From nobody Fri Oct 20 09:43:48 2023 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SBfmN6cR3z4xZbP; Fri, 20 Oct 2023 09:43:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SBfmN63rRz4MtP; Fri, 20 Oct 2023 09:43:48 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697795028; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=YIP8ZU2UqkM7Na54cMfZN1nFh2Vw8ZFQVt1nTnQt4oE=; b=vd6ZPFsxOzTwIt4J+tzF2xndsE+cIQhv5PbRjkaF/cuNhdo7DlnwxEnosU0jPwl25uMEtw ZXQwGOn8zr9ME0uIeI53xpvRyvXHbKC/odI3o09aVIngKNlfKtAaWQPYmE3VkDOXmENywa YvAv053QwLVIdT2gbvBmgKx7UfQQZ/tqPO0ktzlUlvAJaDA61vjojBxV6DAmI6qBtBwWOh ePqa+h2SNW2V/Fn8QCTnCyx6kc49rHBH3m7XDfSyBymDkz43/G2AxykfcO3ZSXQ38NPiGg leUtCpYceRC6km3wfiubWj7FWQIVcu53Nr24Qmg3/bVuLkr5Y/J3Dvy410IFZw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1697795028; a=rsa-sha256; cv=none; b=Xa5B3tvvqVAuGM6FZa51AGzMAfdW2v9y67P30FJCYtWRp8G2bLIhWrfoC0i75nowsJoffa p2fVkrJA02ZII2L5U4fcqAVENtMRdkGUcfeFJPTIfrk//HIJ+hOaz3sRRPfniFskj3m0OY aJv4LIbsxU490srxkygT0L4fbdQ3NjaKh5UUM+EMr7oqa6psafim/4uMBTR1ibC8g07Zka zuT2ZKucL820sG5PVNyx75KhoUt/JFoJbbMeE+ZGStFik4cXhWrGGhtD3uvXu2X583n5Zu rE+6EZAz5swvxrcfRajx4R8g5lWyxHEzDnFjxc4hevKLzv8l5XawiG50WUQ9yA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697795028; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=YIP8ZU2UqkM7Na54cMfZN1nFh2Vw8ZFQVt1nTnQt4oE=; b=V5UK6jAwLFgpb3LlzsUY2S2ju3Tilmyd6j79FMKU8O7pOXaK33m74b9wxIv2S+WjlvVCvl YM2WwFq27tb41qrZD09WYX8RfIJJnp8w2Ovv1eVxT1PgpZUUU9dC7+URNRR3+ZCzqXO/ia mQxzZyQ4X+090bn8dgHCBiZCgHAl1fKvfBy47miKnhmBOaaCqxcljYARn71kOlfMqTVLz2 Pn5GivyZhv1iVTNpdyKauG1QwIWLeLyFLv+96mkfCDuCluB6TI1SmCquOHr7PeF3BruYMK ndQU9b9/9h+Bxn1gsTtvHjMuM3fV8gxsdg4VlVDp17RD+Sk8MWrStC78tKaO9w== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4SBfmN54GkzCs0; Fri, 20 Oct 2023 09:43:48 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 39K9hmeC005884; Fri, 20 Oct 2023 09:43:48 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 39K9hmQK005881; Fri, 20 Oct 2023 09:43:48 GMT (envelope-from git) Date: Fri, 20 Oct 2023 09:43:48 GMT Message-Id: <202310200943.39K9hmQK005881@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Mikael Urankar Subject: git: c2238ca0584d - main - www/rt44: Update to 4.4.7 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mikael X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: c2238ca0584db3a01ad35c33589efdb2f2761b51 Auto-Submitted: auto-generated The branch main has been updated by mikael: URL: https://cgit.FreeBSD.org/ports/commit/?id=c2238ca0584db3a01ad35c33589efdb2f2761b51 commit c2238ca0584db3a01ad35c33589efdb2f2761b51 Author: Mikael Urankar AuthorDate: 2023-10-20 09:39:27 +0000 Commit: Mikael Urankar CommitDate: 2023-10-20 09:43:44 +0000 www/rt44: Update to 4.4.7 Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.7 --- www/rt44/Makefile | 3 +- www/rt44/distinfo | 6 +- www/rt44/files/patch-vuln-2023-09-26 | 107 ----------------------------------- www/rt44/pkg-plist | 4 +- 4 files changed, 7 insertions(+), 113 deletions(-) diff --git a/www/rt44/Makefile b/www/rt44/Makefile