Version bump, addresses cross-site request forgery security issue (bug #154574).

Package-Manager: portage-2.1.1-r1

5 files changed, 227 insertions, 5 deletions

diff --git a/www-apps/trac/ChangeLog b/www-apps/trac/ChangeLog
index 0324010005a1..79b6276c0a42 100644
--- a/www-apps/trac/ChangeLog
+++ b/www-apps/trac/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for www-apps/trac
 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.41 2006/10/03 11:59:32 dju Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.42 2006/11/09 23:09:39 dju Exp $
+
+*trac-0.10.1 (09 Nov 2006)
+
+  09 Nov 2006; Julien Allanos <dju@gentoo.org> +files/postinst-en.txt,
+  +trac-0.10.1.ebuild:
+  Version bump, addresses cross-site request forgery security issue (bug
+  #154574).
 
 *trac-0.10 (03 Oct 2006)
 
diff --git a/www-apps/trac/Manifest b/www-apps/trac/Manifest
index cba34206fca8..a2f616e61755 100644
--- a/www-apps/trac/Manifest
+++ b/www-apps/trac/Manifest
@@ -10,6 +10,10 @@ AUX 0.9.6-postinst-en.txt 2275 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 S
 MD5 1ef68ae7232130e8152d6e007afc4352 files/0.9.6-postinst-en.txt 2275
 RMD160 5434d1d4174621455f3983daf56b6d60b071bee2 files/0.9.6-postinst-en.txt 2275
 SHA256 1b89d5b0d69da1aad5be058096e4237ddef9e0b1fd46909495f9297b6b63f85d files/0.9.6-postinst-en.txt 2275
+AUX postinst-en.txt 2454 RMD160 144155b311bb35732f1b00bfd654381585534407 SHA1 74c45b519290e0694ee6c35d57141bb597e28a4a SHA256 158252c112391a401f14128d4a2ebe3db8ace85789d3ff015204acf1bfa6a971
+MD5 c3d3bc4118a7c3598bd177423ca7ad05 files/postinst-en.txt 2454
+RMD160 144155b311bb35732f1b00bfd654381585534407 files/postinst-en.txt 2454
+SHA256 158252c112391a401f14128d4a2ebe3db8ace85789d3ff015204acf1bfa6a971 files/postinst-en.txt 2454
 AUX tracd.confd 359 RMD160 7328dd041576abbc76130ce220041d837289dd00 SHA1 91a6077f1baf9301082826697e8828c6039f7648 SHA256 6ae50c887d18f8eeda7d59c4d3fd1b5e07e407711c4e4679fef3583f7be8ed6e
 MD5 95b1311ca65e1ffcd51a191542f45ba4 files/tracd.confd 359
 RMD160 7328dd041576abbc76130ce220041d837289dd00 files/tracd.confd 359
@@ -18,9 +22,14 @@ AUX tracd.initd 743 RMD160 ddc2bcf9dc907054882f35b5cc0f835c6fb450be SHA1 2ceaf96
 MD5 4dc8d28369a56b8efd84fd118c2cb28b files/tracd.initd 743
 RMD160 ddc2bcf9dc907054882f35b5cc0f835c6fb450be files/tracd.initd 743
 SHA256 c55b46edae5e7600890c426362f7e00b3a5fd5290fe3616d189f809b8626265d files/tracd.initd 743
+DIST trac-0.10.1.tar.gz 439941 RMD160 13fc90cc6023d9279721eaa583be2a09bd42737d SHA1 076b1f71ede1ecce533c71d16f1c0740065cd2ee SHA256 a5528c5e5ca865842628ad5fc6984df774d61b72e13db34a525496e3136c87c7
 DIST trac-0.10.tar.gz 442401 RMD160 a015907ac51fc6aff4fae7cf83b2bbdf80db93da SHA1 fc78ed5dd9c72a9a21bf75296ab41fc898ebbce6 SHA256 db2ebfb1acc200e3f71c6404f35c95707c73e3831b485ac66fad3ecbc2d80f13
 DIST trac-0.9.5.tar.gz 339170
 DIST trac-0.9.6.tar.gz 339647 RMD160 3bf086f8c5a6b3b7d6584359dbc916f6ee61dfdc SHA1 b64b193ec014113341f493149e0de2876a32fc7d SHA256 67862c30c2dd0852ba4778a23bba79ab2387e9b40a85b40865cb76c4fa878dfc
+EBUILD trac-0.10.1.ebuild 3931 RMD160 397dac3d3049f832787c9d0de58bd220d02b7e00 SHA1 18503cc1ba72b88b8d46f0c0c2292033ee529a49 SHA256 02f8349bd62bcad929da9ba6a57ea9a0fc3049723fdf6e9050e84c7813f935d2
