Version bump #491758. openid is now not optional, fixes security bug #507052. Drop vulnerable.

(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key F1989B07)

4 files changed, 18 insertions, 444 deletions

diff --git a/www-apps/redmine/ChangeLog b/www-apps/redmine/ChangeLog
index bd6eceb3f463..05be3c81153a 100644
--- a/www-apps/redmine/ChangeLog
+++ b/www-apps/redmine/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for www-apps/redmine
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/ChangeLog,v 1.40 2014/01/10 12:20:19 pva Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/ChangeLog,v 1.41 2014/06/01 18:11:37 pva Exp $
+
+  01 Jun 2014; Peter Volkov <pva@gentoo.org> -redmine-2.2.4.ebuild,
+  -redmine-2.3.2.ebuild, -redmine-2.3.4.ebuild, +redmine-2.4.5.ebuild:
+  Version bump #491758. openid is now not optional, fixes security bug #507052.
+  Drop vulnerable.
+
+*redmine-2.4.5 (01 Jun 2014)
+
+  01 Jun 2014; Peter Volkov <pva@gentoo.org> +redmine-2.4.5.ebuild:
+  Version bump #491758. openid is now not optional, fixes security bug #507052.
 
 *redmine-2.3.4 (10 Jan 2014)
 
diff --git a/www-apps/redmine/redmine-2.2.4.ebuild b/www-apps/redmine/redmine-2.2.4.ebuild
deleted file mode 100644
index e65e653ef30f..000000000000
--- a/www-apps/redmine/redmine-2.2.4.ebuild
+++ /dev/null
@@ -1,219 +0,0 @@
-# Copyright 1999-2014 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/redmine-2.2.4.ebuild,v 1.2 2014/01/08 06:12:53 vapier Exp $
-
-EAPI="4"
-USE_RUBY="ruby18 ruby19"
-inherit eutils depend.apache ruby-ng user
-
-DESCRIPTION="Redmine is a flexible project management web application written using Ruby on Rails framework"
-HOMEPAGE="http://www.redmine.org/"
-SRC_URI="mirror://rubyforge/${PN}/${P}.tar.gz"
-
-KEYWORDS="~amd64 ~x86"
-LICENSE="GPL-2"
-SLOT="0"
-# All db-related USEs are ineffective since we depend on rails
-# which depends on activerecord which depends on all ruby's db bindings
-#IUSE="ldap openid imagemagick postgres sqlite mysql fastcgi passenger"
-IUSE="ldap openid imagemagick fastcgi passenger"
-
-#RDEPEND="$(ruby_implementation_depend jruby '>=' -1.6.7)[ssl]"
-RDEPEND="
-	ruby_targets_ruby18? (
-		>=dev-ruby/fastercsv-1.5[ruby_targets_ruby18]
-	)"
-
-ruby_add_rdepend "virtual/ruby-ssl
-	virtual/rubygems
-	>=dev-ruby/rails-3.2.13:3.2
-	>=dev-ruby/jquery-rails-2.0.2
-	dev-ruby/i18n:0.6
-	>=dev-ruby/coderay-1.0.6
-	dev-ruby/builder:3
-	dev-ruby/rake
-	ldap? ( >=dev-ruby/ruby-net-ldap-0.3.1 )
-	openid? (
-		>=dev-ruby/ruby-openid-2.1.4
-		>=dev-ruby/rack-openid-0.2.1
-	)
-	imagemagick? ( >=dev-ruby/rmagick-2 )
-	fastcgi? ( dev-ruby/fcgi )
-	passenger? ( www-apache/passenger )"
-#	ruby_targets_ruby18? (
