Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package icingaweb2 for openSUSE:Factory 
checked in at 2021-07-12 21:40:39
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/icingaweb2 (Old)
 and      /work/SRC/openSUSE:Factory/.icingaweb2.new.2625 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "icingaweb2"

Mon Jul 12 21:40:39 2021 rev:21 rq:905847 version:2.8.3

Changes:
--------
--- /work/SRC/openSUSE:Factory/icingaweb2/icingaweb2.changes    2020-11-29 
12:31:06.210164527 +0100
+++ /work/SRC/openSUSE:Factory/.icingaweb2.new.2625/icingaweb2.changes  
2021-07-12 21:41:15.083628958 +0200
@@ -1,0 +2,16 @@
+Mon Jul 12 12:45:35 UTC 2021 - ecsos <ec...@opensuse.org>
+
+- Update to 2.8.3
+  * Security Fixes
+    This release includes two security related fixes.
+    Both were published as part of a security advisory on Github.
+    They allow the circumvention of custom variable protection
+    rules and blacklists as well as a path traversal if the doc
+    module is enabled. Please check the respective advisory for
+    details.
+    - Custom variable protection and blacklists can be circumvented
+      GHSA-2xv9-886q-p7xx
+    - Possible path traversal by use of the doc module
+      GHSA-cmgc-h4cx-3v43
+
+-------------------------------------------------------------------

Old:
----
  icingaweb2-2.8.2.tar.gz

New:
----
  icingaweb2-2.8.3.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ icingaweb2.spec ++++++
--- /var/tmp/diff_new_pack.6Gbvb1/_old  2021-07-12 21:41:15.759623630 +0200
+++ /var/tmp/diff_new_pack.6Gbvb1/_new  2021-07-12 21:41:15.763623599 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package icingaweb2
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 # Copyright (c) 2013-2017 Icinga Development Team | GPLv2+
 #
 # All modifications and additions to the file contributed by third parties
@@ -20,7 +20,7 @@
 %define revision 1
 
 Name:           icingaweb2
-Version:        2.8.2
+Version:        2.8.3
 Release:        %{revision}%{?dist}
 Summary:        Icinga Web 2
 License:        GPL-2.0-or-later AND MIT AND BSD-3-Clause

++++++ icingaweb2-2.8.2.tar.gz -> icingaweb2-2.8.3.tar.gz ++++++
/work/SRC/openSUSE:Factory/icingaweb2/icingaweb2-2.8.2.tar.gz 
/work/SRC/openSUSE:Factory/.icingaweb2.new.2625/icingaweb2-2.8.3.tar.gz differ: 
char 13, line 1

Reply via email to