commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2020-11-05 21:54:49
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.11331 (New)
Package is "otrs"
Thu Nov 5 21:54:49 2020 rev:71 rq:846050 version:6.0.30
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2020-08-07
14:15:12.430156844 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.11331/otrs.changes 2020-11-05
21:55:51.756057012 +0100
@@ -1,0 +2,12 @@
+Wed Nov 4 16:47:26 UTC 2020 - ch...@computersalat.de
+
+- Update to 6.0.30
+ https://community.otrs.com/otrs-community-edition-6-patch-level-30/
+- fix for boo#1178434
+ * (CVE-2020-11022, CVE-2020-11023, OSA-2020-14)
+ Vulnerability in third-party library - jquery
+ OTRS uses jquery version 3.4.1, which is vulnerable to cross-site
+ scripting (XSS). For more information, please read following article
+ https://snyk.io/test/npm/jquery/3.4.1
+
+---
Old:
itsm-6.0.29.tar.bz2
otrs-6.0.29.tar.bz2
New:
itsm-6.0.30.tar.bz2
otrs-6.0.30.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.3Qyx2n/_old 2020-11-05 21:55:53.704052632 +0100
+++ /var/tmp/diff_new_pack.3Qyx2n/_new 2020-11-05 21:55:53.708052623 +0100
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.29
-%define itsm_ver 6.0.29
+%define otrs_ver 6.0.30
+%define itsm_ver 6.0.30
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-6.0.29.tar.bz2 -> itsm-6.0.30.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.29.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.11331/itsm-6.0.30.tar.bz2 differ: char 11,
line 1
++ otrs-6.0.29.tar.bz2 -> otrs-6.0.30.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-6.0.29.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.11331/otrs-6.0.30.tar.bz2 differ: char 11,
line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2020-08-07 14:12:48
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.3399 (New)
Package is "otrs"
Fri Aug 7 14:12:48 2020 rev:70 rq:824754 version:6.0.29
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2020-08-04
20:21:12.772987772 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.3399/otrs.changes 2020-08-07
14:15:12.430156844 +0200
@@ -1,0 +2,22 @@
+Mon Aug 3 14:25:06 UTC 2020 - ch...@computersalat.de
+
+- Update to 6.0.29
+ https://community.otrs.com/otrs-community-edition-6-patch-level-29/
+- fix for boo#1174830
+ * (CVE-2020-1776, OSA-2020-13)
+Information disclosure
+When an agent user is renamed or set to invalid the session
+belonging to the user is keept active. The session can not be used
+to access ticket data in the case the agent is invalid.
+- Update to 6.0.28
+ https://community.otrs.com/otrs-community-edition-6-patch-level-28/
+- fix for boo#1170764
+ * (CVE-2020-1774, OSA-2020-11)
+Information disclosure
+When user downloads PGP or S/MIME keys/certificates, exported file
+has same name for private and public keys. Therefore it’s possible
+to mix them and to send private key to the third-party instead of
+public key.
+- rebase otrs-CheckModules.patch
+
+---
Old:
itsm-6.0.27.tar.bz2
otrs-6.0.27.tar.bz2
New:
itsm-6.0.29.tar.bz2
otrs-6.0.29.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.kZXuHj/_old 2020-08-07 14:15:20.698157062 +0200
+++ /var/tmp/diff_new_pack.kZXuHj/_new 2020-08-07 14:15:20.702157062 +0200
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.27
-%define itsm_ver 6.0.27
+%define otrs_ver 6.0.29
+%define itsm_ver 6.0.29
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-6.0.27.tar.bz2 -> itsm-6.0.29.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.27.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.3399/itsm-6.0.29.tar.bz2 differ: char 11,
line 1
++ otrs-6.0.27.tar.bz2 -> otrs-6.0.29.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-6.0.27.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.3399/otrs-6.0.29.tar.bz2 differ: char 11,
line 1
++ otrs-CheckModules.patch ++
--- /var/tmp/diff_new_pack.kZXuHj/_old 2020-08-07 14:15:20.822157065 +0200
+++ /var/tmp/diff_new_pack.kZXuHj/_new 2020-08-07 14:15:20.822157065 +0200
@@ -2,7 +2,7 @@
===
--- bin/otrs.CheckModules.pl.orig
+++ bin/otrs.CheckModules.pl
-@@ -427,6 +427,17 @@ my @NeededModules = (
+@@ -438,6 +438,17 @@ my @NeededModules = (
},
},
{
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2020-08-04 20:21:03
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.3592 (New)
Package is "otrs"
Tue Aug 4 20:21:03 2020 rev:69 rq:824151 version:6.0.27
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2020-04-09
23:15:01.746229735 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.3592/otrs.changes 2020-08-04
20:21:12.772987772 +0200
@@ -1,0 +2,7 @@
+Sat Aug 1 12:32:06 UTC 2020 - ch...@computersalat.de
+
+- fix deps
+ * add missing perl(Moo)
+- add otrs-CheckModules.patch
+
+---
New:
otrs-CheckModules.patch
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.vHtZUO/_old 2020-08-04 20:21:14.108988118 +0200
+++ /var/tmp/diff_new_pack.vHtZUO/_new 2020-08-04 20:21:14.112988119 +0200
@@ -57,6 +57,8 @@
Patch1: %{name}-httpd_conf.patch
# PATCH-FIX-OPENSUSE -- don't test write permissions on bin/
Patch2: otrs-perm_test.patch
+# PATCH-FIX-OPENSUSE -- missing check for perl(Moo)
+Patch10:otrs-CheckModules.patch
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Requires(pre): coreutils
@@ -91,6 +93,7 @@
Requires: perl(Digest::SHA)
Requires: perl(LWP::UserAgent)
Requires: perl(List::Util::XS)
+Requires: perl(Moo)
Requires: perl(Net::DNS) >= 0.60
Requires: perl(Template)
Requires: perl(Template::Stash::XS)
@@ -180,6 +183,7 @@
%setup -q -n %{name}-%{otrs_ver} -a 1
%patch1
%patch2
+%patch10
### Is this critical ? (https://bugs.otrs.org/show_bug.cgi?id=12889)
# rpmlint: pem-certificate /srv/otrs/Kernel/cpan-lib/Mozilla/CA/cacert.pem
++ otrs-CheckModules.patch ++
Index: bin/otrs.CheckModules.pl
===
--- bin/otrs.CheckModules.pl.orig
+++ bin/otrs.CheckModules.pl
@@ -427,6 +427,17 @@ my @NeededModules = (
},
},
{
+Module=> 'Moo',
+Required => 1,
+Comment => 'Minimalist Object Orientation.',
+InstTypes => {
+aptget => 'libmoo-perl',
+emerge => 'dev-perl/Moo',
+zypper => 'perl-Moo',
+ports => 'perl/p5-moo',
+},
+},
+{
Module => 'Net::DNS',
Required => 1,
VersionsNotSupported => [
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2020-04-09 23:14:58 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new.3248 (New) Package is "otrs" Thu Apr 9 23:14:58 2020 rev:68 rq:792266 version:6.0.27 Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2019-12-29 15:50:01.275185094 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new.3248/otrs.changes 2020-04-09 23:15:01.746229735 +0200 @@ -1,0 +2,74 @@ +Tue Apr 7 21:54:05 UTC 2020 - ch...@computersalat.de + +- Update to 6.0.27 + https://community.otrs.com/otrs-community-edition-6-patch-level-27/ +- fix for + * boo#1168029 (CVE-2020-1773, OSA-2020-10) +Session / Password / Password token leak +An attacker with the ability to generate session IDs or password +reset tokens, either by being able to authenticate or by exploiting +OSA-2020-09, may be able to predict other users session IDs, +password reset tokens and automatically generated passwords. + * boo#1168029 (CVE-2020-1772, OSA-2020-09) +Information Disclosure +It’s possible to craft Lost Password requests with wildcards in +the Token value, which allows attacker to retrieve valid Token(s), +generated by users which already requested new passwords. + * boo#1168030 (CVE-2020-1771, OSA-2020-08) +Possible XSS in Customer user address book +Attacker is able craft an article with a link to the customer +address book with malicious content (JavaScript). When agent opens +the link, JavaScript code is executed due to the missing parameter +encoding. + * boo#1168031 (CVE-2020-1770, OSA-2020-07) +Information disclosure in support bundle files +Support bundle generated files could contain sensitive information +that might be unwanted to be disclosed. + * boo#1168032 (CVE-2020-1769, OSA-2020-06) +Autocomplete in the form login screens +In the login screens (in agent and customer interface), Username +and Password fields use autocomplete, which might be considered +as security issue. +- Update to 6.0.26 + https://community.otrs.com/otrs-community-edition-6-patch-level-26/ + * (CVE-2019-11358, OSA-2020-05) +Possible to send drafted messages as wrong agent +OTRS use jquery version 3.2.1, which is vulnerable to the prototype +pollution attack. For more information, please read following +article https://snyk.io/test/npm/jquery/3.2.1 + +--- +Mon Feb 3 15:16:24 UTC 2020 - Dominique Leuenberger + +- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to + shortcut through the -mini flavors. + +--- +Fri Jan 10 19:17:19 UTC 2020 - ch...@computersalat.de + +- Update to 6.0.25 + https://community.otrs.com/otrs-community-edition-6-patch-level-25/ +- fix for boo#1160663 + * (CVE-2020-1767, OSA-2020-03) +Possible to send drafted messages as wrong agent +Agent A is able to save a draft (i.e. for customer reply). Then +Agent B can open the draft, change the text completely and send +it in the name of Agent A. For the customer it will not be +visible that the message was sent by another agent. + * (CVE-2020-1766, OSA-2020-02) +Improper handling of uploaded inline images +Due to improper handling of uploaded images it is possible in very +unlikely and rare conditions to force the agents browser to execute +malicious javascript from a special crafted SVG file rendered as +inline jpg file. + * (CVE-2020-1765, OSA-2020-01) +Spoofing of From field in several screens +An improper control of parameters allows the spoofing of the from +fields of the following screens: +AgentTicketCompose, AgentTicketForward, AgentTicketBounce and +AgentTicketEmailOutbound + * run bin/otrs.Console.pl Maint::Config::Rebuild after the upgrade +- update itsm-update.sh + * add Reject for *6.0.?.opm files + +--- Old: itsm-6.0.24.tar.bz2 otrs-6.0.24.tar.bz2 New: itsm-6.0.27.tar.bz2 otrs-6.0.27.tar.bz2 Other differences: -- ++ otrs.spec ++ --- /var/tmp/diff_new_pack.F8XaKj/_old 2020-04-09 23:15:04.306231215 +0200 +++ /var/tmp/diff_new_pack.F8XaKj/_new 2020-04-09 23:15:04.306231215 +0200 @@ -1,7 +1,7 @@ # # spec file for package otrs # -# Copyright (c) 2019 SUSE LLC +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,8 +23,8 @@ Name: otrs -%define
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2019-12-29 15:49:43
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.6675 (New)
Package is "otrs"
Sun Dec 29 15:49:43 2019 rev:67 rq:759812 version:6.0.24
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2019-09-05
12:43:38.523463747 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.6675/otrs.changes 2019-12-29
15:50:01.275185094 +0100
@@ -1,0 +2,32 @@
+Sat Dec 28 18:16:25 UTC 2019 - ch...@computersalat.de
+
+- Update 6.0.24
+ https://community.otrs.com/otrs-community-edition-6-patch-level-24/
+- fix for boo#1157001
+ * (CVE-2019-18180, OSA-2019-15)
+Denial of service
+OTRS can be put into an endless loop by providing filenames with
+overly long extensions. This applies to the PostMaster
+(sending in email) and also upload
+(attaching files to mails, for example).