-#		>=dev-ruby/fastercsv-1.5
-#		postgres? ( >=dev-ruby/pg-0.11 )
-#		sqlite3? ( dev-ruby/sqlite3 )
-#		mysql? ( >=dev-ruby/mysql-ruby-2.8.1 )
-#	)
-#	ruby_targets_ruby19? (
-#		postgres? ( >=dev-ruby/pg-0.11 )
-#		sqlite3? ( dev-ruby/sqlite3 )
-#		mysql? ( dev-ruby/mysql2:0.3 )
-#	)
-#	ruby_targets_jruby? (
-#		dev-ruby/jruby-openssl
-#		>=dev-ruby/fastercsv-1.5
-#		mysql? ( dev-ruby/activerecord-jdbcmysql-adapter )
-#		postgres? ( dev-ruby/activerecord-jdbcpostgresql-adapter )
-#		sqlite3? ( dev-ruby/activerecord-jdbcsqlite3-adapter )
-#	)
-
-#ruby_add_bdepend ">=dev-ruby/rdoc-2.4.2
-#	yard
-#	test? (
-#		!ruby_targets_ruby19? (
-#			>=dev-ruby/shoulda-2.11
-#		)
-#		ruby_targets_ruby19? (
-#			dev-ruby/test-unit
-#		)
-#		ruby_targets_jruby? (
-#			dev-ruby/test-unit
-#		)
-#		=dev-ruby/mocha-0.12*
-#	)"
-
-REDMINE_DIR="/var/lib/${PN}"
-
-pkg_setup() {
-	enewgroup redmine
-	enewuser redmine -1 -1 "${REDMINE_DIR}" redmine
-}
-
-all_ruby_prepare() {
-	rm -r log files/delete.me || die
-
-	# bug #406605
-	rm .gitignore .hgignore || die
-
-	rm Gemfile config/preinitializer.rb || die
-
-	echo "CONFIG_PROTECT=\"${EPREFIX}${REDMINE_DIR}/config\"" > "${T}/50${PN}"
-	echo "CONFIG_PROTECT_MASK=\"${EPREFIX}${REDMINE_DIR}/config/locales ${EPREFIX}${REDMINE_DIR}/config/settings.yml\"" >> "${T}/50${PN}"
-
-	# remove openid module in case openid is disabled
-	use openid || rm -r lib/plugins/open_id_authentication || die
-	# remove ldap staff module to avoid #413779
-	use ldap || rm app/models/auth_source_ldap.rb || die
-}
-
-all_ruby_install() {
-	dodoc doc/{CHANGELOG,INSTALL,README_FOR_APP,RUNNING_TESTS,UPGRADING}
-	rm -fr doc || die
-	dodoc README.rdoc
-	rm README.rdoc || die
-
-	keepdir /var/log/${PN}
-	dosym /var/log/${PN}/ "${REDMINE_DIR}/log"
-
-	insinto "${REDMINE_DIR}"
-	doins -r .
-	keepdir "${REDMINE_DIR}/files"
-	keepdir "${REDMINE_DIR}/public/plugin_assets"
-
-	fowners -R redmine:redmine \
-		"${REDMINE_DIR}/config" \
-		"${REDMINE_DIR}/files" \
-		"${REDMINE_DIR}/public/plugin_assets" \
-		"${REDMINE_DIR}/tmp" \
-		/var/log/${PN}
-
-	fowners redmine:redmine "${REDMINE_DIR}"
-
-	# protect sensitive data, see bug #406605
-	fperms -R go-rwx \
-		"${REDMINE_DIR}/config" \
-		"${REDMINE_DIR}/files" \
-		"${REDMINE_DIR}/tmp" \
-		/var/log/${PN}
-
-	if use passenger; then
-		has_apache
-		insinto "${APACHE_VHOSTS_CONFDIR}"
-		doins "${FILESDIR}/10_redmine_vhost.conf"
-	else
-		newconfd "${FILESDIR}/${PN}.confd" ${PN}
-		newinitd "${FILESDIR}/${PN}-2.initd" ${PN}
-	fi
-	doenvd "${T}/50${PN}"
-}
-
-pkg_postinst() {
-	einfo
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/session_store.rb" -o -e "${EPREFIX}${REDMINE_DIR}/config/initializers/secret_token.rb" ]; then
