Thu Sep 26 14:52:24 2019 UTC ()
Update www-php-glpi to v9.4.4 (security and bugfix release); upstream
says:

You'll find below the changes of this bugfixes version:

- [security] Prevent account takeover vulnerability,
- [security] Prevent execution of XSS on rich text,
- fix cache key length issues,
- fix user picture removal at login,
- several fixes on recurring tickets,
- fix some transfer errors related to entities among others,
- and more!

The full changelog is available:
https://github.com/glpi-project/glpi/milestone/37?closed=1


(hauke)
diff -r1.8 -r1.9 pkgsrc/www/php-glpi/Makefile
diff -r1.6 -r1.7 pkgsrc/www/php-glpi/PLIST
diff -r1.7 -r1.8 pkgsrc/www/php-glpi/distinfo
cvs diff -r1.8 -r1.9 pkgsrc/www/php-glpi/Makefile (expand / switch to unified diff)

--- pkgsrc/www/php-glpi/Makefile 2019/07/02 12:23:41 1.8
+++ pkgsrc/www/php-glpi/Makefile 2019/09/26 14:52:24 1.9
@@ -1,17 +1,17 @@ @@ -1,17 +1,17 @@
1# $NetBSD: Makefile,v 1.8 2019/07/02 12:23:41 hauke Exp $ 1# $NetBSD: Makefile,v 1.9 2019/09/26 14:52:24 hauke Exp $
2 2
3DISTNAME= glpi-${GLPI_VERSION} 3DISTNAME= glpi-${GLPI_VERSION}
4GLPI_VERSION= 9.4.3 4GLPI_VERSION= 9.4.4
5CATEGORIES= www 5CATEGORIES= www
6 6
7MASTER_SITES= https://github.com/glpi-project/glpi/releases/download/${GLPI_VERSION}/ 7MASTER_SITES= https://github.com/glpi-project/glpi/releases/download/${GLPI_VERSION}/
8EXTRACT_SUFX= .tgz 8EXTRACT_SUFX= .tgz
9 9
10MAINTAINER= hauke@NetBSD.org 10MAINTAINER= hauke@NetBSD.org
11HOMEPAGE= http://glpi-project.org/ 11HOMEPAGE= http://glpi-project.org/
12COMMENT= IT inventory management software 12COMMENT= IT inventory management software
13LICENSE= gnu-gpl-v2 13LICENSE= gnu-gpl-v2
14 14
15DEPENDS+= ${PHP_PKG_PREFIX}-zlib>=5.4:../../archivers/php-zlib 15DEPENDS+= ${PHP_PKG_PREFIX}-zlib>=5.4:../../archivers/php-zlib
16DEPENDS+= ${PHP_PKG_PREFIX}-mbstring>=5.4:../../converters/php-mbstring 16DEPENDS+= ${PHP_PKG_PREFIX}-mbstring>=5.4:../../converters/php-mbstring
17DEPENDS+= ${PHP_PKG_PREFIX}-ldap>=5.4:../../databases/php-ldap 17DEPENDS+= ${PHP_PKG_PREFIX}-ldap>=5.4:../../databases/php-ldap
cvs diff -r1.6 -r1.7 pkgsrc/www/php-glpi/PLIST (expand / switch to unified diff)

--- pkgsrc/www/php-glpi/PLIST 2019/07/02 12:23:41 1.6
+++ pkgsrc/www/php-glpi/PLIST 2019/09/26 14:52:24 1.7
@@ -1,22 +1,23 @@ @@ -1,22 +1,23 @@
1@comment $NetBSD: PLIST,v 1.6 2019/07/02 12:23:41 hauke Exp $ 1@comment $NetBSD: PLIST,v 1.7 2019/09/26 14:52:24 hauke Exp $
2share/examples/glpi/crontab.sample 2share/examples/glpi/crontab.sample
3share/examples/glpi/httpd-glpi.conf 3share/examples/glpi/httpd-glpi.conf
4share/examples/glpi/local_define.php 4share/examples/glpi/local_define.php
5share/glpi/.htaccess 5share/glpi/.htaccess
6share/glpi/CHANGELOG.md 6share/glpi/CHANGELOG.md
7share/glpi/CONTRIBUTING.md 7share/glpi/CONTRIBUTING.md
8share/glpi/COPYING.txt 8share/glpi/COPYING.txt
9share/glpi/README.md 9share/glpi/README.md
 10share/glpi/SECURITY.md
10share/glpi/SUPPORT.md 11share/glpi/SUPPORT.md
11share/glpi/ajax/autocompletion.php 12share/glpi/ajax/autocompletion.php
12share/glpi/ajax/comments.php 13share/glpi/ajax/comments.php
13share/glpi/ajax/common.tabs.php 14share/glpi/ajax/common.tabs.php
14share/glpi/ajax/compareKbRevisions.php 15share/glpi/ajax/compareKbRevisions.php
15share/glpi/ajax/dcroom_size.php 16share/glpi/ajax/dcroom_size.php
16share/glpi/ajax/displayMessageAfterRedirect.php 17share/glpi/ajax/displayMessageAfterRedirect.php
17share/glpi/ajax/dropdownAllItems.php 18share/glpi/ajax/dropdownAllItems.php
18share/glpi/ajax/dropdownConnect.php 19share/glpi/ajax/dropdownConnect.php
19share/glpi/ajax/dropdownConnectNetworkPort.php 20share/glpi/ajax/dropdownConnectNetworkPort.php
20share/glpi/ajax/dropdownConnectNetworkPortDeviceType.php 21share/glpi/ajax/dropdownConnectNetworkPortDeviceType.php
21share/glpi/ajax/dropdownDelegationUsers.php 22share/glpi/ajax/dropdownDelegationUsers.php
22share/glpi/ajax/dropdownFieldsBlacklist.php 23share/glpi/ajax/dropdownFieldsBlacklist.php
cvs diff -r1.7 -r1.8 pkgsrc/www/php-glpi/distinfo (expand / switch to unified diff)

--- pkgsrc/www/php-glpi/distinfo 2019/07/02 12:23:41 1.7
+++ pkgsrc/www/php-glpi/distinfo 2019/09/26 14:52:24 1.8
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.7 2019/07/02 12:23:41 hauke Exp $ 1$NetBSD: distinfo,v 1.8 2019/09/26 14:52:24 hauke Exp $
2 2
3SHA1 (glpi-9.4.3.tgz) = 594121e47057d408393b6fbb101bafa6fb95941e 3SHA1 (glpi-9.4.4.tgz) = c27ef1ee25712ce1f44ba55bb56567497b91ca76
4RMD160 (glpi-9.4.3.tgz) = 6585bb0ece7b2c6ffb5975666c6e349c4a255eb2 4RMD160 (glpi-9.4.4.tgz) = 108040e86b3ff6d0a21236b41eec1eb1a18f7642
5SHA512 (glpi-9.4.3.tgz) = 235ca245e2178a075face1d530010b94fa5b9c9b15d582879c0beff5994442330d994d68683f867fca3829f1f5a8fd3ba60a94569af5a743f712d6f895c4bfd8 5SHA512 (glpi-9.4.4.tgz) = c1bd4a8512daf48eb079c8fbee3fe1a441611040a2431c0808050c795b00a3afe7b4456384d378969201d5367257bb60c597b3b584f82ea67e83d8dfa98d397a
6Size (glpi-9.4.3.tgz) = 34847591 bytes 6Size (glpi-9.4.4.tgz) = 34875134 bytes