+ * (CVE-2019-18179, OSA-2019-14)
+Information Disclosure
+An attacker who is logged into OTRS as an agent is able to list
+tickets assigned to other agents, which are in the queue where
+attacker doesn’t have permissions.
+
+---
+Sun Nov 10 13:42:13 UTC 2019 - ch...@computersalat.de
+
+- Update to 6.0.23
+ https://community.otrs.com/otrs-community-edition-6-patch-level-23/
+- fix for boo#1156431
+ * (CVE-2019-16375, OSA-2019-13)
+Stored XXS
+An attacker who is logged into OTRS as an agent or customer user
+with appropriate permissions can create a carefully crafted
+string containing malicious JavaScript code as an article body.
+This malicious code is executed when an agent compose an answer
+to the original article.
+
+---
@@ -5 +37 @@
- https://community.otrs.com/release-notes-otrs-6-patch-level-22/
+ https://community.otrs.com/otrs-community-edition-6-patch-level-22/
Old:
itsm-6.0.22.tar.bz2
otrs-6.0.22.tar.bz2
New:
itsm-6.0.24.tar.bz2
otrs-6.0.24.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.Zym75V/_old 2019-12-29 15:50:04.207186431 +0100
+++ /var/tmp/diff_new_pack.Zym75V/_new 2019-12-29 15:50:04.207186431 +0100
@@ -1,7 +1,7 @@
#
# spec file for package otrs
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.22
-%define itsm_ver 6.0.22
+%define otrs_ver 6.0.24
+%define itsm_ver 6.0.24
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
@@ -245,6 +245,9 @@
# install OTRS base system
cp -a . %{buildroot}/${DESTROOT}
+# remove SECURITY.md
+rm -f %{buildroot}/${DESTROOT}/SECURITY.md
+
for configFile in .fetchmailrc .mailfilter .procmailrc; do
touch %{buildroot}/${DESTROOT}/${configFile}
done
@@ -387,7 +390,7 @@
%files
%defattr(-,root,root,-)
-%doc AUTHORS.md CHANGES.md COPYING* README* UPGRADING.SUSE
+%doc AUTHORS.md CHANGES.md COPYING* README* SECURITY.md UPGRADING.SUSE
%{otrs_root}/ARCHIVE
%{otrs_root}/RELEASE
%{otrs_root}/.bash_completion
++ itsm-6.0.22.tar.bz2 -> itsm-6.0.24.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.22.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.6675/itsm-6.0.24.tar.bz2 differ: char 11,
line 1
++ otrs-6.0.22.tar.bz2 -> otrs-6.0.24.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-6.0.22.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.6675/otrs-6.0.24.tar.bz2 differ: char 11,
line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2019-09-05 12:43:31
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.7948 (New)
Package is "otrs"
Thu Sep 5 12:43:31 2019 rev:66 rq:728241 version:6.0.22
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2019-07-23
22:36:12.958985765 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.7948/otrs.changes 2019-09-05
12:43:38.523463747 +0200
@@ -1,0 +2,6 @@
+Tue Sep 3 14:45:53 UTC 2019 - ch...@computersalat.de
+
+- Update to 6.0.22
+ https://community.otrs.com/release-notes-otrs-6-patch-level-22/
+
+---
Old:
itsm-6.0.20.tar.bz2
otrs-6.0.20.tar.bz2
New:
itsm-6.0.22.tar.bz2
otrs-6.0.22.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.WOsT1Y/_old 2019-09-05 12:43:40.567463347 +0200
+++ /var/tmp/diff_new_pack.WOsT1Y/_new 2019-09-05 12:43:40.571463346 +0200
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.20
-%define itsm_ver 6.0.20
+%define otrs_ver 6.0.22
+%define itsm_ver 6.0.22
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-6.0.20.tar.bz2 -> itsm-6.0.22.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.20.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.7948/itsm-6.0.22.tar.bz2 differ: char 11,
line 1
++ otrs-6.0.20.tar.bz2 -> otrs-6.0.22.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-6.0.20.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.7948/otrs-6.0.22.tar.bz2 differ: char 11,
line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2019-07-23 22:36:08
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.4126 (New)
Package is "otrs"
Tue Jul 23 22:36:08 2019 rev:65 rq:717673 version:6.0.20
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2019-07-02
15:18:23.886740556 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.4126/otrs.changes 2019-07-23
22:36:12.958985765 +0200
@@ -1,0 +2,25 @@
+Sat Jul 20 11:26:28 UTC 2019 - ch...@computersalat.de
+
+- Update to 6.0.20
+ https://community.otrs.com/release-notes-otrs-6-patch-level-20/
+- fix for boo#1141432
+ * (CVE-2019-13458, OSA-2019-12)
+Information Disclosure
+An attacker who is logged into OTRS as an agent user with
+appropriate permissions can leverage OTRS tags in templates in
+order to disclose hashed user passwords.
+- fix for boo#1141431
+ * (CVE-2019-13457, OSA-2019-11)
+Information Disclosure
+A customer user can use the search results to disclose information
+from their “company” tickets (with the same CustomerID), even when
+CustomerDisableCompanyTicketAccess setting is turned on.
+- fix for boo#1141430
+ * (CVE-2019-12746, OSA-2019-10)
+Session ID Disclosure
+A user logged into OTRS as an agent might unknowingly disclose
+their session ID by sharing the link of an embedded ticket article
+with third parties. This identifier can be then potentially abused
+in order to impersonate the agent user.
+
+---
Old:
itsm-6.0.19.tar.bz2
otrs-6.0.19.tar.bz2
New:
itsm-6.0.20.tar.bz2
otrs-6.0.20.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.qGNHT2/_old 2019-07-23 22:36:14.982985347 +0200
+++ /var/tmp/diff_new_pack.qGNHT2/_new 2019-07-23 22:36:15.002985343 +0200
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.19
-%define itsm_ver 6.0.19
+%define otrs_ver 6.0.20
+%define itsm_ver 6.0.20
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-6.0.19.tar.bz2 -> itsm-6.0.20.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.19.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.4126/itsm-6.0.20.tar.bz2 differ: char 11,
line 1
++ otrs-6.0.19.tar.bz2 -> otrs-6.0.20.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-6.0.19.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.4126/otrs-6.0.20.tar.bz2 differ: char 11,
line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2019-07-02 15:18:17
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.4615 (New)
Package is "otrs"
Tue Jul 2 15:18:17 2019 rev:64 rq:712523 version:6.0.19
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2019-03-26
15:40:51.668290233 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new.4615/otrs.changes 2019-07-02
15:18:23.886740556 +0200
@@ -1,0 +2,63 @@
+Sat Jun 29 10:55:31 UTC 2019 - ch...@computersalat.de
+
+- Update to 6.0.19
+ https://community.otrs.com/release-notes-otrs-6-patch-level-19/
+- fix for boo#1137614
+ * (CVE-2019-12497, OSA-2019-09)
+Information Disclosure
+In the customer or external frontend, personal information of agents
+can be disclosed like Name and mail address in external notes.
+- fix for boo#1137615
+ * (CVE-2019-12248, OSA-2019-08)
+Loading External Image Resources
+An attacker could send a malicious email to an OTRS system. If a
+logged in agent user quotes it, the email could cause the browser
+to load external image resources.
+- Update to 6.0.18
+ https://community.otrs.com/release-notes-otrs-6-patch-level-18/
+- fix for boo#1139406
+ * (CVE-2019-10066, OSA-2019-06)
+Stored XSS
+An attacker who is logged into OTRS as an agent with appropriate
+permissions may create a carefully crafted calendar appointment
+in order to cause execution of JavaScript in the context of OTRS.
+- fix for boo#1139406
+ * (CVE-2019-10067, OSA-2019-05)
+Reflected and Stored XSS
+An attacker who is logged into OTRS as an agent user with appropriate
+permissions may manipulate the URL to cause execution of JavaScript
+in the context of OTRS.
+- fix for boo#1139406
+ * (CVE-2019-9892, OSA-2019-04)
+XXE Processing
+An attacker who is logged into OTRS as an agent user with appropriate
+permissions may try to import carefully crafted Report Statistics XML
+that will result in reading of arbitrary files of OTRS filesystem.