-		elog "Execute the following command to upgrade environment:"
-		elog
-		elog "# emerge --config \"=${CATEGORY}/${PF}\""
-		elog
-		elog "For upgrade instructions take a look at:"
-		elog "http://www.redmine.org/wiki/redmine/RedmineUpgrade"
-	else
-		elog "Execute the following command to initlize environment:"
-		elog
-		elog "# cd ${EPREFIX}${REDMINE_DIR}"
-		elog "# cp config/database.yml.example config/database.yml"
-		elog "# \${EDITOR} config/database.yml"
-		elog "# chown redmine:redmine config/database.yml"
-		elog "# emerge --config \"=${CATEGORY}/${PF}\""
-		elog
-		elog "Installation notes are at official site"
-		elog "http://www.redmine.org/wiki/redmine/RedmineInstall"
-	fi
-	einfo
-}
-
-pkg_config() {
-	if [ ! -e "${EPREFIX}${REDMINE_DIR}/config/database.yml" ]; then
-		eerror "Copy ${EPREFIX}${REDMINE_DIR}/config/database.yml.example to ${EPREFIX}${REDMINE_DIR}/config/database.yml"
-		eerror "then edit this file in order to configure your database settings for \"production\" environment."
-		die
-	fi
-
-	local RAILS_ENV=${RAILS_ENV:-production}
-	if [ ! -L /usr/bin/ruby ]; then
-		eerror "/usr/bin/ruby is not a valid symlink to any ruby implementation."
-		eerror "Please update it via `eselect ruby`"
-		die
-	fi
-	local RUBY=${RUBY:-ruby}
-
-	cd "${EPREFIX}${REDMINE_DIR}" || die
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/session_store.rb" ]; then
-		einfo
-		einfo "Generating secret token."
-		einfo
-		rm config/initializers/session_store.rb || die
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake generate_secret_token || die
-	fi
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/secret_token.rb" ]; then
-		einfo
-		einfo "Upgrading database."
-		einfo
-
-		einfo "Migrating database."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake db:migrate || die
-		einfo "Upgrading the plugin migrations."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake redmine:plugins:migrate || die
-		einfo "Clear the cache and the existing sessions."
-		${RUBY} -S rake tmp:cache:clear || die
-		${RUBY} -S rake tmp:sessions:clear || die
-	else
-		einfo
-		einfo "Initializing database."
-		einfo
-
-		einfo "Generating a session store secret."
-		${RUBY} -S rake generate_secret_token || die
-		einfo "Creating the database structure."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake db:migrate || die
-		einfo "Populating database with default configuration dat."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake redmine:load_default_data || die
-		einfo
-		einfo "If you use sqlite3, please do not forget to change the ownership of the sqlite files."
