42:21 -0000 1.1.1.1
+++ patches/patch-Makefile_in 23 Oct 2009 16:54:32 -0000
@@ -1,7 +1,7 @@
$OpenBSD: patch-Makefile_in,v 1.1.1.1 2007/03/19 23:42:21 msf Exp $
---- Makefile.in.orig Tue Jun 20 07:44:04 2006
-+++ Makefile.in Mon Dec 11 00:23:31 2006
-@@ -51,7 +51,12 @@
+--- Makefile.in.orig Mon Sep 14 17:02:05 2009
++++ Makefile.in Fri Oct 23 17:32:23 2009
+@@ -53,7 +53,12 @@
PERL = @PERL@
@@ -15,7 +15,7 @@ $OpenBSD: patch-Makefile_in,v 1.1.1.1 20
CONFIG_FILE = $(CONFIG_FILE_PATH)/RT_Config.pm
SITE_CONFIG_FILE = $(CONFIG_FILE_PATH)/RT_SiteConfig.pm
-@@ -275,13 +280,13 @@ fixperms:
+@@ -277,13 +282,13 @@ fixperms:
chmod $(RT_READABLE_DIR_MODE) $(DESTDIR)/$(RT_BIN_PATH)
chmod $(RT_READABLE_DIR_MODE) $(DESTDIR)/$(RT_BIN_PATH)
@@ -33,7 +33,7 @@ $OpenBSD: patch-Makefile_in,v 1.1.1.1 20
chmod 0550 $(DESTDIR)/$(CONFIG_FILE)
chmod 0550 $(DESTDIR)/$(SITE_CONFIG_FILE)
-@@ -332,6 +337,7 @@ config-install:
+@@ -334,6 +339,7 @@ config-install:
mkdir -p $(DESTDIR)/$(CONFIG_FILE_PATH)
-cp etc/RT_Config.pm $(DESTDIR)/$(CONFIG_FILE)
[ -f $(DESTDIR)/$(SITE_CONFIG_FILE) ] || cp etc/RT_SiteConfig.pm
$(DESTDIR)/$(SITE_CONFIG_FILE)
@@ -41,7 +41,7 @@ $OpenBSD: patch-Makefile_in,v 1.1.1.1 20
chgrp $(RTGROUP) $(DESTDIR)/$(CONFIG_FILE)
chown $(BIN_OWNER) $(DESTDIR)/$(CONFIG_FILE)
-@@ -383,7 +389,8 @@ insert-approval-data:
+@@ -385,7 +391,8 @@ insert-approval-data:
# {{{ libs-install
libs-install:
[ -d $(DESTDIR)/$(RT_LIB_PATH) ] || mkdir -p $(DESTDIR)/$(RT_LIB_PATH)
@@ -51,7 +51,7 @@ $OpenBSD: patch-Makefile_in,v 1.1.1.1 20
# }}}
# {{{ html-install
-@@ -397,18 +404,23 @@ doc-install:
+@@ -399,18 +406,23 @@ doc-install:
# RT 3.0.0 - RT 3.0.2 would accidentally create a file instead of a dir
-[ -f $(DESTDIR)/$(RT_DOC_PATH) ] && rm $(DESTDIR)/$(RT_DOC_PATH)
[ -d $(DESTDIR)/$(RT_DOC_PATH) ] || mkdir -p $(DESTDIR)/$(RT_DOC_PATH)
@@ -78,7 +78,7 @@ $OpenBSD: patch-Makefile_in,v 1.1.1.1 20
# }}}
# {{{ sbin-install
-@@ -416,6 +428,10 @@ etc-install:
+@@ -418,6 +430,10 @@ etc-install:
sbin-install:
mkdir -p $(DESTDIR)/$(RT_SBIN_PATH)
chmod +x \
Index: pkg/PLIST
===================================================================
RCS file: /cvs/ports/www/rt/pkg/PLIST,v
retrieving revision 1.2
diff -u -p -r1.2 PLIST
--- pkg/PLIST 19 Jun 2007 21:45:04 -0000 1.2
+++ pkg/PLIST 23 Oct 2009 16:54:32 -0000
@@ -91,7 +91,10 @@ libdata/perl5/site_perl/RT/I18N/nl.po
libdata/perl5/site_perl/RT/I18N/no.po
libdata/perl5/site_perl/RT/I18N/pl.po
libdata/perl5/site_perl/RT/I18N/pt_br.po
+libdata/perl5/site_perl/RT/I18N/pt_pt.po
libdata/perl5/site_perl/RT/I18N/ru.po
+libdata/perl5/site_perl/RT/I18N/sv.po
+libdata/perl5/site_perl/RT/I18N/tr.po
libdata/perl5/site_perl/RT/I18N/zh_cn.po
libdata/perl5/site_perl/RT/I18N/zh_tw.po
