svn commit: r404544 - in branches/2015Q4/databases/mantis: . files

[Dan Langille]

Author: dvl
Date: Sun Dec 27 02:30:12 2015
New Revision: 404544
URL: https://svnweb.freebsd.org/changeset/ports/404544

Log:
  MFH: r404324
  
  patch with security fix for CVE-2015-5059
  
  Submitted by: Torsten Zuhlsdorff & Jason Unovitch
  PR: 201106 202865
  Approved by: mat (mentor)
  Differential Review: D4196
  Approved by: ports-secteam

Added:
  branches/2015Q4/databases/mantis/files/patch-config__defaults__inc.php
     - copied unchanged from r404324, head/databases/mantis/files/patch-config__defaults__inc.php
Modified:
  branches/2015Q4/databases/mantis/Makefile
Directory Properties:
  branches/2015Q4/   (props changed)

Modified: branches/2015Q4/databases/mantis/Makefile
==============================================================================
--- branches/2015Q4/databases/mantis/Makefile	Sun Dec 27 02:15:06 2015	(r404543)
+++ branches/2015Q4/databases/mantis/Makefile	Sun Dec 27 02:30:12 2015	(r404544)
@@ -3,7 +3,7 @@
 
 PORTNAME=	mantis
 PORTVERSION=	1.2.19
-PORTREVISION=	0
+PORTREVISION=	1
 CATEGORIES=	databases www
 MASTER_SITES=	SF/${PORTNAME}bt/${PORTNAME}-stable/${PORTVERSION}
 DISTNAME=	mantisbt-${PORTVERSION}
@@ -12,14 +12,23 @@ MAINTAINER=	dvl at FreeBSD.org
 COMMENT=	Bug tracking system written in PHP
 
 NO_BUILD=	yes
-USE_PHP=	hash pcre session
-USES=	pgsql
+USE_PHP=	hash pcre session xml
+
+OPTIONS_MULTI=	DB
+OPTIONS_MULTI_DB=	MYSQL PGSQL
+
+MYSQL_DESC=	MySQL support
+PGSQL_DESC=	PostgreSQL support
+
+OPTIONS_DEFAULT=	MYSQL
+
+MYSQL_USE=	mysql=yes php=mysql
+PGSQL_USE=	pgsql=yes php=pgsql
 
 SUB_FILES=	pkg-message
 
 PLIST_SUB=	WWWOWN=${WWWOWN} WWWGRP=${WWWGRP}
 
-
 do-install:
 	${MKDIR} ${STAGEDIR}${WWWDIR}
 	cd ${WRKSRC} && ${COPYTREE_SHARE} . ${STAGEDIR}${WWWDIR}

Copied: branches/2015Q4/databases/mantis/files/patch-config__defaults__inc.php (from r404324, head/databases/mantis/files/patch-config__defaults__inc.php)
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ branches/2015Q4/databases/mantis/files/patch-config__defaults__inc.php	Sun Dec 27 02:30:12 2015	(r404544, copy of r404324, head/databases/mantis/files/patch-config__defaults__inc.php)
@@ -0,0 +1,17 @@
+--- config_defaults_inc.php.orig	2015-11-02 10:57:53 UTC
++++ config_defaults_inc.php
+@@ -2347,9 +2347,13 @@
+ 
+ 	/**
+ 	 * Threshold needed to view project documentation
++	 * Note: setting this to ANYBODY will let any user download attachments
++	 * from private projects, regardless of their being a member of it.
++	 * @see $g_enable_project_documentation
++	 * @see $g_upload_project_file_threshold
+ 	 * @global int $g_view_proj_doc_threshold
+ 	 */
+-	$g_view_proj_doc_threshold = ANYBODY;
++	$g_view_proj_doc_threshold = VIEWER;
+ 
+ 	/**
+ 	 * Site manager