+MD5 46e7282f9ac3e75e2276d64b1377050b trac-0.10.1.ebuild 3931
+RMD160 397dac3d3049f832787c9d0de58bd220d02b7e00 trac-0.10.1.ebuild 3931
+SHA256 02f8349bd62bcad929da9ba6a57ea9a0fc3049723fdf6e9050e84c7813f935d2 trac-0.10.1.ebuild 3931
 EBUILD trac-0.10.ebuild 3206 RMD160 3cb1dfb1f4e68f07ea9cc4bc741806394473febf SHA1 c4852e49590047ed1e2105ae4c04ed438b5100ba SHA256 380cdefc4b67a7c07570053dec666412020120e2ff4897ee81d0cd3012149f5e
 MD5 205ad2af6edf3a443d540abda6173d7f trac-0.10.ebuild 3206
 RMD160 3cb1dfb1f4e68f07ea9cc4bc741806394473febf trac-0.10.ebuild 3206
@@ -33,10 +42,10 @@ EBUILD trac-0.9.6.ebuild 3165 RMD160 78552ad73e99e2c01d4e1f15dc087f36886240e1 SH
 MD5 99851d8e651b9abf1d55afdf9fd418bd trac-0.9.6.ebuild 3165
 RMD160 78552ad73e99e2c01d4e1f15dc087f36886240e1 trac-0.9.6.ebuild 3165
 SHA256 cea05e5c55f86c74c2a7c42ffe7b7b2febb8347a68a424abed7ffa8fc26bd548 trac-0.9.6.ebuild 3165
-MISC ChangeLog 7731 RMD160 a9f5569473200a7b9688d2c89fe48c211afc882a SHA1 f07b66a7617b2d2a6232a64a7d5aff604cb7a67a SHA256 d4d527f47dda991d5c7abf3b781271d5fda7d75cfacf23196ca5febc43f17424
-MD5 940c3a69f2c786dd6f2cf9c6b0b49be7 ChangeLog 7731
-RMD160 a9f5569473200a7b9688d2c89fe48c211afc882a ChangeLog 7731
-SHA256 d4d527f47dda991d5c7abf3b781271d5fda7d75cfacf23196ca5febc43f17424 ChangeLog 7731
+MISC ChangeLog 7939 RMD160 23c0bc375e5a2e811f2a5f58da2ff9b4ede26961 SHA1 98fdaebc63b26fbf1e0004584861c93a98479899 SHA256 43050f555bf95177fd54044ee6f229416a9d94d19b900acc0015c4f432bdb6c0
+MD5 e906c46f6c65a3001f64391a27fb0722 ChangeLog 7939
+RMD160 23c0bc375e5a2e811f2a5f58da2ff9b4ede26961 ChangeLog 7939
+SHA256 43050f555bf95177fd54044ee6f229416a9d94d19b900acc0015c4f432bdb6c0 ChangeLog 7939
 MISC metadata.xml 220 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 SHA1 2cf693a9408713395fdedb16da9edd6b33e5c2e7 SHA256 09bece3580791397bbf0b4d68ff9ac4abbc37150cf11fe7848f924119ca76b84
 MD5 fc3b5dec4ccef02547c54bf840024aa6 metadata.xml 220
 RMD160 dcc7b97d4b6eb6a017014b427fa9fd9c2ce04583 metadata.xml 220
@@ -44,6 +53,9 @@ SHA256 09bece3580791397bbf0b4d68ff9ac4abbc37150cf11fe7848f924119ca76b84 metadata
 MD5 8fb9571c7583877bcebac7750ad5b2e5 files/digest-trac-0.10 229
 RMD160 05678466029b3299bddb989ae506eb1705fc626d files/digest-trac-0.10 229
 SHA256 7826151417f1b2deb61f228b42c90a12f5d274447e1d5c2bb36fce7fbdb1fb31 files/digest-trac-0.10 229
+MD5 1f3fb495ed3541dea7b8437c3e0bee4e files/digest-trac-0.10.1 235
+RMD160 aeb2626e7ecc5ab9d29b491e1357d8f03b63a133 files/digest-trac-0.10.1 235
+SHA256 a0cd4933dde76336d6b601e3d2b8454c7dee2f32e88d437a79212094b2095f7f files/digest-trac-0.10.1 235
 MD5 d79dfe3a7f4a8e6a1d365df766bcb3c8 files/digest-trac-0.9.5 62
 RMD160 0f374006f0871928ba9abee6c11df5346dd3a644 files/digest-trac-0.9.5 62
 SHA256 de0057039cb4619b66be5f9631f9e1e95a9de1343220d4211c47293572fe1e87 files/digest-trac-0.9.5 62
diff --git a/www-apps/trac/files/digest-trac-0.10.1 b/www-apps/trac/files/digest-trac-0.10.1
new file mode 100644
index 000000000000..4a24cd8c9983
--- /dev/null
+++ b/www-apps/trac/files/digest-trac-0.10.1
@@ -0,0 +1,3 @@
+MD5 55e10547c92cf39d64ab7ae4040c238d trac-0.10.1.tar.gz 439941
+RMD160 13fc90cc6023d9279721eaa583be2a09bd42737d trac-0.10.1.tar.gz 439941
+SHA256 a5528c5e5ca865842628ad5fc6984df774d61b72e13db34a525496e3136c87c7 trac-0.10.1.tar.gz 439941
