Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package icingaweb2 for openSUSE:Factory checked in at 2021-07-12 21:40:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/icingaweb2 (Old) and /work/SRC/openSUSE:Factory/.icingaweb2.new.2625 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "icingaweb2" Mon Jul 12 21:40:39 2021 rev:21 rq:905847 version:2.8.3 Changes: -------- --- /work/SRC/openSUSE:Factory/icingaweb2/icingaweb2.changes 2020-11-29 12:31:06.210164527 +0100 +++ /work/SRC/openSUSE:Factory/.icingaweb2.new.2625/icingaweb2.changes 2021-07-12 21:41:15.083628958 +0200 @@ -1,0 +2,16 @@ +Mon Jul 12 12:45:35 UTC 2021 - ecsos <ec...@opensuse.org> + +- Update to 2.8.3 + * Security Fixes + This release includes two security related fixes. + Both were published as part of a security advisory on Github. + They allow the circumvention of custom variable protection + rules and blacklists as well as a path traversal if the doc + module is enabled. Please check the respective advisory for + details. + - Custom variable protection and blacklists can be circumvented + GHSA-2xv9-886q-p7xx + - Possible path traversal by use of the doc module + GHSA-cmgc-h4cx-3v43 + +------------------------------------------------------------------- Old: ---- icingaweb2-2.8.2.tar.gz New: ---- icingaweb2-2.8.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ icingaweb2.spec ++++++ --- /var/tmp/diff_new_pack.6Gbvb1/_old 2021-07-12 21:41:15.759623630 +0200 +++ /var/tmp/diff_new_pack.6Gbvb1/_new 2021-07-12 21:41:15.763623599 +0200 @@ -1,7 +1,7 @@ # # spec file for package icingaweb2 # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # Copyright (c) 2013-2017 Icinga Development Team | GPLv2+ # # All modifications and additions to the file contributed by third parties @@ -20,7 +20,7 @@ %define revision 1 Name: icingaweb2 -Version: 2.8.2 +Version: 2.8.3 Release: %{revision}%{?dist} Summary: Icinga Web 2 License: GPL-2.0-or-later AND MIT AND BSD-3-Clause ++++++ icingaweb2-2.8.2.tar.gz -> icingaweb2-2.8.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/icingaweb2/icingaweb2-2.8.2.tar.gz /work/SRC/openSUSE:Factory/.icingaweb2.new.2625/icingaweb2-2.8.3.tar.gz differ: char 13, line 1