www/rt44: Update to 4.4.925ce63fb55
RT -- CSV injectionentered 2025-10-23
Industrial-grade ticketing system written in Perl
bestpractical:rt from the portpkg audit reports nothing for this version.CVE-2015-7686, CVE-2016-6127, CVE-2017-5361, CVE-2017-5943, CVE-2017-5944
www/rt44: Update to 4.4.925ce63fb55
www/rt44: drop maintainershipe824dbf23e
www/rt44: Update to 4.4.8836676da96
databases/p5-DBD-mysql: Fix for MariaDB users Add a new variable DBD_MYSQL, use that in *_DEPENDS and add mysql to USES where required. DBD_MYSQL will automatically set the correct DBD dependency. In cd16748194e2 databases/p5-DBD-mysql was updated to 5.x, in 5.x the support for MariaDB was removed and only MySQL >= 8.0 is supported. In the 4.x releases MariaDB is still supported, according to upstream 4.x will still be supported for a while [1], so use that for now when we detect that MYSQL_FLAVOUR is set to mariadb. databases/p5-DBD-mysql4 was added in d95f49cb3b54. DBD:MariaDB would be another alternative, but migrating to it might need more analysis than just staying with the 4.x releases of p5-DBD-mysql. This thread on the amavis-users mailing list has a very good summary [2] from the author of DBD:MariaDB. This includes ideas and suggestions from vvd and mat. Thanks! [1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277889#c17 [2] https://lists.amavis.org/pipermail/amavis-users/2024-March/006823.html PR: 275100, 277889 Reviewed by: vvd, mat Fixes: cd16748194e2 Differential Revision: https://reviews.freebsd.org/D4466292a030dffd
www/rt44: Update to 4.4.7 Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.7c2238ca058
www/rt44: Fix vulnerabilities
The following issues are addressed with these security updates:
- RT is vulnerable to unvalidated email headers in incoming email and the
mail-gateway REST interface.
This vulnerability is assigned CVE-2023-41259.
- RT is vulnerable to information leakage via response messages returned from
requests sent via the mail-gateway REST interface.
This vulnerability is assigned CVE-2023-41260.
- RT 5.0 is vulnerable to information leakage via transaction searches made by
authenticated users in the transaction query builder.
This vulnerability is assigned CVE-2023-45024.
- RT 5.0 can reveal information about data on various RT objects in errors and
other response messages to REST 2 requests.c2ce69e2f5Mk/Uses/apache.mk: Refactor after removal of older versions apache22 and apache25 had been removed a long time ago however the apache.mk file has never been refactored and is out of sync from the file Mk/bsd.default-versions.mk. These changes refactors the removals of the older versions. In addition: - Move some keywords like USE_APACHE, USE_APACHE_BUILD, USE_APACHE_RUN from SANITY_DEPRECATED to SANITY_UNSUPPORTED - Remove apache versions from ports Makefiles as currently there is only one available version in the tree. However the version checks are still valid and should work flawlessly whenever a new version is added. For example USES=apache:2.2+ are simply replaced with USES=apache. As currently there are no other versions available for test this could not be checked on it's own ground. - Update FOO_USE=APACHE=yes to FOO_USES=apache - Remove trailing whitespaces Approved by: portmgr Differential Revision: https://reviews.freebsd.org/D3811340843b1ccb
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
www/rt44: Update to 4.4.6 Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.63f9e4eef33
Mk/Uses/perl5.mk: Remove outdated P5_POD_PARSER lang/perl5.30 has been removed in b3fb5d8b3c860bd3c3ebcffafe621aea61379539.699f62d696
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL The conflict checks compare the patterns first against the package names without version (as reported by "pkg query "%n"), then - if there was no match - agsinst the full package names including the version (as reported by "pkg query "%n-%v"). Approved by: portmgr (blanket)5933ac0b09
www/rt44: Fix pkg-plist PR: 258555 Reported by: Christian Ullrichd075c71e44
www/rt44: Update to 4.4.5 - Update to 4.4.5 - Remove useless REINPLACE_CMD Changes: https://github.com/bestpractical/rt/releases/tag/rt-4.4.5fd09abd3c1