diff --git a/www-apps/trac/files/postinst-en.txt b/www-apps/trac/files/postinst-en.txt
new file mode 100644
index 000000000000..a5f2f6663b19
--- /dev/null
+++ b/www-apps/trac/files/postinst-en.txt
@@ -0,0 +1,71 @@
+Install Instructions
+====================
+
+To complete the install, create your first Trac environment by running this
+command:
+
+	trac-admin /var/lib/trac/<project-name> initenv
+
+For security, trac relies on the webserver for authentication. The following
+command creates a password database for Basic Authentication with Apache 2:
+
+	htpasswd2 -c /etc/apache2/trac.htpasswd <user-name>
+
+Please adjust for the webserver of your choice, and refer to your webserver
+documentation.
+
+Now, all you need to do is to configure your webserver. The following is a
+configuration example for Apache 2 and CGI:
+
+	<Location "/cgi-bin/trac.cgi">
+		SetEnv TRAC_ENV "/var/lib/trac/<project-name>"
+	</Location>
+	<Location "/cgi-bin/trac.cgi/login">
+		AuthType Basic
+		AuthName "trac"
+		AuthUserFile /etc/apache2/trac.htpasswd
+		Require valid-user
+	</Location>
+
+Again, please adjust for the webserver of your choice.
+
+Fast-CGI users: you have to emerge and configure your Fast-CGI engine
+separately.
+
+You can also use Trac without having to install a webserver. See
+http://projects.edgewall.com/trac/wiki/TracStandalone to know more.
+
+Don't forget to update the configuration file! It is located at
+/var/lib/trac/<project-name>/conf/trac.ini. See its reference at
+http://projects.edgewall.com/trac/wiki/TracIni.
+
+More information (multiple projects setup, installation with Apache 2 and
+mod_python, lighttpd...) can be found on the Trac wiki:
+
+	http://projects.edgewall.com/trac/wiki/
+
+Upgrade Instructions
+====================
+
+If you are upgrading from a previous Trac version, please follow the
+instructions here:
+
+	http://projects.edgewall.com/trac/wiki/TracUpgrade
+
+If upgrading to Trac 0.10, you need to upgrade, resync, wiki upgrade and
+possibly review your Wiki pages for your Trac environments.
+
+Since 0.9, Trac uses sqlite-3 instead of sqlite-2. If you were using Trac 0.8.x
+or below, you have to upgrade your database files or else you won't be able to
+use Trac. You can issue the following commands, for each environment you have:
+
+	mv /var/lib/trac/<project-name>/db/trac.db \
+		/var/lib/trac/<project-name>/db/trac2.db
+	sqlite /var/lib/trac/<project-name>/db/trac2.db .dump \
+		| sqlite3 /var/lib/trac/<project-name>/db/trac.db
+	trac-admin /var/lib/trac/<project-name> upgrade
+	trac-admin /var/lib/trac/<project-name> resync
+	trac-admin /var/lib/trac/<project-name> wiki upgrade
+
+And review the trac.ini configuration file by comparing it to
+trac.ini.sample.
diff --git a/www-apps/trac/trac-0.10.1.ebuild b/www-apps/trac/trac-0.10.1.ebuild
new file mode 100644
index 000000000000..204121c5a31c
--- /dev/null
+++ b/www-apps/trac/trac-0.10.1.ebuild
@@ -0,0 +1,129 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/trac-0.10.1.ebuild,v 1.1 2006/11/09 23:09:39 dju Exp $
+
+inherit distutils webapp
+
+DESCRIPTION="Trac is a minimalistic web-based project management, wiki and bug/issue tracking system."
