Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package icingaweb2 for openSUSE:Factory checked in at 2026-10-28 17:50:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/icingaweb2 (Old) and /work/SRC/openSUSE:Factory/.icingaweb2.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "icingaweb2" Wed Oct 28 17:50:29 2026 rev:47 rq:1393435 version:2.14.1 Changes: -------- --- /work/SRC/openSUSE:Factory/icingaweb2/icingaweb2.changes 2026-10-01 16:44:20.638247554 +0200 +++ /work/SRC/openSUSE:Factory/.icingaweb2.new.2252680/icingaweb2.changes 2026-10-28 17:50:53.107963971 +0100 @@ -1,0 +2,52 @@ +Wed Oct 28 13:01:38 UTC 2026 - ecsos <[email protected]> - 2.14.1 + +- Update to 2.14.1 + * What's New + - You can find all issues related to this release on our Roadmap. + - This release requires Icinga PHP Library 1.1.0 or later. + * Security Fixes + - Remove the standalone chart endpoints to prevent file reads and denial of service GHSA-mph2-hvq4-8423 + - Match usernames literally in database and LDAP backends GHSA-jff6-vjrf-q9gj + - Escape navigation item labels in sidebar submenu headers GHSA-grpw-587v-93vw + - Restrict remembered device management to the user's own devices GHSA-fmf2-272p-p3r9 + * Password Policy Password Parameters Marked as Sensitive + - Modernize password policy #5537 + * Password Policy Moved to the Security Configuration + - Modernize password policy #5537 + * CSRF Protection for Config Forms + - Add CsrfCounterMeasure to ConfigForm #5552 + * CompatForm-based Repository Form + - Modernize repository form #5536 + * Sensitive Two-Factor Token + - Mark TwoFactor::verify() token parameter as sensitive #5559 + * ConfigFormEventsHook Deprecation + - Modernize password policy #5537 + * Default Theme Mode + - Add configurable default theme mode to theming configuration #5541 + - Add documentation about the default theme mode #5551 + * Fixes + - Handle a missing or unusable configuration database gracefully #5356 + - Let PDO decode PostgreSQL password hashes #5584 + - Support URLs whose scheme has no authority #5565 + - Reload on timezone/locale preference changes and after authentication #5540 + - Set baseTarget for user and group access-control list tabs #5558 + - Fix config form value & Simplify CspConfigForm #5533 + - Check for a preference store before accepting the primary submit button #5542 + - Guard TwoFactorHook::yieldMethods() #5543 + - Sync ipl\Html\Error::showTraces() with displayExceptions setting #5555 + - Avoid a null array offset when selecting the dashboard pane #5588 + - Fix logging level description in configuration #5566 + - Tell DbTool about the resource's TLS settings #5571 + - Add getCspForAllUsers() directives to every user's CSP #5595 + * Framework Changes + - Keep hook APIs needed by interface-based hooks supported #5585 + - Remove datetime picker behavior #5532 + - Add getCspForAllUsers() directives to every user's CSP #5595 + - Docs: Mention that RenderHooks should not be used anymore #5557 + * Documentation + - Documentation updates #5539 + - Improve database setup in the installation guide #5548 + - Fix broken documentation section links #5587 + - Remove the outdated contributing guide #5590 + +------------------------------------------------------------------- Old: ---- icingaweb2-2.14.0.tar.gz New: ---- icingaweb2-2.14.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ icingaweb2.spec ++++++ --- /var/tmp/diff_new_pack.NpBq5Z/_old 2026-10-28 17:50:53.886996576 +0100 +++ /var/tmp/diff_new_pack.NpBq5Z/_new 2026-10-28 17:50:53.888996660 +0100 @@ -18,7 +18,7 @@ %define php_major_version 8 Name: icingaweb2 -Version: 2.14.0 +Version: 2.14.1 Release: 0 Summary: Icinga Web License: GPL-3.0-only @@ -33,6 +33,7 @@ BuildRequires: nagios-rpm-macros Requires: apache2 Requires: icinga-l10n >= 1.1.0 +Requires: icinga-php-legacy >= 1.1.0 Requires: icingacli = %{version} Requires: icingaweb2-common = %{version} Requires: icingaweb2-module-monitoring >= 2.12.6 ++++++ icingaweb2-2.14.0.tar.gz -> icingaweb2-2.14.1.tar.gz ++++++ ++++ 13883 lines of diff (skipped)