+- Update to 6.0.17
+ https://community.otrs.com/release-notes-otrs-6-patch-level-17/
+- fix for boo#1129755
+ * (CVE-2019-9751, OSA-2019-02)
+XSS
+An attacker who is logged into OTRS as an admin user may manipulate
+the URL to cause execution of JavaScript in the context of OTRS.
+- rebase otrs-perm_test.patch
+
+---
+Sat Jun 22 22:33:42 UTC 2019 - ch...@computersalat.de
+
+- fix changes file (chronological order)
+- update missing CVE for OSA-2018-10, OSA-2019-01
+
+---
+Fri Feb 22 07:29:57 UTC 2019 - Franck Bui
+
+- Drop use of $FIRST_ARG in .spec
+
+ The use of $FIRST_ARG was probably required because of the
+ %service_* rpm macros were playing tricks with the shell positional
+ parameters. This is bad practice and error prones so let's assume
+ that no macros should do that anymore and hence it's safe to assume
+ that positional parameters remains unchanged after any rpm macro
+ call.
+
+---
@@ -24 +87 @@
- * (CVE-n/a, OSA-2019-01)
+ * (CVE-2019-9752, OSA-2019-01)
@@ -62 +125 @@
- * (CVE-n/a, OSA-2018-10)
+ * (CVE-2018-20800, OSA-2018-10)
Old:
itsm-6.0.16.tar.bz2
otrs-6.0.16.tar.bz2
New:
itsm-6.0.19.tar.bz2
otrs-6.0.19.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.hJmjPs/_old 2019-07-02 15:18:26.354744345 +0200
+++ /var/tmp/diff_new_pack.hJmjPs/_new 2019-07-02 15:18:26.358744352 +0200
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 6.0.16
-%define itsm_ver 6.0.16
+%define otrs_ver 6.0.19
+%define itsm_ver 6.0.19
%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
@@ -343,7 +343,7 @@
/usr/sbin/a2enmod version >/dev/null
%endif
# Update ?
-if [ ${FIRST_ARG:-0} -gt 1 ]; then
+if [ $1 -gt 1 ]; then
# OTRS_ROOT changed from /opt to /srv
if [ -f /opt/%{name}/Kernel/Config.pm.rpmsave ]; then
mv /opt/%{name}/Kernel/Config.pm.rpmsave %{otrs_root}/Kernel/
@@ -355,7 +355,7 @@
fi
fi
# if rpm is not in update mode
-if ! [ ${FIRST_ARG:-0} -gt 1 ]; then
+if ! [ $1 -gt 1 ]; then
if [ -z "${YAST_IS_RUNNING}" ]; then
if [ -n "$LC_ALL" ]; then
lang="$LC_ALL"
++ itsm-6.0.16.tar.bz2 -> itsm-6.0.19.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-6.0.16.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.4615/itsm-6.0.19.tar.bz2 differ: char 11,
line 1
++
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2019-03-26 15:39:47
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.25356 (New)
Package is "otrs"
Tue Mar 26 15:39:47 2019 rev:63 rq:682270 version:6.0.16
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2018-12-03
10:11:12.747663410 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new.25356/otrs.changes 2019-03-26
15:40:51.668290233 +0100
@@ -1,0 +2,55 @@
+Sat Feb 2 20:16:27 UTC 2019 - Jan Engelhardt
+
+- Do not hide errors from useradd.
+- Remove pointless groupadd/useradd in %build (this always fails,
+ and the error is always ignored).
+- Replace %__-type macro indirections. Replace old $RPM_*
+ shell vars.
+- Trim redundant metadata from description.
+- Switch out strong PreReq by more lenient Requires(pre,post).
+
+---
+Thu Jan 31 22:13:49 UTC 2019 - ch...@computersalat.de
+
+- update rpmlintrc
+ * disable setBadness('permissions-unauthorized-file', 333)
+
+---
+Tue Jan 29 15:16:30 UTC 2019 - ch...@computersalat.de
+
+- Update to 6.0.16
+ https://community.otrs.com/release-notes-otrs-faq-6-patch-level-16/
+- fix for boo#1122560
+ * (CVE-n/a, OSA-2019-01)
+Stored XSS
+An attacker who is logged into OTRS as an agent or a customer user
+may upload a carefully crafted resource in order to cause execution
+of JavaScript in the context of OTRS.
+- Update to 6.0.15
+ https://community.otrs.com/release-notes-otrs-faq-6-patch-level-15/
+- fix typo in itsm.README
+- fix permissions
+ * add missing trailing /
+- rework rpmlintrc
+ * addFilter pem-certificate
+ * keep permissions-unauthorized-file for other DISTS than Factory
+
+---
+Sat Dec 1 20:27:14 UTC 2018 - ch...@computersalat.de
+
+- Update to 6.0.14
+ https://community.otrs.com/release-notes-otrs-faq-6-patch-level-14/
+- fix Url
+- update License: AGPL-3.0-only -> GPL-3.0-or-later
+- improve itsm-update.sh
+- rebase otrs-perm_test.patch
+- update
+ * UPGRADING.SUSE
+ * ZZZAuto.pm
+ * otrs.README.de
+ * otrs.README.en
+- remove SysVinit stuff and scripts
+ * otrs.init
+- rework permissions handling vor @OTRS_ROOT@/var/tmp
+
+---
Old:
itsm-5.0.32.tar.bz2
otrs-5.0.32.tar.bz2
otrs.init
New:
itsm-6.0.16.tar.bz2
otrs-6.0.16.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.qwnFYl/_old 2019-03-26 15:40:56.908288149 +0100
+++ /var/tmp/diff_new_pack.qwnFYl/_new 2019-03-26 15:40:56.912288148 +0100
@@ -1,7 +1,7 @@
#
# spec file for package otrs
#
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -23,19 +23,19 @@
Name: otrs
-%define otrs_ver 5.0.32
-%define itsm_ver 5.0.32
-%define itsm_min 5
+%define otrs_ver 6.0.16
+%define itsm_ver 6.0.16
+%define itsm_min 6
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
%define otrsdocs CHANGES* doc
Summary:The Open Ticket Request System
-License:AGPL-3.0-only
+License:GPL-3.0-or-later
Group: Productivity/Networking/Email/Utilities
Version:%{otrs_ver}
Release:0
-Url:http://otrs.org/
+URL:https://community.otrs.com/
AutoReqProv:off
Source: ftp://ftp.otrs.org/pub/otrs/%{name}-%{otrs_ver}.tar.bz2
Source1:itsm-%{itsm_ver}.tar.bz2
@@ -51,9 +51,6 @@
Source17: UPGRADING.SUSE
Source20: %{name}.service
Source21: %{name}.service.helper.sh
-#Source22: %{name}-scheduler.service
-Source23: %{name}.init
-#Source24: %{name}-scheduler.init
#
Source99: itsm-update.sh
# PATCH-FIX-OPENSUSE -- VARS for conf and fix for apache >= 2.4
@@ -62,20 +59,23 @@
Patch2: otrs-perm_test.patch
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-PreReq: %insserv_prereq %fillup_prereq
-PreReq: coreutils mktemp net-tools pwdutils
-PreReq: grep sed
-PreReq: apache2
+Requires(pre): coreutils
Requires(pre): permissions
+Requires(pre): shadow
+Requires(post): %fillup_prereq
+Requires(post): apache2
+Requires(post): coreutils
+Requires(post): sed
+Requires(post): shadow
BuildRequires:
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2018-12-03 10:10:41
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new.19453 (New)
Package is "otrs"
Mon Dec 3 10:10:41 2018 rev:62 rq:653199 version:5.0.32
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2018-10-01
08:17:30.209964568 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new.19453/otrs.changes 2018-12-03
10:11:12.747663410 +0100
@@ -1,0 +2,22 @@
+Thu Nov 29 14:46:21 UTC 2018 - ch...@computersalat.de
+
+- Update to 5.0.32
+ * https://community.otrs.com/release-notes-otrs-5s-patch-level-32/
+- fix for boo#1116004
+ * (CVE-n/a, OSA-2018-10)
+Data loss during migration
+Users updating to OTRS 6.0.13 (also patchlevel updates) or 5.0.31
+(only major updates) will experience data loss in their agent
+preferences table.
+- fix for boo#1115416
+ * (CVE-2018-19141, OSA-2018-09)
+Privilege Escalation
+An attacker who is logged into OTRS as an admin user may manipulate
+the URL to cause execution of JavaScript in the context of OTRS.
+ * (CVE-2018-19143, OSA-2018-07)
+Remote File Deletion
+An attacker who is logged into OTRS as a user may manipulate the
+submission form to cause deletion of arbitrary files that the
+OTRS web server user has write access to.
+
+---
Old:
itsm-5.0.30.tar.bz2
otrs-5.0.30.tar.bz2
New:
itsm-5.0.32.tar.bz2
otrs-5.0.32.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.y15xvj/_old 2018-12-03 10:11:14.695661608 +0100
+++ /var/tmp/diff_new_pack.y15xvj/_new 2018-12-03 10:11:14.699661605 +0100
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 5.0.30
-%define itsm_ver 5.0.30
+%define otrs_ver 5.0.32
+%define itsm_ver 5.0.32
%define itsm_min 5
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-5.0.30.tar.bz2 -> itsm-5.0.32.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-5.0.30.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.19453/itsm-5.0.32.tar.bz2 differ: char 11,
line 1
++ otrs-5.0.30.tar.bz2 -> otrs-5.0.32.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-5.0.30.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new.19453/otrs-5.0.32.tar.bz2 differ: char 11,
line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2018-10-01 08:17:16
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Mon Oct 1 08:17:16 2018 rev:61 rq:638524 version:5.0.30
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2018-07-18
22:54:28.874853195 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2018-10-01
08:17:30.209964568 +0200
@@ -1,0 +2,24 @@
+Wed Sep 26 13:33:59 UTC 2018 - ch...@computersalat.de
+
+- Update to 5.0.30
+ * https://community.otrs.com/release-notes-otrs-5s-patch-level-30/
+ * https://community.otrs.com/release-notes-otrs-5s-patch-level-29/
+- fix for boo#1109822 (CVE-2018-16586, OSA-2018-05)
+ * Loading External Image or CSS Resources
+An attacker could send a malicious email to an OTRS system. If a
+logged in user opens it, the email could cause the browser to
+load external image or CSS resources.
