Hello community,
here is the log from the commit of package cacti for openSUSE:Factory checked
in at 2020-04-13 12:53:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cacti (Old)
and /work/SRC/openSUSE:Factory/.cacti.new.3248 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cacti"
Mon Apr 13 12:53:32 2020 rev:30 rq:793394 version:1.2.11
Changes:
--------
--- /work/SRC/openSUSE:Factory/cacti/cacti.changes 2020-03-18
12:52:32.073215641 +0100
+++ /work/SRC/openSUSE:Factory/.cacti.new.3248/cacti.changes 2020-04-13
12:53:33.880655386 +0200
@@ -1,0 +2,24 @@
+Sat Apr 11 13:03:12 UTC 2020 - Andreas Stieger <andreas.stie...@gmx.de>
+
+- cacti 1.2.11:
+ * security fixes and hardening (boo#1169215)
+ + Add SameSite support for cookies
+ + Cookie should be properly verified against password
+ + CSRF at Admin Email
+ + Improper Access Control on disabling a user
+ + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
+ * a number of bug fixes
+ * feature additions
+ + Allow system uptime to be a variable for use with graphs
+ + Add Refresh Interval to Data Collectors display
+ + Add Location based filtering
+ + Allow for Purging of Data Source Statistics from the GUI
+ + Restore ability to duplicate a data profile
+ + Enhance table navigation bars to support systems with larger number of
items
+ + Increase length of Graph Item 'value' field to support pango-markup
better
+ + Allow Basic Auth Accounts to be mapped by CSV file
+ + Make form elements under checkbox_groups flow using flex grid style
+ + Set the domain attribute to secure cookies for the 'remember me' option
+ + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and
excess warnings
+
+-------------------------------------------------------------------
@@ -6 +30 @@
- remote code could be executed
+ remote code could be executed (boo#1164675)
Old:
----
cacti-1.2.10.tar.gz
New:
----
cacti-1.2.11.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ cacti.spec ++++++
--- /var/tmp/diff_new_pack.SKNmFR/_old 2020-04-13 12:53:34.596655698 +0200
+++ /var/tmp/diff_new_pack.SKNmFR/_new 2020-04-13 12:53:34.596655698 +0200
@@ -22,7 +22,7 @@
%define cacti_dir %{apache_datadir}/cacti
%endif
Name: cacti
-Version: 1.2.10
+Version: 1.2.11
Release: 0
Summary: Web Front-End to Monitor System Data via RRDtool
License: GPL-2.0-or-later
++++++ cacti-1.2.10.tar.gz -> cacti-1.2.11.tar.gz ++++++
/work/SRC/openSUSE:Factory/cacti/cacti-1.2.10.tar.gz
/work/SRC/openSUSE:Factory/.cacti.new.3248/cacti-1.2.11.tar.gz differ: char 5,
line 1
++++++ cacti-config.patch ++++++
--- /var/tmp/diff_new_pack.SKNmFR/_old 2020-04-13 12:53:34.636655716 +0200
+++ /var/tmp/diff_new_pack.SKNmFR/_new 2020-04-13 12:53:34.636655716 +0200
@@ -1,6 +1,8 @@
---- cacti-1.2.3/include/config.php.old 2019-04-01 10:03:02.728491693 +0200
-+++ cacti-1.2.3/include/config.php 2019-04-01 10:09:33.589795006 +0200
-@@ -44,17 +44,17 @@
+Index: cacti-1.2.11/include/config.php
+===================================================================
+--- cacti-1.2.11.orig/include/config.php
++++ cacti-1.2.11/include/config.php
+@@ -44,17 +44,17 @@ $database_ssl_ca = '';
* must remain commented out.
*/
@@ -29,7 +31,7 @@
/*
* The poller_id of this system. set to `1` for the main cacti web server.
-@@ -69,19 +69,19 @@
+@@ -69,25 +69,25 @@ $poller_id = 1;
* would be set to `/cacti/`.
*/
@@ -44,6 +46,13 @@
+//$cacti_session_name = 'Cacti';
/*
+ * Default Cookie domain - The cookie domain to be used for Cacti
+ */
+
+-$cacti_cookie_domain = 'cacti.net';
++//$cacti_cookie_domain = 'cacti.net';
+
+ /*
* Save sessions to a database for load balancing
*/
