CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/rt444.4.9

Industrial-grade ticketing system written in Perl

Maintainer
ports@FreeBSD.org
Packages
rt44 4.4.9
Upstream
up to date
CPE
bestpractical:rt from the port
WWW
https://www.bestpractical.com/rt/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (4)

VuXML entries whose affected range this version has left.

Commits (44)

Mikael Urankar (mikael) · 4.4.9
www/rt44: Update to 4.4.9
25ce63fb55
Mikael Urankar (mikael) · 4.4.8
www/rt44: drop maintainership
e824dbf23e
Mikael Urankar (mikael) · 4.4.8
www/rt44: Update to 4.4.8
836676da96
Florian Smeets (flo) · 4.4.7_1
databases/p5-DBD-mysql: Fix for MariaDB users

Add a new variable DBD_MYSQL, use that in *_DEPENDS and add mysql to USES
where required. DBD_MYSQL will automatically set the correct DBD dependency.

In cd16748194e2 databases/p5-DBD-mysql was updated to 5.x, in 5.x the
support for MariaDB was removed and only MySQL >= 8.0 is supported.

In the 4.x releases MariaDB is still supported, according to upstream 4.x
will still be supported for a while [1], so use that for now when we detect
that MYSQL_FLAVOUR is set to mariadb. databases/p5-DBD-mysql4 was added in
d95f49cb3b54.

DBD:MariaDB would be another alternative, but migrating to it might need
more analysis than just staying with the 4.x releases of p5-DBD-mysql. This
thread on the amavis-users mailing list has a very good summary [2] from
the author of DBD:MariaDB.

This includes ideas and suggestions from vvd and mat. Thanks!

[1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277889#c17
[2] https://lists.amavis.org/pipermail/amavis-users/2024-March/006823.html

PR:		275100, 277889
Reviewed by:	vvd, mat
Fixes:	cd16748194e2
Differential Revision: https://reviews.freebsd.org/D44662
92a030dffd
Mikael Urankar (mikael) · 4.4.7
www/rt44: Update to 4.4.7

Changes:
  https://github.com/bestpractical/rt/releases/tag/rt-4.4.7
c2238ca058
Mikael Urankar (mikael) · 4.4.6_1
www/rt44: Fix vulnerabilities

The following issues are addressed with these security updates:
  - RT is vulnerable to unvalidated email headers in incoming email and the
    mail-gateway REST interface.
    This vulnerability is assigned CVE-2023-41259.
  - RT is vulnerable to information leakage via response messages returned from
    requests sent via the mail-gateway REST interface.
    This vulnerability is assigned CVE-2023-41260.
  - RT 5.0 is vulnerable to information leakage via transaction searches made by
    authenticated users in the transaction query builder.
    This vulnerability is assigned CVE-2023-45024.
  - RT 5.0 can reveal information about data on various RT objects in errors and
    other response messages to REST 2 requests.
c2ce69e2f5
Muhammad Moinur Rahman (bofh) · 4.4.6
Mk/Uses/apache.mk: Refactor after removal of older versions

apache22 and apache25 had been removed a long time ago however the
apache.mk file has never been refactored and is out of sync from the
file Mk/bsd.default-versions.mk. These changes refactors the removals of
the older versions. In addition:

- Move some keywords like USE_APACHE, USE_APACHE_BUILD, USE_APACHE_RUN
  from SANITY_DEPRECATED to SANITY_UNSUPPORTED
- Remove apache versions from ports Makefiles as currently there is only
  one available version in the tree. However the version checks are
  still valid and should work flawlessly whenever a new version is
  added. For example USES=apache:2.2+ are simply replaced with
  USES=apache. As currently there are no other versions available for
  test this could not be checked on it's own ground.
- Update FOO_USE=APACHE=yes to FOO_USES=apache
- Remove trailing whitespaces

Approved by:    portmgr
Differential Revision: https://reviews.freebsd.org/D38113
40843b1ccb
Stefan Eßer (se) · 4.4.6
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.4.6
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mikael Urankar (mikael) · 4.4.6
www/rt44: Update to 4.4.6

Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.6
3f9e4eef33
Po-Chuan Hsieh (sunpoet) · 4.4.5
Mk/Uses/perl5.mk: Remove outdated P5_POD_PARSER

lang/perl5.30 has been removed in b3fb5d8b3c860bd3c3ebcffafe621aea61379539.
699f62d696
Stefan Eßer (se) · 4.4.5
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
5933ac0b09
Mikael Urankar (mikael) · 4.4.5
www/rt44: Fix pkg-plist

PR:		258555
Reported by:	Christian Ullrich
d075c71e44
Mikael Urankar (mikael) · 4.4.5
www/rt44: Update to 4.4.5

- Update to 4.4.5
 - Remove useless REINPLACE_CMD

Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.5
fd09abd3c1
Po-Chuan Hsieh (sunpoet) · 4.4.4_2
www/rt44: Use P5_POD_PARSER

With hat:	perl
7631a75875
Mathieu Arnold (mat) · 4.4.4_2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 4.4.4_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mikael Urankar (mikael) · 4.4.4_2
www/rt44: add dependency on textproc/p5-Pod-Parse

Add dependency on textproc/p5-Pod-Parse:
RT::Shredder::POD uses Pod::Select, which is provided by textproc/p5-Pod-Parser

PR:		250197
Reported by:	David Siebörger
MFH:		2020Q4 (blanket: runtime fix)
1f5de3bd60
Mikael Urankar (mikael) · 4.4.4_1
www/rt44: drop devel/jsmin dependency, it's built-in in rt44

From the documentation, docs/UPGRADING-4.4:
The support for C<jsmin> (via the C<$JSMinPath> configuration) has been
removed in favor of a built-in solution.
5027e256cf
Mikael Urankar (mikael) · 4.4.4
www/rt40: cleanup  - Remove CONFLICTS_INSTALL against rt40 which is long gone from ports.  - Fix the documentation path.  - Gratuitous whitespace fix.