-		einfo
-		einfo "# cd \"${EPREFIX}${REDMINE_DIR}\""
-		einfo "# chown redmine:redmine db/ db/*.sqlite3"
-		einfo
-	fi
-}
diff --git a/www-apps/redmine/redmine-2.3.2.ebuild b/www-apps/redmine/redmine-2.3.2.ebuild
deleted file mode 100644
index 52999c6fffc2..000000000000
--- a/www-apps/redmine/redmine-2.3.2.ebuild
+++ /dev/null
@@ -1,213 +0,0 @@
-# Copyright 1999-2014 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/redmine-2.3.2.ebuild,v 1.2 2014/01/08 06:12:53 vapier Exp $
-
-EAPI="4"
-USE_RUBY="ruby18 ruby19"
-inherit eutils depend.apache ruby-ng user
-
-DESCRIPTION="Redmine is a flexible project management web application written using Ruby on Rails framework"
-HOMEPAGE="http://www.redmine.org/"
-SRC_URI="mirror://rubyforge/${PN}/${P}.tar.gz"
-
-KEYWORDS="~amd64 ~x86"
-LICENSE="GPL-2"
-SLOT="0"
-# All db-related USEs are ineffective since we depend on rails
-# which depends on activerecord which depends on all ruby's db bindings
-#IUSE="ldap openid imagemagick postgres sqlite mysql fastcgi passenger"
-IUSE="ldap openid imagemagick fastcgi passenger"
-
-#RDEPEND="$(ruby_implementation_depend jruby '>=' -1.6.7)[ssl]"
-RDEPEND="
-	ruby_targets_ruby18? (
-		>=dev-ruby/fastercsv-1.5[ruby_targets_ruby18]
-	)"
-
-ruby_add_rdepend "virtual/ruby-ssl
-	virtual/rubygems
-	>=dev-ruby/rails-3.2.13:3.2
-	>=dev-ruby/jquery-rails-2.0.2
-	dev-ruby/i18n:0.6
-	>=dev-ruby/coderay-1.0.9
-	dev-ruby/builder:3
-	dev-ruby/rake
-	ldap? ( >=dev-ruby/ruby-net-ldap-0.3.1 )
-	openid? (
-		>=dev-ruby/ruby-openid-2.1.4
-		>=dev-ruby/rack-openid-0.2.1
-	)
-	imagemagick? ( >=dev-ruby/rmagick-2 )
-	fastcgi? ( dev-ruby/fcgi )
-	passenger? ( www-apache/passenger )"
-#	ruby_targets_ruby18? (
-#		>=dev-ruby/fastercsv-1.5
-#		postgres? ( >=dev-ruby/pg-0.11 )
-#		sqlite3? ( dev-ruby/sqlite3 )
-#		mysql? ( >=dev-ruby/mysql-ruby-2.8.1 )
-#	)
-#	ruby_targets_ruby19? (
-#		postgres? ( >=dev-ruby/pg-0.11 )
-#		sqlite3? ( dev-ruby/sqlite3 )
-#		mysql? ( dev-ruby/mysql2:0.3 )
-#	)
-#	ruby_targets_jruby? (
-#		dev-ruby/jruby-openssl
-#		>=dev-ruby/fastercsv-1.5
-#		mysql? ( dev-ruby/activerecord-jdbcmysql-adapter )
-#		postgres? ( dev-ruby/activerecord-jdbcpostgresql-adapter )
-#		sqlite3? ( dev-ruby/activerecord-jdbcsqlite3-adapter )
-#	)
-
-#ruby_add_bdepend ">=dev-ruby/rdoc-2.4.2
-#	dev-ruby/yard
-#	test? (
-#		>=dev-ruby/shoulda-3.3.2
-#		>=dev-ruby/mocha-0.13.3
-#		>=dev-ruby/capybara-2.0.0
-#		<dev-ruby/nokogiri-1.6.0
-#	)"
-
-REDMINE_DIR="/var/lib/${PN}"
-
-pkg_setup() {
-	enewgroup redmine
-	enewuser redmine -1 -1 "${REDMINE_DIR}" redmine
-}
-
-all_ruby_prepare() {
-	rm -r log files/delete.me || die
-
-	# bug #406605
-	rm .gitignore .hgignore || die
-
-	rm Gemfile config/preinitializer.rb || die
-
-	echo "CONFIG_PROTECT=\"${EPREFIX}${REDMINE_DIR}/config\"" > "${T}/50${PN}"
-	echo "CONFIG_PROTECT_MASK=\"${EPREFIX}${REDMINE_DIR}/config/locales ${EPREFIX}${REDMINE_DIR}/config/settings.yml\"" >> "${T}/50${PN}"
-
-	# remove openid module in case openid is disabled
-	use openid || rm -r lib/plugins/open_id_authentication || die
-	# remove ldap staff module to avoid #413779
-	use ldap || rm app/models/auth_source_ldap.rb || die
-}
-
-all_ruby_install() {
-	dodoc doc/{CHANGELOG,INSTALL,README_FOR_APP,RUNNING_TESTS,UPGRADING}
-	rm -fr doc || die
-	dodoc README.rdoc
-	rm README.rdoc || die
-
-	keepdir /var/log/${PN}
-	dosym /var/log/${PN}/ "${REDMINE_DIR}/log"
-
-	insinto "${REDMINE_DIR}"
-	doins -r .