+- fix for boo#1109823 (CVE-2018-16587, OSA-2018-04)
+ * Remote File Deletion
+An attacker could send a malicious email to an OTRS system. If a user
+with admin permissions opens it, it causes deletions of arbitrary
+files that the OTRS web server user has write access to.
+- fix for boo#1103800 (CVE-2018-14593, OSA-2018-03)
+ * Privilege Escalation
+An attacker who is logged into OTRS as a user may escalate their
+privileges by accessing a specially crafted URL.
+- improve itsm-update.sh
+- fix permissions file
+ * @OTRS_ROOT@/var/tmp -> @OTRS_ROOT@/var/tmp/
+
+---
Old:
itsm-5.0.28.tar.bz2
otrs-5.0.28.tar.bz2
New:
itsm-5.0.30.tar.bz2
otrs-5.0.30.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.rpSRPp/_old 2018-10-01 08:17:31.745963585 +0200
+++ /var/tmp/diff_new_pack.rpSRPp/_new 2018-10-01 08:17:31.745963585 +0200
@@ -12,7 +12,7 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 5.0.28
-%define itsm_ver 5.0.28
+%define otrs_ver 5.0.30
+%define itsm_ver 5.0.30
%define itsm_min 5
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-5.0.28.tar.bz2 -> itsm-5.0.30.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-5.0.28.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/itsm-5.0.30.tar.bz2 differ: char 11, line 1
++ itsm-update.sh ++
--- /var/tmp/diff_new_pack.rpSRPp/_old 2018-10-01 08:17:31.805963547 +0200
+++ /var/tmp/diff_new_pack.rpSRPp/_new 2018-10-01 08:17:31.805963547 +0200
@@ -33,9 +33,11 @@
else
mkdir -p itsm-${VERSION}
fi
+else
+mv itsm-${MAJOR}.${MINOR}.${PPATCH} itsm-${VERSION}
fi
fi
-cd itsm-${VERSION}/
+cd itsm-${VERSION}/ || exit 1
# get INSTALL file
wget -nH --cut-dirs=3 -m \
++ otrs-5.0.28.tar.bz2 -> otrs-5.0.30.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-5.0.28.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-5.0.30.tar.bz2 differ: char 11, line 1
++ otrs.permissions ++
--- /var/tmp/diff_new_pack.rpSRPp/_old 2018-10-01 08:17:31.885963496 +0200
+++ /var/tmp/diff_new_pack.rpSRPp/_new 2018-10-01 08:17:31.885963496 +0200
@@ -1,4 +1,4 @@
### DBUpdate-to-y.pl is going to write there
#@OTRS_ROOT@/Kernel/Config/Files wwwrun:www 2775
#@OTRS_ROOT@/var/log otrs:www2775
-@OTRS_ROOT@/var/tmp wwwrun:www 2770
+@OTRS_ROOT@/var/tmp/ wwwrun:www 2770
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2018-07-18 22:53:58
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Wed Jul 18 22:53:58 2018 rev:60 rq:622090 version:5.0.28
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2018-01-25
12:40:14.299510251 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2018-07-18
22:54:28.874853195 +0200
@@ -1,0 +2,10 @@
+Wed Jul 11 14:07:48 UTC 2018 - ch...@computersalat.de
+
+- Update to 5.0.28
+ * Renamed 'OTRS Free' to '((OTRS)) Community Edition'.
+ * https://github.com/OTRS/otrs/blob/rel-5_0_28/CHANGES.md
+- improve itsm-update.sh
+- fix otrs.service
+ * remove otrs-scheduler.service from [Unit]After
+
+---
@@ -4,0 +15,10 @@
+
+---
+Thu Dec 28 23:03:52 UTC 2017 - ch...@computersalat.de
+
+- Update to 5.0.26
+ * https://www.otrs.com/release-notes-otrs-5s-patch-level-26
+ * https://www.otrs.com/release-notes-otrsitsm-module-5s-patch-level-26/
+- remove obsolete
+ * otrs-scheduler.service
+ * otrs-scheduler.init
Old:
itsm-4.0.28.tar.bz2
otrs-4.0.28.tar.bz2
otrs-scheduler.init
otrs-scheduler.service
New:
itsm-5.0.28.tar.bz2
otrs-5.0.28.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.BffydQ/_old 2018-07-18 22:54:30.074849215 +0200
+++ /var/tmp/diff_new_pack.BffydQ/_new 2018-07-18 22:54:30.074849215 +0200
@@ -23,15 +23,15 @@
Name: otrs
-%define otrs_ver 4.0.28
-%define itsm_ver 4.0.28
-%define itsm_min 4
+%define otrs_ver 5.0.28
+%define itsm_ver 5.0.28
+%define itsm_min 5
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
%define otrsdocs CHANGES* doc
Summary:The Open Ticket Request System
-License:AGPL-3.0
+License:AGPL-3.0-only
Group: Productivity/Networking/Email/Utilities
Version:%{otrs_ver}
Release:0
@@ -51,9 +51,9 @@
Source17: UPGRADING.SUSE
Source20: %{name}.service
Source21: %{name}.service.helper.sh
-Source22: %{name}-scheduler.service
+#Source22: %{name}-scheduler.service
Source23: %{name}.init
-Source24: %{name}-scheduler.init
+#Source24: %{name}-scheduler.init
#
Source99: itsm-update.sh
# PATCH-FIX-OPENSUSE -- VARS for conf and fix for apache >= 2.4
@@ -67,11 +67,8 @@
PreReq: grep sed
PreReq: apache2
Requires(pre): permissions
-
-BuildRequires: pwdutils
-%if 0%{?suse_version} > 1020
BuildRequires: fdupes
-%endif
+BuildRequires: pwdutils
%if 0%{?suse_version} >= 1210
BuildRequires: systemd
@@ -95,10 +92,14 @@
Requires: perl(List::Util::XS)
Requires: perl(Net::DNS) >= 0.60
Requires: perl(Template)
+Requires: perl(Template::Stash::XS)
Requires: perl(Time::HiRes)
Requires: perl(Time::Piece)
Requires: perl(YAML::XS)
#
+Recommends: perl(Apache::DBI)
+Recommends: perl(Apache2::Reload)
+Recommends: perl(Authen::SASL)
Recommends: perl(Crypt::Eksblowfish::Bcrypt)
Recommends: perl(Crypt::SSLeay)
Recommends: perl(GD)
@@ -112,8 +113,11 @@
Recommends: perl(PDF::API2) >= 0.73
Recommends: perl(SOAP::Lite)
Recommends: perl(Text::CSV_XS)
+Recommends: perl(XML::LibXML)
+Recommends: perl(XML::LibXSLT)
Recommends: perl(XML::Parser)
#
+Suggests: perl(Authen::NTML)
Suggests: perl(DBD::ODBC)
Suggests: perl(DBD::Oracle)
Suggests: perl(DBD::Pg)
@@ -210,15 +214,14 @@
# fix old otrs_root (/opt)
%__sed -i -e "s,/opt/%{name},%{otrs_root},g" \
bin/Cron.sh \
- bin/otrs.SupportBundle.pl \
i18n/otrs/otrs.*.po \
Kernel/Config/Defaults.pm \
+ Kernel/Config/Files/Daemon.xml \
Kernel/Config/Files/Framework.xml \
Kernel/Config.pm.dist \
Kernel/Language/*.pm \
Kernel/Modules/AdminDynamicFieldText.pm \
- Kernel/Output/HTML/Standard/AdminGenericInterfaceTransportHTTPREST.tt \
- Kernel/Output/HTML/Standard/AdminGenericInterfaceTransportHTTPSOAP.tt \
+
Kernel/Output/HTML/Templates/Standard/AdminGenericInterfaceTransportHTTPSOAP.tt
\
Kernel/System/ACL/DB/ACL.pm \
Kernel/System/Environment.pm \
Kernel/System/ProcessManagement/DB/Process.pm \
@@ -234,11 +237,6 @@
# copy config file
%__cp -a Kernel/Config.pm.dist Kernel/Config.pm
-cd Kernel/Config/
-for file in *.dist; do
- %__cp -a $file $(basename $file .dist)
-done
-cd ../../
# copy all crontab dist files
for file in var/cron/*.dist; do
@@ -291,18 +289,18 @@
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2018-01-25 12:40:13
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Thu Jan 25 12:40:13 2018 rev:59 rq:569254 version:4.0.28
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2018-01-06
18:48:07.966193521 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2018-01-25
12:40:14.299510251 +0100
@@ -1,0 +2,5 @@
+Wed Jan 24 13:43:12 UTC 2018 - ch...@computersalat.de
+
+- fix wrong fillup_only call
+
+---
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.KJ6gYt/_old 2018-01-25 12:40:16.835391861 +0100
+++ /var/tmp/diff_new_pack.KJ6gYt/_new 2018-01-25 12:40:16.843391488 +0100
@@ -1,7 +1,7 @@
#
# spec file for package otrs
#
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -361,7 +361,7 @@
%post
%if 0%{?has_systemd}
-%{fillup_only -i otrs}
+%{fillup_only -n otrs}
%service_add_post %{name}.service
%service_add_post %{name}-scheduler.service
%else
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2018-01-06 18:48:05
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Sat Jan 6 18:48:05 2018 rev:58 rq:561505 version:4.0.28
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2017-12-15
14:06:37.781012378 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2018-01-06
18:48:07.966193521 +0100
@@ -1,0 +2,14 @@
+Thu Dec 28 01:24:19 UTC 2017 - ch...@computersalat.de
+
+- fix for boo#1073747 (CVE-2017-17476, OSA-2017-10)
+ * Session hijacking
+An attacker can send a specially prepared email to an OTRS system.
+If this system has cookie support disabled, and a logged in agent
+clicks a link in this email, the session information could be
+leaked to external systems, allowing the attacker to take over
+the agent’s session.
