Hello community, here is the log from the commit of package cacti for openSUSE:Factory checked in at 2015-08-01 11:38:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cacti (Old) and /work/SRC/openSUSE:Factory/.cacti.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cacti" Changes: -------- --- /work/SRC/openSUSE:Factory/cacti/cacti.changes 2015-06-17 16:16:22.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.cacti.new/cacti.changes 2015-08-01 11:38:12.000000000 +0200 @@ -1,0 +2,31 @@ +Sun Jul 26 19:12:38 UTC 2015 - astieger@suse.com + +- cacti 0.8.8f: + * 0.8.8e Poller Script Parser is Broken + * cli/upgrade_database.php is missing releases + * Graph managment graphs.php save button does not work + * Poller Script Parser is Broken + +------------------------------------------------------------------- +Mon Jul 20 10:53:24 UTC 2015 - joop.boonen@opensuse.org + +- Fixed the spec file so the package also builds for el7, Fedora 20 > etc. + +------------------------------------------------------------------- +Sat Jul 18 17:37:49 UTC 2015 - astieger@suse.com + +- Update to 0.8.8e: + This update contains importand security fixes: [boo#937997] + - Multiple XSS and SQL injection vulnerabilities + - CVE-2015-4634 - SQL injection in graphs.php + Further fixes: + - Fixed issue with graph zooming failing to work + - Impossible to have a URL pointing directly to a graph + - Cannot delete data sources from the GUI + - viewing host in new tab - Undefined index: nodeid + - status_fail_date and status_rec_date are set incorrectly after + host is marked down + - Incorrect value in Hosts column on Host Templates page + - Incorrect row number in Devices -> (Edit) page + +------------------------------------------------------------------- Old: ---- cacti-0.8.8d.tar.gz New: ---- cacti-0.8.8f.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cacti.spec ++++++ --- /var/tmp/diff_new_pack.MA0cg7/_old 2015-08-01 11:38:13.000000000 +0200 +++ /var/tmp/diff_new_pack.MA0cg7/_new 2015-08-01 11:38:13.000000000 +0200 @@ -17,7 +17,7 @@ Name: cacti -Version: 0.8.8d +Version: 0.8.8f Release: 0.0 Summary: Web Front-End to Monitor System Data via RRDtool License: GPL-2.0+ @@ -81,8 +81,12 @@ %if 0%{?suse_version} %define apxs /usr/sbin/apxs2 %else +%if 0%{?rhel_version} >= 700 || 0%{?centos_version} >= 700 || 0%{?fedora_version} >= 20 +%define apxs /bin/apxs +%else %define apxs /usr/sbin/apxs %endif +%endif %define apache2_sysconfdir %(%{apxs} -q SYSCONFDIR) %if 0%{?suse_version} <= 1210 %define prefix %{_datadir}/cacti ++++++ cacti-0.8.8d.tar.gz -> cacti-0.8.8f.tar.gz ++++++ ++++ 19922 lines of diff (skipped)