Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package squidGuard for openSUSE:Factory checked in at 2021-06-15 16:38:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/squidGuard (Old) and /work/SRC/openSUSE:Factory/.squidGuard.new.32437 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "squidGuard" Tue Jun 15 16:38:08 2021 rev:32 rq:900116 version:1.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/squidGuard/squidGuard.changes 2020-06-19 17:26:13.248387932 +0200 +++ /work/SRC/openSUSE:Factory/.squidGuard.new.32437/squidGuard.changes 2021-06-15 16:38:48.689846707 +0200 @@ -1,0 +2,46 @@ +Wed Apr 28 12:51:38 UTC 2021 - Ferdinand Thiessen <[email protected]> + +- Update to debian maintained version 1.6.0: + * Add support for IPv6 protocol (as in squid 3.x) + * Bugfix: Convert special characters to fix XSS security problem. + * Move text files to UTF-8 format. + * Fix for missing content after percent sign + * Fix for working (only) with squid 3.4 and higher. +- Update to debian maintained version 1.5.1 + * Updated links in documentation and sample files. + * Use newer OpenLDAP search + * Enable 'ldap deprecated' flag. +- Update to debian maintained version 1.5.0 + * Fixed a problem with Berkeley DB 5.x + * Fixed inconsistent blocking. + * Added Russian translation to squidGuard.cgi.in + * Added a feature to send log messages to syslog + * Anonymized passwords (for connecting to the ldap or mysql + server) written to logfiles when squidGuard is starting. + * Added patch to check IP addresses against LDAP. + * Added patch to allow quoted strings in the configuration file + * Fixed a problem with regular expressions. + * Added patch to enable blocking against DNS based blacklists +- Update to debian maintained version 1.4.1 + * Fix of a bypass problem with URLs which length is close to + the limit defined by MAX_BUF in squidGuard and MAX_URL in + squid. Increasing the buffer limit to be higher than the one + defined in MAX_URL solves the issue. + * Fix of another bypass problem, which is related to the + definition of these buffer limits. + * Fix of one buffer overflow problem in sgLog.c when overlong + URLs are requested + * Fixes CVE-2009-3700, CVE-2009-3826 and CVE-2015-8936 +- Refreshed squidGuard-config.patch +- Refreshed default_config_pathfixes.patch +- Refreshed and renamed squidGuard-1.4-mysql.patch + to squidGuard-mysql.patch +- Dropped upstream fixed patches + * xss_fix_02_2015.patch + * squidGuard-CVE-2009-3826.patch + * squidGuard-CVE-2009-3700.patch + * squidGuard-1.4_upgrade.patch + * squidGuard-Makefile.patch + * type_fixes.patch + +------------------------------------------------------------------- Old: ---- squidGuard-1.4-mysql.patch squidGuard-1.4.tar.bz2 squidGuard-1.4_upgrade.patch squidGuard-CVE-2009-3700.patch squidGuard-CVE-2009-3826.patch squidGuard-Makefile.patch type_fixes.patch xss_fix_02_2015.patch New: ---- maintain_squidguard-upstream-1.6.0.tar.bz2 squidGuard-mysql.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ squidGuard.spec ++++++ --- /var/tmp/diff_new_pack.zJMIUa/_old 2021-06-15 16:38:49.333847822 +0200 +++ /var/tmp/diff_new_pack.zJMIUa/_new 2021-06-15 16:38:49.337847828 +0200 @@ -1,7 +1,7 @@ # # spec file for package squidGuard # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,26 +21,22 @@ %define sg_config %{_sysconfdir}/squidguard.conf %define cgidir /srv/www/cgi-bin %define imgdir /srv/www/htdocs/images +%define uname maintain_squidguard-upstream Name: squidGuard -Version: 1.4 +Version: 1.6.0 Release: 0 Summary: Filter plugin for squid License: GPL-2.0-only Group: Productivity/Networking/Web/Proxy URL: http://www.squidguard.org/ -Source0: %{name}-%{version}.tar.bz2 +# GIT-CLONE: https://salsa.debian.org/joowie-guest/maintain_squidguard +Source0: https://salsa.debian.org/joowie-guest/maintain_squidguard/-/archive/upstream/%{version}/%{uname}-%{version}.tar.bz2 Source1: README.SUSE Source2: squidGuard.logrotate Source3: blocked.gif -Patch0: squidGuard-Makefile.patch -Patch1: squidGuard-1.4-mysql.patch -Patch2: squidGuard-config.patch -Patch5: squidGuard-CVE-2009-3700.patch -Patch6: squidGuard-CVE-2009-3826.patch -Patch7: xss_fix_02_2015.patch -Patch8: squidGuard-1.4_upgrade.patch -Patch9: default_config_pathfixes.patch -Patch10: type_fixes.patch +Patch0: squidGuard-mysql.patch +Patch1: squidGuard-config.patch +Patch2: default_config_pathfixes.patch BuildRequires: bison BuildRequires: db-devel BuildRequires: flex @@ -69,19 +65,7 @@ and access controller plugin for squid. %prep -%setup -q -# remove autogenerated stuff -rm src/sgDiv.c contrib/sgclean/sgclean -%patch0 -%patch1 -p1 -%patch2 -%patch5 -p1 -%patch6 -p1 -%patch7 -p1 -%patch8 -p1 -%patch9 -p1 -%patch10 -p1 -find -type d | xargs chmod 755 +%autosetup -p1 -n %{uname}-%{version} cp %{SOURCE1} . # patch the test configs pushd test 1>/dev/null @@ -93,7 +77,7 @@ %build export CFLAGS="%{optflags} -fcommon" -gettextize +./autogen.sh %configure \ --with-squiduser=squid \ --with-mysql \ @@ -136,7 +120,7 @@ # install docu mkdir -p %{buildroot}/%{_defaultdocdir}/%{name} cp -r {contrib,doc,samples,test} %{buildroot}/%{_defaultdocdir}/%{name}/ -cp ANNOUNCE CHANGELOG FAQ ISSUES.txt README* %{buildroot}/%{_defaultdocdir}/%{name}/ +cp ANNOUNCE CHANGELOG FAQ README* %{buildroot}/%{_defaultdocdir}/%{name}/ %files %license GPL COPYING @@ -144,7 +128,6 @@ %doc %{_defaultdocdir}/%{name}/ANNOUNCE %doc %{_defaultdocdir}/%{name}/CHANGELOG %doc %{_defaultdocdir}/%{name}/FAQ -%doc %{_defaultdocdir}/%{name}/ISSUES.txt %doc %{_defaultdocdir}/%{name}/README* %attr(770, squid, squid) %dir %{_localstatedir}/lib/squidGuard %attr(770, squid, squid) %dir %{sg_dbhome} ++++++ default_config_pathfixes.patch ++++++ --- /var/tmp/diff_new_pack.zJMIUa/_old 2021-06-15 16:38:49.385847911 +0200 +++ /var/tmp/diff_new_pack.zJMIUa/_new 2021-06-15 16:38:49.385847911 +0200 @@ -1,17 +1,18 @@ -Index: squidGuard-1.4/samples/sample.conf.in -=================================================================== ---- squidGuard-1.4.orig/samples/sample.conf.in -+++ squidGuard-1.4/samples/sample.conf.in -@@ -53,9 +53,9 @@ dest local { +diff -Nur maintain_squidguard-upstream-1.6.0/samples/sample.conf.in new/samples/sample.conf.in +--- maintain_squidguard-upstream-1.6.0/samples/sample.conf.in 2019-02-02 18:16:21.000000000 +0100 ++++ new/samples/sample.conf.in 2021-04-28 15:51:31.891677192 +0200 +@@ -53,10 +53,10 @@ } dest adult { - domainlist dest/adult/domains - urllist dest/adult/urls - expressionlist dest/adult/expressions +- redirect http://admin.foo.bar.de/cgi-bin/blocked.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u + domainlist blacklist/domains + urllist blacklist/urls + expressionlist blacklist/expressions - redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u ++ redirect http://admin.foo.bar.de/cgi-bin/blocked.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u } + ++++++ squidGuard-config.patch ++++++ --- /var/tmp/diff_new_pack.zJMIUa/_old 2021-06-15 16:38:49.401847940 +0200 +++ /var/tmp/diff_new_pack.zJMIUa/_new 2021-06-15 16:38:49.401847940 +0200 @@ -1,8 +1,7 @@ -Index: src/sg.h.in -=================================================================== ---- src/sg.h.in.orig -+++ src/sg.h.in -@@ -79,9 +79,9 @@ int tolower(); +diff -Nur maintain_squidguard-upstream-1.6.0/src/sg.h.in new/src/sg.h.in +--- maintain_squidguard-upstream-1.6.0/src/sg.h.in 2019-02-02 18:16:21.000000000 +0100 ++++ new/src/sg.h.in 2021-04-28 15:46:46.404990723 +0200 +@@ -80,9 +80,9 @@ #define WARNING_LOGFILE "squidGuard.log" #define ERROR_LOGFILE "squidGuard.error" ++++++ squidGuard-mysql.patch ++++++ diff -Nur maintain_squidguard-upstream-1.6.0/configure.ac new/configure.ac --- maintain_squidguard-upstream-1.6.0/configure.ac 2019-02-02 18:16:21.000000000 +0100 +++ new/configure.ac 2021-04-28 15:16:25.219755738 +0200 @@ -297,7 +297,7 @@ fi else - for i in lib lib/mysql; do + for i in lib64 lib64/mysql lib lib/mysql; do str="$MYSQL_DIR/$i/libmysqlclient.*" for j in `echo $str`; do if test -r $j; then