+- Update to 4.0.28
+ * https://github.com/OTRS/otrs/blob/rel-4_0_28/CHANGES.md
+- improve itsm-update.sh
+
+---
Old:
itsm-4.0.27.tar.bz2
otrs-4.0.27.tar.bz2
New:
itsm-4.0.28.tar.bz2
otrs-4.0.28.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.YTDAa6/_old 2018-01-06 18:48:09.974099700 +0100
+++ /var/tmp/diff_new_pack.YTDAa6/_new 2018-01-06 18:48:09.974099700 +0100
@@ -23,8 +23,8 @@
Name: otrs
-%define otrs_ver 4.0.27
-%define itsm_ver 4.0.27
+%define otrs_ver 4.0.28
+%define itsm_ver 4.0.28
%define itsm_min 4
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-4.0.27.tar.bz2 -> itsm-4.0.28.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-4.0.27.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/itsm-4.0.28.tar.bz2 differ: char 11, line 1
++ itsm-update.sh ++
--- /var/tmp/diff_new_pack.YTDAa6/_old 2018-01-06 18:48:10.062095590 +0100
+++ /var/tmp/diff_new_pack.YTDAa6/_new 2018-01-06 18:48:10.066095403 +0100
@@ -4,6 +4,9 @@
URL='ftp://ftp.otrs.org/pub/otrs/itsm'
VERSION=$(grep "%define itsm_ver" otrs.spec | cut -d' ' -f3)
MAJOR=$(echo ${VERSION} | cut -d'.' -f1)
+MINOR=$(echo ${VERSION} | cut -d'.' -f2)
+PATCH=$(echo ${VERSION} | cut -d'.' -f3)
+PPATCH=$((${PATCH} - 1))
if [[ ${MAJOR} -eq 4 ]]; then
PMINOR='3.3'
@@ -13,16 +16,21 @@
elif [[ ${MAJOR} -eq 5 ]]; then
PMINOR=$((${MAJOR} - 1))
PMINOR_PKG=${PMINOR}
-PREJECT="*${PMINOR}.?.opm,*${PMINOR}.1?.opm,*${PMINOR}.0.9?.opm"
+
PREJECT="*3.3.9?.opm,*${PMINOR}.0.?.opm,*${PMINOR}.0.1?.opm,*${PMINOR}.0.9?.opm"
REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.?.opm,*${MAJOR}.0.1?.opm"
elif [[ ${MAJOR} -ge 6 ]]; then
PMINOR=$((${MAJOR} - 1))
PMINOR_PKG=${PMINOR}
-PREJECT="*((${PMINOR}-1)).0.9?.opm,*((${MAJOR}-1)).0.9?.opm"
+
PREJECT="*((${PMINOR}-1)).0.9?.opm,*((${MAJOR}-1)).0.?.opm,*((${MAJOR}-1)).0.1?.opm,*((${MAJOR}-1)).0.9?.opm"
REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.9?.opm"
fi
-[[ ! -d itsm-${VERSION} ]] && mkdir itsm-${VERSION}
+if [[ ! -d itsm-${VERSION} ]]; then
+if [[ ! -d itsm-${MAJOR}.${MINOR}.${PPATCH} ]]; then
+tar xvfpj itsm-${MAJOR}.${MINOR}.${PPATCH}.tar.bz2
+mv itsm-${MAJOR}.${MINOR}.${PPATCH} itsm-${VERSION}
+fi
+fi
cd itsm-${VERSION}/
# get INSTALL file
++ otrs-4.0.27.tar.bz2 -> otrs-4.0.28.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-4.0.27.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-4.0.28.tar.bz2 differ: char 11, line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2017-12-15 14:05:43
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Fri Dec 15 14:05:43 2017 rev:57 rq:556891 version:4.0.27
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2017-12-08
13:03:19.736811596 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2017-12-15
14:06:37.781012378 +0100
@@ -17,0 +18,6 @@
+Thu Nov 23 13:52:23 UTC 2017 - rbr...@suse.com
+
+- Replace references to /var/adm/fillup-templates with new
+ %_fillupdir macro (boo#1069468)
+
+---
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.DzrxWj/_old 2017-12-15 14:06:41.316841689 +0100
+++ /var/tmp/diff_new_pack.DzrxWj/_new 2017-12-15 14:06:41.324841303 +0100
@@ -16,6 +16,11 @@
#
+#Compat macro for new _fillupdir macro introduced in Nov 2017
+%if ! %{defined _fillupdir}
+ %define _fillupdir /var/adm/fillup-templates
+%endif
+
Name: otrs
%define otrs_ver 4.0.27
@@ -277,9 +282,9 @@
%__sed -i -e "s,@OTRS_ROOT@,%{otrs_root},g"
%{buildroot}/etc/permissions.d/%{name}
%endif
-%__install -D -m 0644 %{S:11}
%{buildroot}%{_var}/adm/fillup-templates/sysconfig.%{name}
+%__install -D -m 0644 %{S:11} %{buildroot}%{_fillupdir}/sysconfig.%{name}
# fix @OTRS_ROOT@
-%__sed -i -e "s,@OTRS_ROOT@,%{otrs_root},g"
%{buildroot}%{_var}/adm/fillup-templates/sysconfig.%{name}
+%__sed -i -e "s,@OTRS_ROOT@,%{otrs_root},g"
%{buildroot}%{_fillupdir}/sysconfig.%{name}
# systemd vs SysVinit
%if 0%{?has_systemd}
@@ -441,7 +446,7 @@
%config %{_sysconfdir}/permissions.d/%{name}
%endif
# systemd vs SysVinit
-%{_var}/adm/fillup-templates/sysconfig.%{name}
+%{_fillupdir}/sysconfig.%{name}
%if 0%{?has_systemd}
%{_unitdir}/%{name}.service
%{_bindir}/%{name}.service.helper.sh
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2017-12-08 13:02:18
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Fri Dec 8 13:02:18 2017 rev:56 rq:555150 version:4.0.27
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2017-11-23
09:44:38.468017092 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2017-12-08
13:03:19.736811596 +0100
@@ -1,0 +2,16 @@
+Fri Dec 8 01:20:25 UTC 2017 - ch...@computersalat.de
+
+- fix for boo#1071797 (CVE-2017-16921, OSA-2017-09)
+ * Remote code execution:
+An attacker who is logged into OTRS as an agent can manipulate
+ form parameters and execute arbitrary shell commands with the
+ permissions of the OTRS or web server user.
+- fix for boo#1071799 (CVE-2017-16854, OSA-2017-08)
+ * Information Disclosure:
+An attacker who is logged into OTRS as a customer can use the
+ ticket search form to disclose internal article information
+ of their customer tickets.
+- Update to 4.0.27
+ * https://github.com/OTRS/otrs/blob/rel-4_0_27/CHANGES.md
+
+---
Old:
itsm-4.0.26.tar.bz2
otrs-4.0.26.tar.bz2
New:
itsm-4.0.27.tar.bz2
otrs-4.0.27.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.SlpYss/_old 2017-12-08 13:03:24.260648216 +0100
+++ /var/tmp/diff_new_pack.SlpYss/_new 2017-12-08 13:03:24.260648216 +0100
@@ -18,8 +18,8 @@
Name: otrs
-%define otrs_ver 4.0.26
-%define itsm_ver 4.0.26
+%define otrs_ver 4.0.27
+%define itsm_ver 4.0.27
%define itsm_min 4
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-4.0.26.tar.bz2 -> itsm-4.0.27.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-4.0.26.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/itsm-4.0.27.tar.bz2 differ: char 11, line 1
++ otrs-4.0.26.tar.bz2 -> otrs-4.0.27.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-4.0.26.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-4.0.27.tar.bz2 differ: char 11, line 1
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2017-11-23 09:44:30
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Thu Nov 23 09:44:30 2017 rev:55 rq:544413 version:4.0.26
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2017-10-02
16:54:29.012035121 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2017-11-23
09:44:38.468017092 +0100
@@ -1,0 +2,18 @@
+Wed Nov 22 12:49:38 UTC 2017 - ch...@computersalat.de
+
+- fix for boo#1069391 (CVE-2017-16664, OSA-2017-07)
+ * vulnerabilities discovered in the OTRS framework:
+An attacker who is logged into OTRS as an agent can request special
+ URLs from OTRS which can lead to the execution of shell commands
+ with the permissions of the web server user.
+- Update to 4.0.26
+ * Improved handling of spell checker.