-	keepdir "${REDMINE_DIR}/files"
-	keepdir "${REDMINE_DIR}/public/plugin_assets"
-
-	fowners -R redmine:redmine \
-		"${REDMINE_DIR}/config" \
-		"${REDMINE_DIR}/files" \
-		"${REDMINE_DIR}/public/plugin_assets" \
-		"${REDMINE_DIR}/tmp" \
-		/var/log/${PN}
-
-	fowners redmine:redmine "${REDMINE_DIR}"
-
-	# protect sensitive data, see bug #406605
-	fperms -R go-rwx \
-		"${REDMINE_DIR}/config" \
-		"${REDMINE_DIR}/files" \
-		"${REDMINE_DIR}/tmp" \
-		/var/log/${PN}
-
-	if use passenger; then
-		has_apache
-		insinto "${APACHE_VHOSTS_CONFDIR}"
-		doins "${FILESDIR}/10_redmine_vhost.conf"
-	else
-		newconfd "${FILESDIR}/${PN}.confd" ${PN}
-		newinitd "${FILESDIR}/${PN}-2.initd" ${PN}
-	fi
-	doenvd "${T}/50${PN}"
-}
-
-pkg_postinst() {
-	einfo
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/session_store.rb" -o -e "${EPREFIX}${REDMINE_DIR}/config/initializers/secret_token.rb" ]; then
-		elog "Execute the following command to upgrade environment:"
-		elog
-		elog "# emerge --config \"=${CATEGORY}/${PF}\""
-		elog
-		elog "For upgrade instructions take a look at:"
-		elog "http://www.redmine.org/wiki/redmine/RedmineUpgrade"
-	else
-		elog "Execute the following command to initlize environment:"
-		elog
-		elog "# cd ${EPREFIX}${REDMINE_DIR}"
-		elog "# cp config/database.yml.example config/database.yml"
-		elog "# \${EDITOR} config/database.yml"
-		elog "# chown redmine:redmine config/database.yml"
-		elog "# emerge --config \"=${CATEGORY}/${PF}\""
-		elog
-		elog "Installation notes are at official site"
-		elog "http://www.redmine.org/wiki/redmine/RedmineInstall"
-	fi
-	einfo
-}
-
-pkg_config() {
-	if [ ! -e "${EPREFIX}${REDMINE_DIR}/config/database.yml" ]; then
-		eerror "Copy ${EPREFIX}${REDMINE_DIR}/config/database.yml.example to ${EPREFIX}${REDMINE_DIR}/config/database.yml"
-		eerror "then edit this file in order to configure your database settings for \"production\" environment."
-		die
-	fi
-
-	local RAILS_ENV=${RAILS_ENV:-production}
-	if [ ! -L /usr/bin/ruby ]; then
-		eerror "/usr/bin/ruby is not a valid symlink to any ruby implementation."
-		eerror "Please update it via `eselect ruby`"
-		die
-	fi
-	local RUBY=${RUBY:-ruby}
-
-	cd "${EPREFIX}${REDMINE_DIR}" || die
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/session_store.rb" ]; then
-		einfo
-		einfo "Generating secret token."
-		einfo
-		rm config/initializers/session_store.rb || die
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake generate_secret_token || die
-	fi
-	if [ -e "${EPREFIX}${REDMINE_DIR}/config/initializers/secret_token.rb" ]; then
-		einfo
-		einfo "Upgrading database."
-		einfo
-
-		einfo "Migrating database."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake db:migrate || die
-		einfo "Upgrading the plugin migrations."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake redmine:plugins:migrate || die
-		einfo "Clear the cache and the existing sessions."