No functionnal changes
48efae6906
Alexey Dokuchaev (danfe) · 4.4.4
Sanitize COMMENT per Section 5.6 of the FreeBSD Porter's Handbook (part 5).
a7d9790791
Mikael Urankar (mikael) · 4.4.4
Change my mail address to mikael@FreeBSD.org

Approved by:	manu (mentor)
Differential Revision:	https://reviews.freebsd.org/D23286
cf809c9127
Mathieu Arnold (mat) · 4.4.4
Convert to UCL & cleanup pkg-message (categories w)
a400cfc5f4
Matthew Seaman (matthew) · 4.4.4
Security update to 4.4.4

ReleaseNotes:	https://docs.bestpractical.com/release-notes/rt/4.4.4

Submitted by:	mikael.urankar@gmail.com (maintainer)
MFH:		2019Q1
Security:	416ca0f4-3fe0-11e9-bbdd-6805ca0b3d42
a9953344a9
Steve Wills (swills) · 4.4.3
www/rt44: update to v4.4.3

PR:		229828
Submitted by:	mikael.urankar@gmail.com (maintainer)
8b1e8e2ad0
Alexey Dokuchaev (danfe) · 4.4.2_1
For ports under `www' category: remove redundant PKGMESSAGE assignment, which is set appropriately by the b.p.m when `pkg-message' appears on the SUB_FILES list.
ec5c5f26df
Matthew Seaman (matthew) · 4.4.2_1
Bump PORTREVISION, forgotten in previous commit.

PR:		222975
215c6fba74
Matthew Seaman (matthew) · 4.4.2
Always install SQL schema files irrespective of the setting of the DOCS option.

Make increased use of options helpers to reduce the diff against
www/rt42

PR:		222975
Submitted by:	mikael.urankar@gmail.com (maintainer)
Reported by:	thomas@gibfest.dk
7de166b63e
Matthew Seaman (matthew) · 4.4.2
Update to 4.4.2

ChangeLog:	https://docs.bestpractical.com/release-notes/rt/4.4.2

PR:		221583
Submitted by:	mikael.urankar@gmail.com (maintainer)
6a6e2876a4
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.4.1_3
Remove Perl core modules

- Bump PORTREVISION for dependency change

With hat:	perl
c4c9573bb9
Matthew Seaman (matthew) · 4.4.1_2
Add security patches from BestPractical in lieu of the upcoming 4.4.2 release.

See: http://lists.bestpractical.com/pipermail/rt-announce/\
2017-June/000297.html

PR:		220031
Approved by:	mikael.urankar@gmail.com (maintainer)
MFH:		2017Q2
Security:	7a92e958-5207-11e7-8d7c-6805ca0b3d42
0acd7bca75
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.4.1_1
Remove outdated PERL_LEVEL check

With hat:	perl
c5ba32a764
Kurt Jaeger (pi) · 4.4.1_1
www/rt44: add missing dependencies

- Those were missing:
  devel/p5-Class-Accessor
  textproc/p5-HTML-RewriteAttributes
  mail/p5-MIME-Types
  textproc/p5-Pod-Parser

PR:		218871
Submitted by:	mikael.urankar@gmail.com (maintainer)
Reported by:	info@rickvanderzwet.nl
5b993ce09d
Rene Ladan (rene) · 4.4.1
www/rt44: remove optional dependency on expired databases/p5-DBD-Oracle
b94208b869
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.4.1
Use real PORTVERSION and update dependent ports

- Add LICENSE_FILE
- Sort PLIST
f1351cf57c
Mathieu Arnold (mat) · 4.4.1
${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
eabbfd75e3
Pawel Pekala (pawel) · 4.4.1
Update to version 4.4.1

Changelog: https://docs.bestpractical.com/release-notes/rt/4.4.1

PR:		211404
Submitted by:	maintainer
c98bf9d55a
Dmitry Marakasov (amdmi3) · 4.4.0_1
- Add missing dependency on textproc/p5-CSS-Squish - While here, add LICENSE_FILE

PR:		210688
Submitted by:	mikael.urankar@gmail.com (maintainer)
Reported by:	farrokhi@FreeBSD.org
2f14aba600
Dmitry Marakasov (amdmi3) · 4.4.0
- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket
e87a8bd319
Kurt Jaeger (pi) · 4.4.0
www/rt44: beautify some CONFIG descriptions

PR:		208229
Suggested by:	danfe
31ca0fb846
Kurt Jaeger (pi) · 4.4.0
www/rt44: remove CONFLICTS_INSTALL on rt3.8

PR:		208229
Submitted by:	matthew
f20a578251
Kurt Jaeger (pi) · 4.4.0
www/rt44: re-surrect as repo-copy of rt42

PR:		208229
Submitted by:	mat
24bb95ec09
Kurt Jaeger (pi)
www/rt44: remove, and re-add after repo-copy

PR:		208229
Submitted by:	mat
a8f8e659fa
Kurt Jaeger (pi) · 4.4.0
New port: www/rt44

RT is a battle-tested issue tracking system which thousands of
organizations use for bug tracking, help desk ticketing, customer
service, workflow processes, change management, network operations,
youth counselling and even more. Organizations around the world have
been running smoothly thanks to RT for over 10 years.

WWW: http://www.bestpractical.com/rt/

PR:		208229
Submitted by:	mikael.urankar@gmail.com
2636a448b6