+ * https://github.com/OTRS/otrs/blob/rel-4_0_26/CHANGES.md
+- improve itsm-update.sh
+ * only package latest packages (<10)
+- rebase patches
+ * otrs-httpd_conf.patch
+ * otrs-perm_test.patch
+- fix permissions (SLE 11)
+
+---
Old:
itsm-4.0.25.tar.bz2
otrs-4.0.25.tar.bz2
New:
itsm-4.0.26.tar.bz2
otrs-4.0.26.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.F7LPWM/_old 2017-11-23 09:44:41.755897110 +0100
+++ /var/tmp/diff_new_pack.F7LPWM/_new 2017-11-23 09:44:41.759896964 +0100
@@ -18,8 +18,8 @@
Name: otrs
-%define otrs_ver 4.0.25
-%define itsm_ver 4.0.25
+%define otrs_ver 4.0.26
+%define itsm_ver 4.0.26
%define itsm_min 4
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
@@ -546,7 +546,7 @@
# var/tmp
%if 0%{?suse_version} < 1140
-%dir %{otrs_root}/var/tmp
+%dir %attr(2770,wwwrun,www) %{otrs_root}/var/tmp
%else
%verify(not user group mode) %attr(2770,wwwrun,www) %dir %{otrs_root}/var/tmp
%endif
++ itsm-4.0.25.tar.bz2 -> itsm-4.0.26.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-4.0.25.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/itsm-4.0.26.tar.bz2 differ: char 11, line 1
++ itsm-update.sh ++
--- /var/tmp/diff_new_pack.F7LPWM/_old 2017-11-23 09:44:41.847893752 +0100
+++ /var/tmp/diff_new_pack.F7LPWM/_new 2017-11-23 09:44:41.847893752 +0100
@@ -8,13 +8,13 @@
if [[ ${MAJOR} -eq 4 ]]; then
PMINOR='3.3'
PMINOR_PKG=33
-PREJECT="*3.2.9?.opm,*${PMINOR}.9?.opm"
-REJECT="*${PMINOR}.9?.opm,*${MAJOR}.0.9?.opm"
+PREJECT="*3.2.9?.opm,*${PMINOR}.?.opm,*${PMINOR}.9?.opm"
+REJECT="*${PMINOR}.9?.opm,*${MAJOR}.0.?.opm,*${MAJOR}.0.1?.opm"
elif [[ ${MAJOR} -eq 5 ]]; then
PMINOR=$((${MAJOR} - 1))
PMINOR_PKG=${PMINOR}
-PREJECT="*3.3.9?.opm,*${PMINOR}.0.9?.opm"
-REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.9?.opm"
+PREJECT="*${PMINOR}.?.opm,*${PMINOR}.1?.opm,*${PMINOR}.0.9?.opm"
+REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.?.opm,*${MAJOR}.0.1?.opm"
elif [[ ${MAJOR} -ge 6 ]]; then
PMINOR=$((${MAJOR} - 1))
PMINOR_PKG=${PMINOR}
@@ -29,6 +29,10 @@
wget -nH --cut-dirs=3 -m \
${URL}/INSTALL-${MAJOR}.ITSM
+# convert "ASCII English text, with CRLF line terminators"
+# into "ASCII English text"
+perl -p -i -e 's|\r\n|\n|' INSTALL-*
+
# get packages of current version, exclude RC's
wget -nH --cut-dirs=3 -m \
-R ${REJECT} \
++ otrs-4.0.25.tar.bz2 -> otrs-4.0.26.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-4.0.25.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-4.0.26.tar.bz2 differ: char 11, line 1
++ otrs-perm_test.patch ++
--- /var/tmp/diff_new_pack.F7LPWM/_old 2017-11-23 09:44:41.911891417 +0100
+++ /var/tmp/diff_new_pack.F7LPWM/_new 2017-11-23 09:44:41.911891417 +0100
@@ -2,7 +2,7 @@
===
--- Kernel/System/Package.pm.orig
+++ Kernel/System/Package.pm
-@@ -3651,7 +3651,7 @@ sub _FileSystemCheck {
+@@ -3654,7 +3654,7 @@ sub _FileSystemCheck {
# create test files in following directories
for my $Filepath (
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2017-10-02 16:54:18
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is "otrs"
Mon Oct 2 16:54:18 2017 rev:54 rq:530204 version:4.0.25
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2017-08-24
18:34:39.575329718 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2017-10-02
16:54:29.012035121 +0200
@@ -1,0 +2,24 @@
+Sat Sep 30 21:42:39 UTC 2017 - ch...@computersalat.de
+
+- improve itsm-update.sh to provide
+ * current and previous itsm packages
+ * exclude PreRelease packages (*x.y.9?.opm)
+- replace itsm tarball so generated
+
+---
+Sun Sep 24 20:34:53 UTC 2017 - astie...@suse.com
+
+- fix and make universal itsm-update.sh
+- replace itsm tarball so generated
+
+---
+Sat Sep 23 18:49:33 UTC 2017 - ch...@computersalat.de
+
+- fix for boo#1059691 (CVE-2017-14635)
+ * Code Injection / Privilege Escalation OTRS
+- Update to 4.0.25
+ * Improved validation in statistic import and export.
+see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
+ * for more info see https://www.otrs.com/release-notes-otrs-4-patch-level-25/
+
+---
@@ -5 +29 @@
- * for mor info see https://www.otrs.com/release-notes-otrs-4-patch-level-24/
+ * for more info see https://www.otrs.com/release-notes-otrs-4-patch-level-24/
Old:
itsm-4.0.24.tar.bz2
otrs-4.0.24.tar.bz2
New:
itsm-4.0.25.tar.bz2
otrs-4.0.25.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.ETpo7m/_old 2017-10-02 16:54:32.415557398 +0200
+++ /var/tmp/diff_new_pack.ETpo7m/_new 2017-10-02 16:54:32.419556836 +0200
@@ -18,8 +18,8 @@
Name: otrs
-%define otrs_ver 4.0.24
-%define itsm_ver 4.0.24
+%define otrs_ver 4.0.25
+%define itsm_ver 4.0.25
%define itsm_min 4
%define otrs_root /srv/%{name}
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SUSE doc
++ itsm-4.0.24.tar.bz2 -> itsm-4.0.25.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/itsm-4.0.24.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/itsm-4.0.25.tar.bz2 differ: char 11, line 1
++ itsm-update.sh ++
--- /var/tmp/diff_new_pack.ETpo7m/_old 2017-10-02 16:54:32.507544486 +0200
+++ /var/tmp/diff_new_pack.ETpo7m/_new 2017-10-02 16:54:32.511543925 +0200
@@ -1,13 +1,45 @@
#!/bin/bash
# This script creates a new itsm-%version.tar.bz2
-VERSION=3.3.15
-MAJ_VER=3.3
-MAJ_V_S=33
-
-mkdir itsm-$VERSION/
-cd itsm-$VERSION/
-wget http://ftp.otrs.org/pub/otrs/itsm/INSTALL-$MAJ_VER.ITSM
-wget -rnH --cut-dirs=3 --no-parent --reject "index.html*"
http://ftp.otrs.org/pub/otrs/itsm/packages$MAJ_V_S/
+URL='ftp://ftp.otrs.org/pub/otrs/itsm'
+VERSION=$(grep "%define itsm_ver" otrs.spec | cut -d' ' -f3)
+MAJOR=$(echo ${VERSION} | cut -d'.' -f1)
+
+if [[ ${MAJOR} -eq 4 ]]; then
+PMINOR='3.3'
+PMINOR_PKG=33
+PREJECT="*3.2.9?.opm,*${PMINOR}.9?.opm"
+REJECT="*${PMINOR}.9?.opm,*${MAJOR}.0.9?.opm"
+elif [[ ${MAJOR} -eq 5 ]]; then
+PMINOR=$((${MAJOR} - 1))
+PMINOR_PKG=${PMINOR}
+PREJECT="*3.3.9?.opm,*${PMINOR}.0.9?.opm"
+REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.9?.opm"
+elif [[ ${MAJOR} -ge 6 ]]; then
+PMINOR=$((${MAJOR} - 1))
+PMINOR_PKG=${PMINOR}
+PREJECT="*((${PMINOR}-1)).0.9?.opm,*((${MAJOR}-1)).0.9?.opm"
+REJECT="*${PMINOR}.0.9?.opm,*${MAJOR}.0.9?.opm"
+fi
+
+[[ ! -d itsm-${VERSION} ]] && mkdir itsm-${VERSION}
+cd itsm-${VERSION}/
+
+# get INSTALL file
+wget -nH --cut-dirs=3 -m \
+${URL}/INSTALL-${MAJOR}.ITSM
+
+# get packages of current version, exclude RC's
+wget -nH --cut-dirs=3 -m \
+-R ${REJECT} \
+-R *~ \
+${URL}/packages${MAJOR}/
+
+# get packages of previous version, exclude RC's
+wget -nH --cut-dirs=3 -m \
+-R ${PREJECT} \
+-R *~ \
+${URL}/packages${PMINOR_PKG}/
+
cd ..
