Hello community,
here is the log from the commit of package cacti for openSUSE:Factory checked
in at 2015-03-05 15:42:48
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cacti (Old)
and /work/SRC/openSUSE:Factory/.cacti.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cacti"
Changes:
--------
--- /work/SRC/openSUSE:Factory/cacti/cacti.changes 2014-04-14
12:25:49.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.cacti.new/cacti.changes 2015-03-05
18:17:02.000000000 +0100
@@ -1,0 +2,26 @@
+Mon Dec 8 11:25:49 UTC 2014 - aldemir.akpi...@gmail.com
+
+- Update to version 0.8.8c
+ - New features
+ - New graph tree view
+ - Updated graph list and graph preview
+ - Refactor graph tree view to remove GPL incompatible code
+ - Updated command line database upgrade utility
+ - Graph zooming now from everywhere
+ - Security fixes
+ - CVE-2013-5588 - XSS issue via installer or device editing
+ - CVE-2013-5589 - SQL injection vulnerability in device editing
+ - CVE-2014-2326 - XSS issue via CDEF editing
+ - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
+ - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
+ - CVE-2014-4002 - XSS issues in multiple files
+ - CVE-2014-5025 - XSS issue via data source editing
+ - CVE-2014-5026 - XSS issues in multiple files
+ - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with
0.8.8c.
+ - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
+ - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is
incorprated to cacti 0.8.8c
+ - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti
0.8.8c
+ - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to
/var/log/cacti
+ - Created cacti-0.8.8c-cacti-script.patch so that cacti uses
/usr/share/cacti/scripts
+
+-------------------------------------------------------------------
Old:
----
cacti-0.8.8b-cacti-log-path.patch
cacti-0.8.8b-cacti-script.patch
cacti-0.8.8b.tar.gz
cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch
cacti-0.8.8b_security.patch
New:
----
cacti-0.8.8c-cacti-log-path.patch
cacti-0.8.8c-cacti-script.patch
cacti-0.8.8c.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ cacti.spec ++++++
--- /var/tmp/diff_new_pack.98CypE/_old 2015-03-05 18:17:02.000000000 +0100
+++ /var/tmp/diff_new_pack.98CypE/_new 2015-03-05 18:17:02.000000000 +0100
@@ -1,7 +1,7 @@
#
# spec file for package cacti
#
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: cacti
-Version: 0.8.8b
+Version: 0.8.8c
Release: 0.0
Summary: Web Front-End to Monitor System Data via RRDtool
License: GPL-2.0+
@@ -35,10 +35,6 @@
Patch0: %{name}-%{version}-cacti-log-path.patch
# PATCH-FIX-OPENSUSE cacti-0.8.8-cacti-script.patch
Patch1: %{name}-%{version}-cacti-script.patch
-# PATCH-FIX-OPENSUSE cacti-0.8.8b_security.patch -- Fix security issues
-Patch2: cacti-0.8.8b_security.patch
-# PATCH-FIX-OPENSUSE cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch
-Patch3: cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch
Provides: cacti-system
%if 0%{?suse_version}
BuildRequires: apache2-devel
@@ -107,8 +103,6 @@
%setup -q
%patch0 -p1
%patch1 -p1
-%patch2 -p1
-%patch3 -p3
%build
#nothing to build
++++++ cacti-0.8.8c-cacti-log-path.patch ++++++
diff -Naur cacti-0.8.8c.org/include/global_settings.php
cacti-0.8.8c/include/global_settings.php
--- cacti-0.8.8c.org/include/global_settings.php 2014-11-23
15:18:57.000000000 -0500
+++ cacti-0.8.8c/include/global_settings.php 2014-12-08 06:19:56.370675820
-0500
@@ -96,9 +96,9 @@
),
"path_cactilog" => array(
"friendly_name" => "Cacti Log File Path",
- "description" => "The path to your Cacti log file (if
blank, defaults to <path_cacti>/log/cacti.log)",
+ "description" => "The path to your Cacti log file (if
blank, defaults to /var/log/cacti/cacti.log)",
"method" => "filepath",
- "default" => $config["base_path"] . "/log/cacti.log",
+ "default" => "/var/log/cacti/cacti.log",
"max_length" => "255"
),
"pollerpaths_header" => array(
diff -Naur cacti-0.8.8c.org/install/index.php cacti-0.8.8c/install/index.php
--- cacti-0.8.8c.org/install/index.php 2014-11-23 15:18:57.000000000 -0500
+++ cacti-0.8.8c/install/index.php 2014-12-08 06:20:43.386677933 -0500
@@ -267,7 +267,7 @@
if (config_value_exists("path_cactilog")) {
$input["path_cactilog"]["default"] =
read_config_option("path_cactilog");
} else {
- $input["path_cactilog"]["default"] = $config["base_path"] .
"/log/cacti.log";
+ $input["path_cactilog"]["default"] = "/var/log/cacti/cacti.log";
}
/* SNMP Version */
diff -Naur cacti-0.8.8c.org/lib/functions.php cacti-0.8.8c/lib/functions.php
--- cacti-0.8.8c.org/lib/functions.php 2014-11-23 15:18:57.000000000 -0500
+++ cacti-0.8.8c/lib/functions.php 2014-12-08 06:21:00.523678445 -0500
@@ -495,7 +495,7 @@
/* Log to Logfile */
if ((($logdestination == 1) || ($logdestination == 2)) &&
(read_config_option("log_verbosity") != POLLER_VERBOSITY_NONE)) {
if ($logfile == "") {
- $logfile = $config["base_path"] . "/log/cacti.log";
+ $logfile = "/var/log/cacti/cacti.log";
}
/* echo the data to the log (append) */
diff -Naur cacti-0.8.8c.org/utilities.php cacti-0.8.8c/utilities.php
--- cacti-0.8.8c.org/utilities.php 2014-11-23 15:18:57.000000000 -0500
+++ cacti-0.8.8c/utilities.php 2014-12-08 06:21:16.189679334 -0500
@@ -1024,7 +1024,7 @@
$logfile = read_config_option("path_cactilog");
if ($logfile == "") {
- $logfile = "./log/cacti.log";
+ $logfile = "/var/log/cacti/cacti.log";
}
html_start_box("<strong>Clear Cacti Log File</strong>", "100%", "",
"1", "center", "");
++++++ cacti-0.8.8c-cacti-script.patch ++++++
diff -Naur cacti-0.8.7i-PIA-3.1.orig/script_server.pl
cacti-0.8.7i-PIA-3.1/script_server.pl
--- cacti-0.8.7i-PIA-3.1.orig/script_server.pl 2010-12-04 22:11:33.000000000
+0100
+++ cacti-0.8.7i-PIA-3.1/script_server.pl 2011-12-14 00:20:25.000000000
+0100
@@ -1,4 +1,4 @@
-chdir("./scripts");
+chdir("/usr/share/cacti/scripts");
$loaded = 0;
while ($file = <*.pl>) {
next if $file eq $0;
++++++ cacti-0.8.8b.tar.gz -> cacti-0.8.8c.tar.gz ++++++
++++ 49309 lines of diff (skipped)
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
