rpms/roundup/F-10 bts518768-disable-editcsv.patch, NONE, 1.1 roundup.spec, 1.14, 1.15

[Paul P Komkoff Jr]

Author: stingray

Update of /cvs/extras/rpms/roundup/F-10
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv22890/F-10

Modified Files:
	roundup.spec 
Added Files:
	bts518768-disable-editcsv.patch 
Log Message:
Fix bz#489355

bts518768-disable-editcsv.patch:

--- NEW FILE bts518768-disable-editcsv.patch ---
--- a/roundup/cgi/actions.py
+++ b/roundup/cgi/actions.py
@@ -277,6 +277,8 @@
         removed lines are retired.
 
         """
+        self.client.error_message.append('EditCSVAction has been disabled for security reasons')
+        return
         cl = self.db.classes[self.classname]
         idlessprops = cl.getprops(protected=0).keys()
         idlessprops.sort()


Index: roundup.spec
===================================================================
RCS file: /cvs/extras/rpms/roundup/F-10/roundup.spec,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -r1.14 -r1.15
--- roundup.spec	3 Oct 2008 13:52:48 -0000	1.14
+++ roundup.spec	9 Mar 2009 17:47:32 -0000	1.15
@@ -3,7 +3,7 @@
 Summary: Simple and flexible issue-tracking system
 Name: roundup
 Version: 1.4.6
-Release: 1%{dist}
+Release: 4%{dist}
 License: MIT
 Group: Applications/Engineering
 Source: http://pypi.python.org/packages/source/r/%{name}/%{name}-%{version}.tar.gz
@@ -11,6 +11,7 @@
 Source2: roundup
 Source3: README.Fedora
 Patch0: roundup-setup.patch
+Patch1: bts518768-disable-editcsv.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildArch: noarch
 BuildRequires: python-devel
@@ -29,6 +30,7 @@
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1
 
 mv locale/ru.po locale/ru-koi8.po
 iconv -f koi8-r -t utf-8 locale/ru-koi8.po | sed -e 's|Content-Type: text/plain; charset=koi8-r|Content-Type: text/plain; charset=utf-8|' > locale/ru.po
@@ -81,6 +83,15 @@
 %doc README.Fedora COPYING.txt
 
 %changelog
+* Mon Mar  9 2009 Paul P. Komkoff Jr <i at stingr.net> - 1.4.6-4
+- security bug bz#489355
+
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.4.6-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
+* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm at gmail.com> - 1.4.6-2
+- Rebuild for Python 2.6
+
 * Fri Oct 3 2008 Paul P. Komkoff Jr <i at stingr.net> - 1.4.6-1
 - new upstream version