-tar -jcvf itsm-$VERSION.tar.bz2 itsm-$VERSION
+tar cvfj itsm-${VERSION}.tar.bz2 --exclude='.listing' itsm-${VERSION}
++ otrs-4.0.24.tar.bz2 -> otrs-4.0.25.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-4.0.24.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-4.0.25.tar.bz2 differ: char 11, line 1
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2017-08-24 18:34:27 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is "otrs" Thu Aug 24 18:34:27 2017 rev:53 rq:507953 version:4.0.24 Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2016-11-11 14:34:01.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2017-08-24 18:34:39.575329718 +0200 @@ -1,0 +2,34 @@ +Mon Jun 12 15:48:12 UTC 2017 - ch...@computersalat.de + +- Update to 4.0.24 + * for mor info see https://www.otrs.com/release-notes-otrs-4-patch-level-24/ +- update UPGRADING.SUSE, otrs.README.??, ZZZAuto.pm +- rework/rebase patches + * otrs-httpd_conf.patch + * otrs-perm_test.patch +- add systemd service files and helper + * otrs.service, otrs.service.helper.sh + * otrs-scheduler.service +- rework permissions + * add otrs.permissions file for var/tmp, cause 'otrs' and 'wwwrun' +are writing there + +--- +Wed Jun 7 13:17:55 UTC 2017 - ch...@computersalat.de + +- fix for boo#1043086 + * Incorrect Access Control in OTRS +- Update to 3.3.17 2017-06-06 + * Improved SecureMode detection in Installer. + see OSA-2017-03 (CVE-2017-9324) + * Bug#12753 - Function "SystemDataGroupGet" has problems with empty + values in oracle. + * Bug#9941 - Articles with multi-byte characters that claim to be + UTF-8 will not display in the browser. + * Bug#7961 - customer search should not return results for internal + articles. + see OSA-2017-02 + * Bug#12391 - Base64 encoded image does not display in article. + * Bug#12461 - Chrome can not display attached PDF files since 5.0.14. + +--- Old: itsm-3.3.14.tar.bz2 otrs-3.3.16.tar.bz2 New: itsm-4.0.24.tar.bz2 otrs-4.0.24.tar.bz2 otrs-scheduler.service otrs.permissions otrs.service otrs.service.helper.sh Other differences: -- ++ otrs.spec ++ 724 lines (skipped) between /work/SRC/openSUSE:Factory/otrs/otrs.spec and /work/SRC/openSUSE:Factory/.otrs.new/otrs.spec ++ UPGRADING.SUSE ++ --- /var/tmp/diff_new_pack.8kBwu1/_old 2017-08-24 18:34:50.949727263 +0200 +++ /var/tmp/diff_new_pack.8kBwu1/_new 2017-08-24 18:34:50.965725010 +0200 @@ -1,36 +1,20 @@ -Upgrading OTRS from 3.2 to 3.3 -== +Upgrading OTRS from 3.3 to 4 + -These instructions are for people upgrading OTRS from *3.2* to *3.3*, -and applies both for RPM and source code (tarball) upgrades. +These instructions are for people upgrading OTRS from *3.3* to *4* or from a 4 +to a later patchlevel release 4 and applies both for RPM and source code (tarball) upgrades. -Please note that OTRS 3.3 requires at least perl version *5.10.0*. Make sure -before you plan your upgrade that your server runs this version. You can check -the version with the command `perl -v` on the command line. The only known -Linux distribution that uses perl 5.8 and is still supported by its vendor is -Red Hat Enterprise Linux (RHEL) 5 and its community supported derivative -CentOS 5. -If you're on any of these platforms and you plan to upgrade to OTRS 3.3 you -should also plan migrating your operating system to a version with a supported perl, such as RHEL 6 or CentOS 6. - -If you are running a lower version of OTRS you have to follow the upgrade path -to 3.2 first (1.1->1.2->1.3->2.0->2.1->2.2->2.3->2.4->3.0->3.1->3.2->3.3 ...)! -You need to perform a full upgrade to every version in between, including -database changes and the upgrading perl script. - -Please note that if you upgrade from OTRS 2.2 or earlier, you have to -take an extra step; please read http://bugs.otrs.org/show_bug.cgi?id=6798 - -Within a single minor version you can skip patch level releases if you want to -upgrade. For instance you can upgrade directly from OTRS 3.3.1 to version -3.3.4. If you need to do such a "patch level upgrade", you should skip steps -9 and 13-16. - -Please note that if you perform a patch level upgrade from OTRS 3.3.6 or earlier, -you need to activate a new cron job that controls the scheduler process. -Please copy the file `/opt/otrs/var/cron/scheduler_watchdog.dist` to -`/opt/otrs/var/cron/scheduler_watchdog` and update your crontab with -`/opt/otrs/bin/Cron.sh start` (as "otrs" user, not root). +If you are running a lower version of OTRS you have to follow the upgrade path to 3.3 first +(1.1->1.2->1.3->2.0->2.1->2.2->2.3->2.4->3.0->3.1->3.2->3.3)! You need to perform a full +upgrade to every version in between, including database
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2016-11-11 14:33:58 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is "otrs" Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-12-30 00:50:56.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2016-11-11 14:34:01.0 +0100 @@ -1,0 +2,90 @@ +Wed Nov 2 23:06:38 UTC 2016 - ch...@computersalat.de + +- fix for boo#1008017 + * execution of JavaScript in OTRS context by opening malicious attachment +- Update to 3.3.16 + * Improved sandboxing of displayed attachments. + see OSA-2016-02 (CVE-2016-9139) + * Added package verification information to otrs.PackageManager.pl, +use bin/otrs.PackageManager.pl -a list -e (to show package verification +information) or bin/otrs.PackageManager.pl -a list -e -c +(to show package verification information deleting the cache before). + * Bug#11959 – 500 Can’t connect to www.otrs.com/product.xml:443. + * Bug#11870 – Missing quoting in Layout::AgentQueueListOption(). + * Bug#11802 – Customer user can get access to all ticket data. +- fix ZZZAuto.pm + * do not replace existing file (manually merge needed for ITSM) + +--- +Sun Oct 30 00:25:41 UTC 2016 - ch...@computersalat.de + +- fix itsm package + * version is 3.3.14 +- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch +- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch + +--- +Sat Oct 24 09:07:33 UTC 2015 - a...@ajaissle.de + +- Update to 3.3.15 + * HTML emails not properly displayed (parts missing). + * Fixed a nasty JSON::XS crash on some platforms. + * Updated CPAN module Proc::Daemon to version 0.21. + * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT). + * auto reply with DynamicFields from webservice. + * Added option to package manager list action, to show deployment info of installed packages. + * Reply in process ticket on webrequest article fills customer mail into "cc" instead of "to". + +- Changes 3.3.14 + * Package installation/uninstallation leads to endless loop. + * Lang parameter not correctly validated. + * Search for multiple ticket numbers with GenericInterface. + +- Changes 3.3.13 + * Updated translation files. + * Refresh bug on process client interface using ie8 + * Adding email recipients via addressbook does not update customer information. + * Wrong column encoding in Kernel::System::Notification::NotificationGet(). + * Generic Agent ticket actions can't be unselect. + * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm. + * Reply in process ticket on webrequest article fills customer mail into "cc" instead of "to". + * Download button for dashboard stats visible even if no permissions for AgentStats exist.. + * Invalid utf-8 parameters not filtered sufficciently. + * DynamicField Filter in AgentDashboard accepts only one value. + * Can't select customer and/or public interface in AdminACL. + * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys. + * Added possibility to turn of SSL certificate validation. + * SLA can not be set over Free Fields Dialog. + * Not possible to change customer. + * Error from GenericInterface using SOAP and TicketGet operation. + * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm. + * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20. + +- Changes 3.3.12 + * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker. + * Adressbook search does not permit to add contacts via click. + * Wrong sortation of Ticket Overview settings. + * Missing translations in Dashboard and TicketOverview settings. + * Internal Server Error, instead of warning. + * Dashlet: Filter Attributes with more then one CustomerID doesn't work. + * SQL error with "0 oracle" for article body in Ticket Search. + * Incorrect utf8 in ZZZAuto.pm (via SysConfig). + * ProcessManagement: TransitionAction delete does not check if is used. + * GPG option 0xlong breaks decryption of emails. + * ORA-03113 Error after scheduler start. + * /etc/init.d/otrs running httpd is not detected on CentOS 7. + * Unable to change password in customer interface. + * Dynamic Field shown information in customer interface is not consistent with agent interface. + * Error: No Process configured! - Agent interface. + * Error while splitting ticket. + * ActivityDialogEntityID not working in ACLs from Process screens reducing States. + +- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch +- Added itsm-update.sh, a script to update the
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2014-12-30 00:50:22
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-10-01
11:23:51.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-12-30
00:50:56.0 +0100
@@ -1,0 +2,69 @@
+Mon Dec 29 11:06:45 UTC 2014 - ch...@computersalat.de
+
+- fix for boo#910988 (CVE-2014-9324)
+- update to 3.3.11
+ fix for OSA-2014-06 (CVE-2014-9324)
+ * Updated translations, thanks to all translators.
+ * Bug#10904 – Upon entering CIC, search only returns hits during
+the first search.
+ * Bug#10944 – Multiple selection in Tree Selection also affects
+filtered elements.
+ * Follow-up fix for Bug#6284 – Problem with unicode characters
+when using FastCGI.
+ * Bug#10830 – Textarea Limitation in Generic Agent.
+ * Bug#10920 – ProcessManagement: Deleting Activities from canvas
+does not update process layout.
+ * Bug#10801 – Editor is extremely slow with large articles.
+ * Enhanced Permission Checks in GenericInterface Ticket Connector.
+ * Bug#10634 – ProcessManagement: Can not use an arbitrary email
+address as a CustomerUser.
+ * Bug#10839 – ACL cannot set possible TicketType in
+AgentTicketPhone and AgentTicketEmail.
+ * Bug#10776 – Medium and Large view don’t indicate active
+filters.
+ * Bug#10808 – Set of pending time is not working at all in
+Frontend::Agent::Ticket::ViewNote.
+ * Bug#10892 – TicketActionsPerTicket open multiple popups at
+TicketOverview.
+ * Bug#10857 – JS added too often in AgentTicketOverviewSmall.
+ * Bug#10639 – Set of pending time/state not working properly
+(process management).
+ * Bug#10893 – Missing log name partitions in Service Center.
+ * Bug#10879 – GenericInterfae: TicketSearch operation does not
+take escalation parameters.
+ * Bug#10812 – SOAP Response is always in version SOAP 1.2.
+ * Bug#10083 – SMIME and Email address detection is case sensitive
+(for the right part)..
+ * Bug#10826 – German – Translation Problem.
+ * Bug#10678 – Dates off by one on area diagram in dashboard widget.
+ * Bug#7369 – LinkQoute fails for some characters in hash or
+parameter.
+ * Bug#8404 – Wrong sorting of responses dropdown in TicketZoom.
+ * Bug#8781 – 508 Compliance: In Ticket Overviews the title
+attribute of large view link is incorrect.
+ * Bug#10669 – Maxlength validation of textarea dynamic fields does
+not work correctly in IE.
+ * Bug#10471 – Missing translations for tooltips of
+TicketOverviewSmall columns.
+ * Bug#10850 – Double-quoted special characters in title of dynamic
+field sidebar output in TicketZoom.
+ * Bug#10805 – Open tickets in 3 days show right function but wrong
+number.
+ * Bug#10845 – No date search if TimeInputFormat is Input.
+ * Bug#10706 – dashboard settings are lost by different user login.
+ * Bug#10577 – Service Center does not show MOD_PERL version on
+Ubuntu 14.04.
+ * Bug#10679 – Texts in notification tags loose their empty lines
+and spaces.