libdata/perl5/site_perl/RT/Interface/
@@ -432,6 +435,7 @@ share/rt3/html/Elements/EditCustomFieldS
share/rt3/html/Elements/EditCustomFieldText
share/rt3/html/Elements/EditCustomFieldWikitext
share/rt3/html/Elements/EditLinks
+share/rt3/html/Elements/EmailInput
share/rt3/html/Elements/Error
share/rt3/html/Elements/Footer
share/rt3/html/Elements/GotoTicket
@@ -500,6 +504,7 @@ share/rt3/html/Elements/TitleBoxStart
share/rt3/html/Elements/ValidateCustomFields
share/rt3/html/Helpers/
share/rt3/html/Helpers/CalPopup.html
+share/rt3/html/Helpers/EmailAutocomplete
share/rt3/html/NoAuth/
share/rt3/html/NoAuth/Logout.html
share/rt3/html/NoAuth/Reminder.html
@@ -533,6 +538,7 @@ share/rt3/html/NoAuth/css/3.5-default/ti
share/rt3/html/NoAuth/css/3.5-default/titlebox.css
share/rt3/html/NoAuth/css/3.5-default/transactions.css
share/rt3/html/NoAuth/css/autohandler
+share/rt3/html/NoAuth/css/dhandler
share/rt3/html/NoAuth/css/print.css
share/rt3/html/NoAuth/images/
share/rt3/html/NoAuth/images/autohandler
@@ -554,6 +560,7 @@ share/rt3/html/NoAuth/images/css/ctr-tra
share/rt3/html/NoAuth/images/css/ctr.gif
share/rt3/html/NoAuth/images/css/dark-arrow-up.png
share/rt3/html/NoAuth/images/css/dark-arrow.png
+share/rt3/html/NoAuth/images/css/fieldbg-autocomplete.gif
share/rt3/html/NoAuth/images/css/light-arrow-up.png
share/rt3/html/NoAuth/images/css/light-arrow.png
share/rt3/html/NoAuth/images/css/rolldown-arrow.gif
@@ -567,6 +574,11 @@ share/rt3/html/NoAuth/js/cascaded.js
share/rt3/html/NoAuth/js/class.js
share/rt3/html/NoAuth/js/combobox.js
share/rt3/html/NoAuth/js/list.js
+share/rt3/html/NoAuth/js/scriptaculous/
+share/rt3/html/NoAuth/js/scriptaculous/controls.js
+share/rt3/html/NoAuth/js/scriptaculous/effects.js
+share/rt3/html/NoAuth/js/scriptaculous/prototype.js
+share/rt3/html/NoAuth/js/scriptaculous/scriptaculous.js
share/rt3/html/NoAuth/js/titlebox-state.js
share/rt3/html/NoAuth/js/util.js
share/rt3/html/Prefs/
@@ -590,6 +602,8 @@ share/rt3/html/REST/1.0/Forms/ticket/his
share/rt3/html/REST/1.0/Forms/ticket/links
share/rt3/html/REST/1.0/Forms/ticket/merge
share/rt3/html/REST/1.0/Forms/ticket/take
+share/rt3/html/REST/1.0/Forms/transaction/
+share/rt3/html/REST/1.0/Forms/transaction/default
share/rt3/html/REST/1.0/Forms/user/
share/rt3/html/REST/1.0/Forms/user/default
share/rt3/html/REST/1.0/Forms/user/ns
@@ -681,6 +695,7 @@ share/rt3/html/Ticket/Elements/ShowMembe
share/rt3/html/Ticket/Elements/ShowMessageHeaders
share/rt3/html/Ticket/Elements/ShowMessageStanza
share/rt3/html/Ticket/Elements/ShowPeople
+share/rt3/html/Ticket/Elements/ShowQueue
share/rt3/html/Ticket/Elements/ShowRequestor
share/rt3/html/Ticket/Elements/ShowSummary
share/rt3/html/Ticket/Elements/ShowTime
