From owner-freebsd-ports-bugs@freebsd.org Mon Jul 20 04:40:27 2015 Return-Path: Delivered-To: freebsd-ports-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9C2019A63F6 for ; Mon, 20 Jul 2015 04:40:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 801731476 for ; Mon, 20 Jul 2015 04:40:27 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id t6K4eRQg059926 for ; Mon, 20 Jul 2015 04:40:27 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 201709] [MAINTAINER-UPDATE]: www/magento: Update to 1.9.2.0 Date: Mon, 20 Jul 2015 04:40:27 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: melvyn@magemana.nl X-Bugzilla-Status: New X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-ports-bugs@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jul 2015 04:40:27 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201709 Bug ID: 201709 Summary: [MAINTAINER-UPDATE]: www/magento: Update to 1.9.2.0 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: melvyn@magemana.nl Created attachment 159004 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=159004&action=edit Patch to update to 1.9.2.0 Long overdue, update to 1.9.2.0: This fixes a number of important security isseus, contained in: - SUPEE-6285 - SUPEE-5994 - SUPEE-5344 - SUPEE-1533 - SUPEE-3941 - APPSEC-212 New in version 1.9.x: - Responsive Web Design (rwd) theme - New way to extend themes through theme.xml (See: http://alanstorm.com/magento_parent_child_themes for a good introduction) - Various security enhancements involving hardening of controllers. - WARNING: Admin controllers that do NOT extend Mage_Adminhtml_Controller_Action do NOT gain these enhancements and susceptible to exposing the admin login form on carefully crafted URLs. This makes brute-force password attacks harder to detect as there is a broader range of URLs to monitor. Please check your local and 3rd party extensions. - Email is now sent through cron, including transactional emails in batches of maximum 100 (by default). This means if Magento cron is run at */15, delays are 1-15 minutes minumum and upwards of 15 minutes if queue is filling up. Adjust your cron invocation accordingly. - CAUTION: All templates files patched in SUPEE-6285 need the same fix in overridden (store specific) templates. Further reading: Port changes: - Port will contain a release suffix designating the latest patch that is included. - Framework added to apply patches the official way so it'll be easier to maintain. - Work in progress to get rid of the 2 bash-isms that make would introduce bash as PATCH_DEPENDS (to upstream). - Changed MASTER_SITE to my server, since Magento broke it: - Added option to install the test suite (NOTE: Work in Progress upstream, there be dragons) - Added snappy support now that port is in - Install some files as samples as preparation for sample data port - Make use of new OPTIONS syntax - Make my life easier -- You are receiving this mail because: You are the assignee for the bug.