From owner-cvs-ports@FreeBSD.ORG  Wed Oct 27 19:23:53 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id BBF5716A4CE; Wed, 27 Oct 2004 19:23:53 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id AF3EC43D3F; Wed, 27 Oct 2004 19:23:53 +0000 (GMT)
	(envelope-from pav@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.11/8.12.11) with ESMTP id i9RJNrZf010416;
	Wed, 27 Oct 2004 19:23:53 GMT
	(envelope-from pav@repoman.freebsd.org)
Received: (from pav@localhost)
	by repoman.freebsd.org (8.12.11/8.12.11/Submit) id i9RJNrMC010415;
	Wed, 27 Oct 2004 19:23:53 GMT
	(envelope-from pav)
Message-Id: <200410271923.i9RJNrMC010415@repoman.freebsd.org>
From: Pav Lucistnik <pav@FreeBSD.org>
Date: Wed, 27 Oct 2004 19:23:53 +0000 (UTC)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: ports/devel/bugzilla Makefile distinfo pkg-message
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Oct 2004 19:23:53 -0000

pav         2004-10-27 19:23:53 UTC

  FreeBSD ports repository

  Modified files:
    devel/bugzilla       Makefile distinfo pkg-message 
  Log:
  - Update to 2.16.7, a security release:
  
  Class:       Unauthorized Bug Change
  Versions:    2.9 through 2.18rc2 and 2.19
  Description: It is possible to send a carefully crafted HTTP POST
               message to process_bug.cgi which will remove keywords from
               a bug even if you don't have permissions to edit all bug
               fields (the "editbugs" permission).  Such changes are
               reported in "bug changed" email notifications, so they are
               easily detected and reversed if someone abuses it.
  Reference:   https://bugzilla.mozilla.org/show_bug.cgi?id=252638
  
  - Correct SQL command in pkg-message
  
  PR:             ports/71161, ports/73166
  Submitted by:   Dmitry A Grigorovich <odip@bionet.nsc.ru>
  
  Revision  Changes    Path
  1.32      +1 -1      ports/devel/bugzilla/Makefile
  1.12      +2 -2      ports/devel/bugzilla/distinfo
  1.8       +3 -2      ports/devel/bugzilla/pkg-message