index ed8f906e7f7b..61729b727223 100644 --- a/www/rt44/Makefile +++ b/www/rt44/Makefile @@ -1,6 +1,5 @@ PORTNAME= rt -DISTVERSION= 4.4.6 -PORTREVISION= 1 +DISTVERSION= 4.4.7 CATEGORIES= www MASTER_SITES= http://download.bestpractical.com/pub/rt/release/ PKGNAMESUFFIX= 44 diff --git a/www/rt44/distinfo b/www/rt44/distinfo index 784d9d0dfdfe..8480f7f2f596 100644 --- a/www/rt44/distinfo +++ b/www/rt44/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1658127043 -SHA256 (rt-4.4.6.tar.gz) = 1eff5bd9e556b5d6682ccd0e5b2f3dcc2c49a9ec4e215dadb90c4caf5e435e9e -SIZE (rt-4.4.6.tar.gz) = 10783318 +TIMESTAMP = 1697794413 +SHA256 (rt-4.4.7.tar.gz) = 47af1651d5df3f25b6374ff6c1da71c66202d61919d9431c17259fa3df69ae59 +SIZE (rt-4.4.7.tar.gz) = 10858315 diff --git a/www/rt44/files/patch-vuln-2023-09-26 b/www/rt44/files/patch-vuln-2023-09-26 deleted file mode 100644 index 6772187d9342..000000000000 --- a/www/rt44/files/patch-vuln-2023-09-26 +++ /dev/null @@ -1,107 +0,0 @@ -diff --git a/docs/web_deployment.pod b/docs/web_deployment.pod -index d4d6a43122..3177d2abfd 100644 ---- docs/web_deployment.pod -+++ docs/web_deployment.pod -@@ -171,6 +171,30 @@ B - To run RT using mod_perl 1.xx please see L for - configuration examples. - -+=head3 Restricting the REST 1.0 mail-gateway -+ -+RT processes email via a REST 1.0 endpoint. If you accept email on the same -+server as your running RT, you can restrict this endpoint to localhost only -+with a configuration like the following: -+ -+ # Accept requests only from localhost -+ -+ Require local -+ -+ -+If you run C on a separate server, you can update -+the above to allow additional IP addresses. -+ -+ -+ Require ip 127.0.0.1 ::1 192.0.2.0 # Add you actual IPs -+ -+ -+See the L -+for additional configuration options. -+ -+After adding this configuration, test receiving email and confirm -+your C utility and C configurations -+can successfully submit email to RT. - - =head2 nginx - -diff --git a/lib/RT/Interface/Email.pm b/lib/RT/Interface/Email.pm -index 159e7758a3..7ded8b7310 100644 ---- lib/RT/Interface/Email.pm -+++ lib/RT/Interface/Email.pm -@@ -159,6 +159,10 @@ sub Gateway { - ); - } - -+ # Clean up sensitive headers. Crypt related headers are cleaned up in RT::Interface::Email::Crypt::VerifyDecrypt -+ my @headers = qw( RT-Attach RT-Send-Cc RT-Send-Bcc RT-Message-ID RT-DetectedAutoGenerated RT-Squelch-Replies-To ); -+ $Message->head->delete($_) for @headers; -+ - #Set up a queue object - my $SystemQueueObj = RT::Queue->new( RT->SystemUser ); - $SystemQueueObj->Load( $args{'queue'} ); -diff --git a/lib/RT/Interface/Email/Crypt.pm b/lib/RT/Interface/Email/Crypt.pm -index f4eab01935..a8b0ea3f19 100644 ---- lib/RT/Interface/Email/Crypt.pm -+++ lib/RT/Interface/Email/Crypt.pm -@@ -73,13 +73,14 @@ sub VerifyDecrypt { - ); - - # we clean all possible headers -- my @headers = -+ my @headers = ( - qw( - X-RT-Incoming-Encryption - X-RT-Incoming-Signature X-RT-Privacy - X-RT-Sign X-RT-Encrypt - ), -- map "X-RT-$_-Status", RT::Crypt->Protocols; -+ map "X-RT-$_-Status", RT::Crypt->Protocols -+ ); - foreach my $p ( $args{'Message'}->parts_DFS ) { - $p->head->delete($_) for @headers; - } -diff --git a/share/html/REST/1.0/NoAuth/mail-gateway b/share/html/REST/1.0/NoAuth/mail-gateway -index 328be91bc6..107d7858c7 100644 ---- share/html/REST/1.0/NoAuth/mail-gateway -+++ share/html/REST/1.0/NoAuth/mail-gateway -@@ -59,9 +59,18 @@ use RT::Interface::Email; - $r->content_type('text/plain; charset=utf-8'); - $m->error_format('text'); - my ( $status, $error, $Ticket ) = RT::Interface::Email::Gateway( \%ARGS ); -+ -+# Obscure the message to avoid any information disclosure unless -+# in DevelMode. -+my $log_error; -+unless ( RT->Config->Get('DevelMode') ) { -+ $log_error = $error; -+ $error = 'operation unsuccessful'; -+} -+ - if ( $status == 1 ) { - $m->out("ok\n"); -- if ( $Ticket && $Ticket->Id ) { -+ if ( $Ticket && $Ticket->Id && RT->Config->Get('DevelMode') ) { - $m->out( 'Ticket: ' . ($Ticket->Id || '') . "\n" ); - $m->out( 'Queue: ' . ($Ticket->QueueObj->Name || '') . "\n" ); - $m->out( 'Owner: ' . ($Ticket->OwnerObj->Name || '') . "\n" ); -@@ -73,9 +82,11 @@ if ( $status == 1 ) { - } - else { - if ( $status == -75 ) { -+ RT->Logger->error("mail-gateway returned status -75: $log_error") if $log_error; - $m->out( "temporary failure - $error\n" ); - } - else { -+ RT->Logger->error("mail-gateway error: $log_error") if $log_error; - $m->out( "not ok - $error\n" ); - } - } diff --git a/www/rt44/pkg-plist b/www/rt44/pkg-plist index 67631193d8b3..25cc1afcdd42 100644 --- a/www/rt44/pkg-plist +++ b/www/rt44/pkg-plist @@ -1197,12 +1197,14 @@ sbin/standalone_httpd %%DATADIR%%/html/SelfService/Create.html %%DATADIR%%/html/SelfService/CreateTicketInQueue.html %%DATADIR%%/html/SelfService/Display.html +%%DATADIR%%/html/SelfService/Download/CustomFieldValue/dhandler %%DATADIR%%/html/SelfService/Elements/GotoTicket %%DATADIR%%/html/SelfService/Elements/Header %%DATADIR%%/html/SelfService/Elements/MyRequests %%DATADIR%%/html/SelfService/Elements/RequestUpdate %%DATADIR%%/html/SelfService/Elements/SearchArticle %%DATADIR%%/html/SelfService/Helpers/Autocomplete/CustomFieldValues +%%DATADIR%%/html/SelfService/Helpers/Autocomplete/Principals %%DATADIR%%/html/SelfService/Helpers/Autocomplete/Users %%DATADIR%%/html/SelfService/Helpers/ShortcutHelp %%DATADIR%%/html/SelfService/Helpers/Upload/Add @@ -1258,7 +1260,6 @@ sbin/standalone_httpd %%DATADIR%%/html/Ticket/Graphs/Elements/EditGraphProperties %%DATADIR%%/html/Ticket/Graphs/Elements/ShowGraph %%DATADIR%%/html/Ticket/Graphs/Elements/ShowLegends -%%DATADIR%%/html/Ticket/Graphs/dhandler %%DATADIR%%/html/Ticket/Graphs/index.html %%DATADIR%%/html/Ticket/History.html %%DATADIR%%/html/Ticket/Modify.html @@ -1272,6 +1273,7 @@ sbin/standalone_httpd %%DATADIR%%/html/Ticket/autohandler %%DATADIR%%/html/Tools/MyDay.html %%DATADIR%%/html/Tools/MyReminders.html +%%DATADIR%%/html/Tools/PreviewSearches.html %%DATADIR%%/html/Tools/index.html %%DATADIR%%/html/User/Elements/AssetList %%DATADIR%%/html/User/Elements/Portlets/ActiveTickets