+HOMEPAGE="http://trac.edgewall.com/"
+SRC_URI="http://ftp.edgewall.com/pub/trac/${P}.tar.gz"
+
+LICENSE="trac"
+KEYWORDS="~amd64 ~ppc ~sparc ~x86"
+IUSE="cgi fastcgi mysql postgres sqlite enscript silvercity"
+
+# doing so because utils (such as trac-admin), manpages... overlap
+SLOT="0"
+WEBAPP_MANUAL_SLOT="yes"
+
+# we need to depend on virtual/httpd-cgi to pull apache/lighttpd/whatever in when USE cgi
+# we need to depend on virtual/httpd-fcgi to pull mod_fastcgi/lighttpd/whatever in when USE fastcgi
+# we need to depend on virtual/httpd-python to pull mod_python/whatever in when USE python (python
+# is rather confusing here, as dev-lang/python is a required dependency, but httpd-python isn't)
+DEPEND="${DEPEND}
+	>=dev-lang/python-2.3
+	app-text/pytextile
+	>=dev-python/docutils-0.3.9
+	dev-libs/clearsilver
+	>=dev-util/subversion-1.3.2
+	mysql? (
+		>=dev-db/mysql-4.1
+		>=dev-python/mysql-python-1.2.1
+	)
+	sqlite? (
+		>=dev-db/sqlite-3.3.4
+		>=dev-python/pysqlite-2.3
+	)
+	postgres? ( >=dev-python/psycopg-2 )
+	enscript? ( app-text/enscript )
+	silvercity? ( app-text/silvercity )"
+
+# The following function should be added to eutils.eclass (see bug #143572):
+
+# Generate an standard error message for missing USE flags
+# in existing packages, and die.
+#
+# Usage: built_with_use_error <category/package> <functionality> [<USE flag>]
+#    ex: built_with_use_error dev-util/subversion python
+#    or: built_with_use_error net-www/apache LDAP ldap
+#
+# Typical usage:
+#	if ! built_with_use dev-util/subversion python ; then
+#        built_with_use_error dev-util/subversion python
+#   fi
+#
+# Note: when <USE flag> is not specified, <functionality> is used for the USE flag name.
+built_with_use_error_msg() {
+	local package=$1
+	local func=$2
+	local use_flag=$3
+
+	[[ -z ${use_flag} ]] && use_flag=${func}
+
+	eerror "Your ${package} package has been built without"
+	eerror "${func} support, please enable the '${use_flag}' USE flag and"
+	eerror "re-emerge ${package}."
+	einfo "You can enable this USE flag either globally in /etc/make.conf,"
+	einfo "or just for specific packages in /etc/portage/package.use."
+	die "${package} missing ${func} support"
+}
+
+pkg_setup () {
+	if ! use mysql && ! use postgres && ! use sqlite ; then
+		eerror "You must select at least one database backend, by enabling"
+		eerror "at least one of the 'mysql', 'postgres' or 'sqlite' USE flags."
+		die "no database backend selected"
+	fi
+
+	if ! built_with_use dev-util/subversion python ; then
+		built_with_use_error dev-util/subversion python
+	fi
+
+	if ! built_with_use dev-libs/clearsilver python ; then
+		built_with_use_error dev-libs/clearsilver python
+	fi
+
+	ebegin "Creating tracd group and user"
+	enewgroup tracd
+	enewuser tracd -1 -1 -1 tracd
+	eend ${?}
+
+	webapp_pkg_setup
+}
+
+src_install () {
+	# project environments might go in here
+	keepdir /var/lib/trac
+
+	webapp_src_preinst
+	distutils_src_install
+
+	dodoc AUTHORS INSTALL RELEASE THANKS UPGRADE
+	rm ${D}/usr/share/doc/${P}/MANIFEST.in.gz
+	rm ${D}/usr/share/doc/${P}/PKG-INFO.gz
+
+	docinto contrib
+	dodoc contrib/*
+
+	# if needed, install cgi/fcgi scripts for webapp-config
+	local my_dir=${D}/usr/share/trac
+	if use cgi ; then
+		mv ${my_dir}/cgi-bin/trac.cgi ${D}${MY_CGIBINDIR} || die
+	fi
+	if use fastcgi ; then
+		mv ${my_dir}/cgi-bin/trac.fcgi ${D}${MY_CGIBINDIR} || die
+	fi
+	rm -rf ${my_dir}/cgi-bin || die
+
+	for lang in en; do
+		webapp_postinst_txt ${lang} ${FILESDIR}/postinst-${lang}.txt
+	done
+
+	# copy graphics, css & js
+	cp -r htdocs/* ${D}/${MY_HTDOCSDIR}
+
+	webapp_src_install
+
+	newconfd "${FILESDIR}"/tracd.confd tracd
+	newinitd "${FILESDIR}"/tracd.initd tracd
+}