[ReviewBoard] New upstream security release 1.7.14

Stephen Gallagher sgallagh at fedoraproject.org
Mon Sep 23 11:45:57 UTC 2013


commit df95e906189337e878cac2e129d3171b9ebffdc0
Author: Stephen Gallagher <sgallagh at redhat.com>
Date:   Mon Sep 23 07:45:56 2013 -0400

    New upstream security release 1.7.14
    
    - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
    - Some API resources were accessible even if their parent resources were not,
      due to a missing check. In most cases, this was harmless, but it can affect
      those using access control on groups or review requests.

 .gitignore       |    1 +
 ReviewBoard.spec |   17 ++++++++++++++---
 sources          |    2 +-
 3 files changed, 16 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 5b37cd7..e8cfaba 100644
--- a/.gitignore
+++ b/.gitignore
@@ -38,3 +38,4 @@ ReviewBoard-1.5rc1.tar.gz
 /ReviewBoard-1.7.11.tar.gz
 /ReviewBoard-1.7.12.tar.gz
 /ReviewBoard-1.7.13.tar.gz
+/ReviewBoard-1.7.14.tar.gz
diff --git a/ReviewBoard.spec b/ReviewBoard.spec
index aec2ca8..6522e4a 100644
--- a/ReviewBoard.spec
+++ b/ReviewBoard.spec
@@ -1,10 +1,10 @@
 %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
 
-%global djblets_version 0.7.17
+%global djblets_version 0.7.18
 
 Name:           ReviewBoard
-Version:        1.7.13
-Release:        2%{?dist}
+Version:        1.7.14
+Release:        1%{?dist}
 Summary:        Web-based code review tool
 Group:          Applications/Internet
 License:        MIT
@@ -111,6 +111,10 @@ rm -f $RPM_BUILD_ROOT/%{python_sitelib}/%{name}*.egg-info/requires.txt
 rm -Rf $RPM_BUILD_ROOT/%{python_sitelib}/reviewboard/diffviewer/testdata \
        $RPM_BUILD_ROOT/%{python_sitelib}/reviewboard/scmtools/testdata
 
+# Make sure the sites file exists in the buildroot for file tests
+mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/reviewboard/
+touch  $RPM_BUILD_ROOT/%{_sysconfdir}/reviewboard/sites
+
 %clean
 rm -rf $RPM_BUILD_ROOT
 
@@ -137,6 +141,13 @@ if [ $1 -eq 2 ] ; then
 fi
 
 %changelog
+* Mon Sep 23 2013  Stephen Gallagher <sgallagh at redhat.com> - 1.7.14-1
+- New upstream security release 1.7.14
+- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
+- Some API resources were accessible even if their parent resources were not,
+  due to a missing check. In most cases, this was harmless, but it can affect
+  those using access control on groups or review requests.
+
 * Thu Aug 15 2013 Stephen Gallagher <sgallagh at redhat.com> - 1.7.13-2
 - New upstream release 1.7.13
 - http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
diff --git a/sources b/sources
index 43e6567..44e1a38 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-295192ef14ff2b9b63b40ef3f8ac1312  ReviewBoard-1.7.13.tar.gz
+3f4d7d35b1ca19c0be53cf30cd5a6cb2  ReviewBoard-1.7.14.tar.gz


More information about the scm-commits mailing list