-		${RUBY} -S rake tmp:cache:clear || die
-		${RUBY} -S rake tmp:sessions:clear || die
-	else
-		einfo
-		einfo "Initializing database."
-		einfo
-
-		einfo "Generating a session store secret."
-		${RUBY} -S rake generate_secret_token || die
-		einfo "Creating the database structure."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake db:migrate || die
-		einfo "Populating database with default configuration dat."
-		RAILS_ENV="${RAILS_ENV}" ${RUBY} -S rake redmine:load_default_data || die
-		einfo
-		einfo "If you use sqlite3, please do not forget to change the ownership of the sqlite files."
-		einfo
-		einfo "# cd \"${EPREFIX}${REDMINE_DIR}\""
-		einfo "# chown redmine:redmine db/ db/*.sqlite3"
-		einfo
-	fi
-}
diff --git a/www-apps/redmine/redmine-2.3.4.ebuild b/www-apps/redmine/redmine-2.4.5.ebuild
index c943af36610b..aced128612d3 100644
--- a/www-apps/redmine/redmine-2.3.4.ebuild
+++ b/www-apps/redmine/redmine-2.4.5.ebuild
@@ -1,14 +1,14 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/redmine-2.3.4.ebuild,v 1.1 2014/01/10 12:20:20 pva Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/redmine/redmine-2.4.5.ebuild,v 1.1 2014/06/01 18:11:37 pva Exp $
 
-EAPI="4"
+EAPI="5"
 USE_RUBY="ruby18 ruby19"
 inherit eutils depend.apache ruby-ng user
 
 DESCRIPTION="Redmine is a flexible project management web application written using Ruby on Rails framework"
 HOMEPAGE="http://www.redmine.org/"
-SRC_URI="mirror://rubyforge/${PN}/${P}.tar.gz"
+SRC_URI="http://www.redmine.org/releases/${P}.tar.gz"
 
 KEYWORDS="~amd64 ~x86"
 LICENSE="GPL-2"
@@ -16,7 +16,7 @@ SLOT="0"
 # All db-related USEs are ineffective since we depend on rails
 # which depends on activerecord which depends on all ruby's db bindings
 #IUSE="ldap openid imagemagick postgres sqlite mysql fastcgi passenger"
-IUSE="ldap openid imagemagick fastcgi passenger"
+IUSE="ldap imagemagick fastcgi passenger"
 
 #RDEPEND="$(ruby_implementation_depend jruby '>=' -1.6.7)[ssl]"
 RDEPEND="
@@ -33,10 +33,8 @@ ruby_add_rdepend "virtual/ruby-ssl
 	dev-ruby/builder:3
 	dev-ruby/rake
 	ldap? ( >=dev-ruby/ruby-net-ldap-0.3.1 )
-	openid? (
-		>=dev-ruby/ruby-openid-2.1.4
-		>=dev-ruby/rack-openid-0.2.1
-	)
+	>=dev-ruby/ruby-openid-2.3.0
+	>=dev-ruby/rack-openid-0.2.1
 	imagemagick? ( >=dev-ruby/rmagick-2 )
 	fastcgi? ( dev-ruby/fcgi )
 	passenger? ( www-apache/passenger )"
@@ -86,9 +84,7 @@ all_ruby_prepare() {
 	echo "CONFIG_PROTECT=\"${EPREFIX}${REDMINE_DIR}/config\"" > "${T}/50${PN}"
 	echo "CONFIG_PROTECT_MASK=\"${EPREFIX}${REDMINE_DIR}/config/locales ${EPREFIX}${REDMINE_DIR}/config/settings.yml\"" >> "${T}/50${PN}"
 
-	# remove openid module in case openid is disabled
-	use openid || rm -r lib/plugins/open_id_authentication || die
-	# remove ldap staff module to avoid #413779
+	# remove ldap staff module if disabled to avoid #413779
 	use ldap || rm app/models/auth_source_ldap.rb || die
 }