Bugzilla is one example of a class of programs called "Defect Tracking
Systems", or, more commonly, "Bug-Tracking Systems". Defect Tracking
Systems allow individual or groups of developers to keep track of
outstanding bugs in their product effectively.
Bugzilla has matured immensely, and now boasts many advanced features.
These include:
* integrated, product-based granular security schema
* inter-bug dependencies and dependency graphing
* advanced reporting capabilities
* a robust, stable RDBMS back-end
* extensive configurability
* a very well-understood and well-thought-out natural bug resolution
protocol
* email, XML, console, and HTTP APIs
* available integration with automated software configuration
management systems, including Perforce and CVS (through the
Bugzilla email interface and checkin/checkout scripts)
* too many more features to list
WWW: http://www.bugzilla.org/
===> The following configuration options are available for bugzilla40-4.0.13:
DOCS=on: Build and/or install documentation
MODPERL=off: mod_perl support
====> Options available for the group UI
PATCH_VIEWER=on: Patch Viewer
MORE_HTML=on: More HTML in Product/Group Descriptions
====> Database Engine
MYSQL=off: MySQL database support
PGSQL=off: PostgreSQL database support
====> Reports and Charts
GRAPHVIZ=off: Graphviz support
GRAPH_REPORTS=on: Graphical Reports
CHARTING_MODULES=on: Bug charting support
====> Attachment handling
BMP2PNG=off: BMP Attachments to PNGs
====> Email handling
INBOUND_EMAIL=off: Inbound Email
MAIL_QUEUEING=off: Mail Queueing
====> Web Services
XMLRPC=off: XML-RPC Interface
JSONRPC=off: JSON-RPC Interface
====> Alternative Authentication
LDAP=off: LDAP support
RADIUS=off: RADIUS protocol support
====> Administration
MOVE_BUGZ=off: Move Bugs Between Installations
EXPORT_IMPORT=off: Import/export bugs (via XML)
CONTRIB=on: Install user-contributed scripts
===> Use 'make config' to modify these settings
Remove expired ports:
2014-06-20 mail/sastatd: Superseded by sysutils/p5-Tail-Stat
2014-06-20 www/mod_ruby: Only for threadless ruby
2014-06-20 textproc/eruby: Only for threadless ruby, use ruby-gem erubis instead
2014-06-20 mail/p5-FuzzyOcr: Unmaintained upstream, no ports depending on it.
Use mail/p5-FuzzyOcr-devel instead
2014-06-21 devel/bugzilla40
2014-06-21 devel/bugzilla42
- distfiles where regenerated (wrong dependency list in the documentation)
- because there will no upstream fixes for CVE-2014-1517 mark bugzilla40 /
bugzilla42 forbidden and set expiration date to 2014-06-21
- fix the GRAPHVIZ OPTION
- bump PORTREVISION
MFH: 2014Q2
- update to 4.0.12, 4.2.8, 4.4.3
- move BINMODE to Makefile.common so it is also used in the language packs
Security: CVE-2014-1517
Security: 608ed765-c700-11e3-848c-20cf30e32f6d
Security: 60bfa396-c702-11e3-848c-20cf30e32f6d
- update to latest release [1]
- use PKGNAMESUFFIX instead LATEST_LINK
- whitespace cleanup
- svn mv */bugzilla to */bugzilla40
- add vuxml entry
4.4.1, 4.2.7, and 4.0.11 Security Advisory
Wednesday Oct 16th, 2013
Summary
=======
Bugzilla is a Web-based bug-tracking system used by a large number of
software projects. The following security issues have been discovered
in Bugzilla:
(Only the first 15 lines of the commit message are shown above )