www/rt44: Use P5_POD_PARSER With hat: perl7631a75875
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
www/rt44: add dependency on textproc/p5-Pod-Parse Add dependency on textproc/p5-Pod-Parse: RT::Shredder::POD uses Pod::Select, which is provided by textproc/p5-Pod-Parser PR: 250197 Reported by: David Siebörger MFH: 2020Q4 (blanket: runtime fix)1f5de3bd60
www/rt44: drop devel/jsmin dependency, it's built-in in rt44 From the documentation, docs/UPGRADING-4.4: The support for C<jsmin> (via the C<$JSMinPath> configuration) has been removed in favor of a built-in solution.5027e256cf
www/rt40: cleanup - Remove CONFLICTS_INSTALL against rt40 which is long gone from ports. - Fix the documentation path. - Gratuitous whitespace fix. No functionnal changes48efae6906
Sanitize COMMENT per Section 5.6 of the FreeBSD Porter's Handbook (part 5).a7d9790791
Change my mail address to mikael@FreeBSD.org Approved by: manu (mentor) Differential Revision: https://reviews.freebsd.org/D23286cf809c9127
Convert to UCL & cleanup pkg-message (categories w)a400cfc5f4
Security update to 4.4.4 ReleaseNotes: https://docs.bestpractical.com/release-notes/rt/4.4.4 Submitted by: mikael.urankar@gmail.com (maintainer) MFH: 2019Q1 Security: 416ca0f4-3fe0-11e9-bbdd-6805ca0b3d42a9953344a9
www/rt44: update to v4.4.3 PR: 229828 Submitted by: mikael.urankar@gmail.com (maintainer)8b1e8e2ad0
For ports under `www' category: remove redundant PKGMESSAGE assignment, which is set appropriately by the b.p.m when `pkg-message' appears on the SUB_FILES list.ec5c5f26df
Bump PORTREVISION, forgotten in previous commit. PR: 222975215c6fba74
Always install SQL schema files irrespective of the setting of the DOCS option. Make increased use of options helpers to reduce the diff against www/rt42 PR: 222975 Submitted by: mikael.urankar@gmail.com (maintainer) Reported by: thomas@gibfest.dk7de166b63e
Update to 4.4.2 ChangeLog: https://docs.bestpractical.com/release-notes/rt/4.4.2 PR: 221583 Submitted by: mikael.urankar@gmail.com (maintainer)6a6e2876a4
Remove Perl core modules - Bump PORTREVISION for dependency change With hat: perlc4c9573bb9
Add security patches from BestPractical in lieu of the upcoming 4.4.2 release. See: http://lists.bestpractical.com/pipermail/rt-announce/\ 2017-June/000297.html PR: 220031 Approved by: mikael.urankar@gmail.com (maintainer) MFH: 2017Q2 Security: 7a92e958-5207-11e7-8d7c-6805ca0b3d420acd7bca75
Remove outdated PERL_LEVEL check With hat: perlc5ba32a764
www/rt44: add missing dependencies - Those were missing: devel/p5-Class-Accessor textproc/p5-HTML-RewriteAttributes mail/p5-MIME-Types textproc/p5-Pod-Parser PR: 218871 Submitted by: mikael.urankar@gmail.com (maintainer) Reported by: info@rickvanderzwet.nl5b993ce09d
www/rt44: remove optional dependency on expired databases/p5-DBD-Oracleb94208b869
Use real PORTVERSION and update dependent ports - Add LICENSE_FILE - Sort PLISTf1351cf57c
${RM} already has -f.
PR: 213570
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolighteabbfd75e3Update to version 4.4.1 Changelog: https://docs.bestpractical.com/release-notes/rt/4.4.1 PR: 211404 Submitted by: maintainerc98bf9d55a
- Add missing dependency on textproc/p5-CSS-Squish - While here, add LICENSE_FILE PR: 210688 Submitted by: mikael.urankar@gmail.com (maintainer) Reported by: farrokhi@FreeBSD.org2f14aba600
- Fix trailing whitespace in pkg-messages Approved by: portmgr blankete87a8bd319
www/rt44: beautify some CONFIG descriptions PR: 208229 Suggested by: danfe31ca0fb846
www/rt44: remove CONFLICTS_INSTALL on rt3.8 PR: 208229 Submitted by: matthewf20a578251
www/rt44: re-surrect as repo-copy of rt42 PR: 208229 Submitted by: mat24bb95ec09
www/rt44: remove, and re-add after repo-copy PR: 208229 Submitted by: mata8f8e659fa
New port: www/rt44 RT is a battle-tested issue tracking system which thousands of organizations use for bug tracking, help desk ticketing, customer service, workflow processes, change management, network operations, youth counselling and even more. Organizations around the world have been running smoothly thanks to RT for over 10 years. WWW: http://www.bestpractical.com/rt/ PR: 208229 Submitted by: mikael.urankar@gmail.com2636a448b6