Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 259624 - www-apps/dokuwiki ebuild rework
Summary: www-apps/dokuwiki ebuild rework
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal
Assignee: Lance Albertson (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on: CVE-2009-1960
Blocks:
  Show dependency tree
 
Reported: 2009-02-19 18:27 UTC by Opportunist
Modified: 2010-01-15 20:34 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Opportunist 2009-02-19 18:27:26 UTC
Release 2009-02-14
Flash Multiuploader
license selector  template authors need to make use of tpl_license()
compatibility fixes with Flash Player 10
internal changes to make farming easier
removed old upgrade plugins1) 
better support for non-default auth backends in ACL manager
jump to edited section after saving
much improved Japanese romanization
improved XMLRPC interface
improved search result display
many smaller feature enhancements
more plugin events
some performance optimizations
minor security enhancements
many, many bug fixes

http://www.splitbrain.org/projects/dokuwiki

Reproducible: Always
Comment 1 Elias Probst 2009-02-23 03:07:08 UTC
I just bumped the ebuild here locally and it works fine so far.

The ebuild could use some EAPI=2 rework like USE dependencies etc.
Comment 2 frilled 2009-04-02 13:28:13 UTC
This one could need a little love.
Comment 3 WOLfgang Schricker 2009-04-15 22:34:51 UTC
Hello,
where can I find this ebuild?
THX.
Comment 4 Elias Probst 2009-04-19 15:23:35 UTC
(In reply to comment #3)
> Hello,
> where can I find this ebuild?
> THX.
> 

There is no ebuild yet, just bump the current ebuild in a local overlay to the current version.

The depend.php eclass isn't ready yet for EAPI=2, so we'll have to stay with the usage of 'require_php_with_use' in the ebuild for now.

Moving to EAPI=2 (USE dependencies) would currently mean, giving up the dependencies defined in the eclass itself and redefining them in the ebuild. This would be IMHO way more an unproper design than sticking to EAPI=1 for now and using 'require_php_with_use'.

So in the end this means:
for having the most current release of dokuwiki in the portage tree, please just bump the old ebuild (20080505) which is now nearly 1 year old to 20090214.

Regards,
Elias P.
Comment 5 Philippe Chaintreuil 2009-06-03 13:50:57 UTC
Looks like there is a security patch from SplitBrain which replaces 2009-02-14 with 2009-02-14b.  I just added Gentoo bug #272431 to ask for that version bump.  This one can probably be closed and replaced with that one.
Comment 6 Alex Legler (RETIRED) archtester gentoo-dev Security 2009-06-29 09:20:48 UTC
+*dokuwiki-20090214b (29 Jun 2009)
+
+  29 Jun 2009; Alex Legler <a3li@gentoo.org> -dokuwiki-20080505.ebuild,
+  +dokuwiki-20090214b.ebuild:
+  Non-maintainer commit: Version bump for security bug 272431. amd64 stable.
+  Thanks to Philippe Chaintreuil for proposing an updated ebuild. Removing
+  vulnerable version in ~arch.
+

No reworking done, just bumping to fix the vulnerabilities.
Comment 7 Lance Albertson (RETIRED) gentoo-dev 2010-01-15 20:34:36 UTC
(In reply to comment #4)
> (In reply to comment #3)
> > Hello,
> > where can I find this ebuild?
> > THX.
> > 
> 
> There is no ebuild yet, just bump the current ebuild in a local overlay to the
> current version.
> 
> The depend.php eclass isn't ready yet for EAPI=2, so we'll have to stay with
> the usage of 'require_php_with_use' in the ebuild for now.
> 
> Moving to EAPI=2 (USE dependencies) would currently mean, giving up the
> dependencies defined in the eclass itself and redefining them in the ebuild.
> This would be IMHO way more an unproper design than sticking to EAPI=1 for now
> and using 'require_php_with_use'.
> 
> So in the end this means:
> for having the most current release of dokuwiki in the portage tree, please
> just bump the old ebuild (20080505) which is now nearly 1 year old to 20090214.

I agree with the remarks above as I'd rather wait for depend.php get EAPI=2 support instead of reworking the whole ebuild. I don't see any other ebuild in www-apps that are using EAPI=2 and removing 'require_php_with_use'. Reopen when that has changed and I'll fix the ebuild.

Thanks-