+
+---
+Thu Nov 27 11:41:00 UTC 2014 - Led led...@gmail.com
+
+- One more fix after fix bashisms in previous commit
+
+---
+Sat Nov 08 06:04:00 UTC 2014 - Led led...@gmail.com
+
+- fix bashisms in post script
+
+---
Old:
itsm-3.3.9.tar.bz2
otrs-3.3.9.tar.bz2
New:
itsm-3.3.11.tar.bz2
otrs-3.3.11.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.icDGjz/_old 2014-12-30 00:51:00.0 +0100
+++ /var/tmp/diff_new_pack.icDGjz/_new 2014-12-30 00:51:00.0 +0100
@@ -16,8 +16,8 @@
#
-%define otrs_ver 3.3.9
-%define itsm_ver 3.3.9
+%define otrs_ver 3.3.11
+%define itsm_ver 3.3.11
%define itsm_min 3.3
%define otrs_root /srv
%define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README*
UPGRADING.SuSE doc
@@ -306,11 +306,17 @@
# if rpm is not in update mode
if ! [ ${FIRST_ARG:-0} -gt 1 ]; then
if [ -z ${YAST_IS_RUNNING} ]; then
- for lang in LC_ALL LC_MESSAGE LANG; do
- test ${!lang} break
- done
+ if [ -n $LC_ALL ]; then
+ lang=$LC_ALL
+ elif [ -n $LC_MESSAGE ]; then
+ lang=$LC_MESSAGE
+ elif [ -n $LANG ]; then
+ lang=$LANG
+ else
+ lang=
+
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2014-10-01 11:23:25 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-07-31 07:41:46.0 +0200 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-10-01 11:23:51.0 +0200 @@ -1,0 +2,56 @@ +Tue Sep 30 21:08:46 UTC 2014 - ch...@computersalat.de + +- fix changelog + * update 3.3.9 with 3.3.9 data + * add missing update info for OTRS::ITSM +- update itsm-3.3.9 Source + +--- +Tue Sep 30 06:21:51 UTC 2014 - alexan...@exatati.com.br + +- Update to 3.3.9: + https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md + * Bug#10697 - Column name in CSV report of stats is lowercase. + * Bug#10652 - Process tickets without any articles create empty +lines in AgentTicketSearch CSV result file. + * Bug#10607 - SQL Box can change the database. + * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via +BulkAction. + * Bug#10699 - Cannot add new customer (company). + * Bug#10497 - CustomerUser secondary database access opens multitude +of database connections. + * Bug#9756 - Owner will be set after QueueMove screen AND undo. + * Bug#10606 - Dynamic fields in dashboard overview are empty. + * Updated Danish translation, thanks to Lars Jørgensen. + * Bug#10670 - It is possible to start the scheduler more than once. + * Bug#10515 - Problem with column filter sorting + * Bug#10598 - Field tags not parsed properly in auto response subject. + * Bug#10658 - Issue with multiple customer company backends. + * Bug#10622 - eMail address only with uppercases - wrong display. + * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets +as affected. + * Bug#10601 - ExternalTicketNumberRecognition produces errors in log +file. + * Bug#9851 - Unlocking a ticket in the small view results in +AgentTicketZoom. + * Bug#10612 - Wrong Time in DashboardField Changed, thanks to S7. + * Bug#10595 - Standard Replies are false sorted in Ticket Zoom +select box. + * Bug#10534 - Wildcard hacking the customer information center, +thanks to S7. + * Bug#10597 - Process list description column doesn't support line +breaks, thanks to S7. + * Bug#10586 - In Customer Portal no attachments are shown. + * Bug#6601 - Changing search options changes order of fields, thanks +to S7. + * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition +doesn't work. + * Bug#10559 - Previous Owner don't use the FirstnameLastnameOrder +configuration. + * Bug#10532 - PostMasterMailbox.pl hangs parsing mails. + * Bug#10578 - Service selection in GA Ticket Action allows multi +select. +- update OTRS::ITSM to 3.3.9 + * Bug#10330 – ITSM Impact field displayed with Key instead of Value. + +--- Old: itsm-3.3.8.tar.bz2 otrs-3.3.8.tar.bz2 New: itsm-3.3.9.tar.bz2 otrs-3.3.9.tar.bz2 Other differences: -- ++ otrs.spec ++ --- /var/tmp/diff_new_pack.uAiMYS/_old 2014-10-01 11:23:53.0 +0200 +++ /var/tmp/diff_new_pack.uAiMYS/_new 2014-10-01 11:23:53.0 +0200 @@ -16,8 +16,8 @@ # -%define otrs_ver 3.3.8 -%define itsm_ver 3.3.8 +%define otrs_ver 3.3.9 +%define itsm_ver 3.3.9 %define itsm_min 3.3 %define otrs_root /srv %define otrsdoc_dir_files AUTHORS* CHANGES* COPYING* CREDITS README* UPGRADING.SuSE doc ++ itsm-3.3.8.tar.bz2 - itsm-3.3.9.tar.bz2 ++ /work/SRC/openSUSE:Factory/otrs/itsm-3.3.8.tar.bz2 /work/SRC/openSUSE:Factory/.otrs.new/itsm-3.3.9.tar.bz2 differ: char 11, line 1 ++ otrs-3.3.8.tar.bz2 - otrs-3.3.9.tar.bz2 ++ /work/SRC/openSUSE:Factory/otrs/otrs-3.3.8.tar.bz2 /work/SRC/openSUSE:Factory/.otrs.new/otrs-3.3.9.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2014-07-31 07:41:36 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-04-05 16:47:59.0 +0200 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-07-31 07:41:46.0 +0200 @@ -1,0 +2,114 @@ +Tue Jul 29 16:26:59 UTC 2014 - ch...@computersalat.de + +- update to 3.3.8 + * Bug#10524 – Internal Dynamic Fields in Activity Dialog. + * Bug#10562 – Inconsistent displaying of “CustomerID” value. + * Bug#10508 – (Agent|Customer)TicketProcess javascript errors when + uploading attachments/having server errors. + * Bug#10521 – OutputFilterText AutoLink CVE. + * Bug#10430 – backup.pl doesn’t work with PostgreSQL unix sockets. + * Bug#5012 – Merging a watched ticket into another should “transfer” + the Watch status to the final ticket, thanks to Michiel Beijen! + * Bug#10544 – Upgrade to OTRS 3.3.7 breaks connection to external + customer user tables. + * Bug#10535 – ACLListGet() produces DB warning message. + * Bug#10163 – Subject shows only 30 characters. + * Bug#10519 – Opening and closing popups in ProcessManagement leads + to performance issues. + * Bug#10513 – Some SupportData Plugin Identifiers ends with ::. + * Bug#8494 – Possibility to split quotes in rich text editor. + * Bug#10491 – CIC not always accessible via TicketZoom. + * Bug#10427 – Bulk action locks tickets – cancel keeps them locked. +- update OTRS::ITSM to 3.3.8 + * Bug# 10558 – Slow CI search for classes with a large MaxCount on + a value and sub values. + * Bug# 10570 – Deleting ITSM Change search templates does not work. + +--- +Mon Jun 30 21:32:11 UTC 2014 - jam...@vicidial.com + +- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4 + * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module +statically compiled into the Apache2 core. This means it can't +be unloaded and the older pre-2.4 access directives must be +used. Since it is not advised to mix pre and post 2.4 access +methods the configuration file had to be modified to look for +this static module and load pre-2.4 directives if found on +Apache 2.4. It should be forward compatible if the mod_access +compat.c module become dynamic in the future and is not loaded. + +--- +Thu May 22 12:07:47 UTC 2014 - ch...@computersalat.de + +- update to 3.3.7 + * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines. + * Updated Japanese translation, thanks to Toshihiro Takehara. + * Updated Swedish translation, thanks to Peter Krantz. + * Added CPAN module Archive::Tar. + * Split otrs.checksum.pl functionality it is only able to work in compare mode. + * Extended package object to be able to generate an MD5Sum of all files within +a package. + * Extended email send capabilities to include custom X-Headers. + * Extended the OTRS services to be able to create a support bundle file. + * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom. + * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB. + * Fixed bug#10458 - Can't use system registration with some OTRS-IDs. + * Fixed bug#10470 - Need FormID! error when embedding image when creating a +Process Ticket. + * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany. + * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via +cron jobs. + * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171. + * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search +term was selected. + * Fixed bug#10428 - Event Notification ArticleSend Loop. + * Fixed bug#10441 - Eventbased notification - infinite loop. + * Fixed bug#10462 - Translation of static statistic widgets (Dashboard). + * Added OTRS Scheduler Watchdog mode. + * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads +page for temporary links. + * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface +displayed even though no process is available.. + * Fixed bug#8253 - Missing hover texts for actions in German translation +of AgentTicketZoom. + * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard). + * Fixed bug#10395 - E-mail header parsing bug. + * Fixed bug#10394 - rfc822 attachments name creating bug and validation +enhancement. + * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL. + * Fixed bug#10402 - Transition or
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2014-04-05 16:47:57
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-03-28
16:25:12.0 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-04-05
16:47:59.0 +0200
@@ -1,0 +2,95 @@
+Thu Apr 3 22:00:49 UTC 2014 - ch...@computersalat.de
+
+- fix for bnc#871758 (CVE-2014-2553)
+- update to 3.3.6
+ fix for OSA-2014-04 (CVE-2014-2553)
+ fix for OSA-2014-05 (CVE-2014-2554)
+ * Updated French translation, thanks to Guillaume Houdmon.
+ * Extended the OTRS system registration to optionally also send the
+support assessment data along with the system registration data.
+Support assessment data is improved and extended and can be
+accessed in the new Service Center module of the admin area.
+ * Fixed bug#10405 - When using the search feature of the tree
+selection overlay, one is not able to expand subtrees of matching
+entries.
+ * Fixed bug#10340 - Dynamic field not visible in queue view screen
+(AgentTicketOverviewSmall.dtl).
+ * Fixed bug#10400 - AgentTicketProccess will not use error messages
+of dynamic field drivers.
+ * Fixed bug#10397 - DynamicField configuration in SysConfig
+'DefaultOverviewColumns' causes JS error.
+ * Fixed bug#9592 - Ticket history overflows for dynamic field.
+ * Fixed bug#10368 - Ticket title isn't shown.
+ * Updated Japanese translation, thanks to Toshihiro Takehara..
+ * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
+ * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
+AgentTicketSearch view.
+ * Fixed bug#10384 - out-of-office information not displayed in
+Ticket Zoom.
+ * Fixed bug#10379 - ACL Not Working.
+ * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
+AgentTicketActionCommon.
+ * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
+RichText Editor.
+ * Improved handling of cachekeys in Stats.pm to prevent cacheing
+problems in the dashboard stats.
+ * Fixed bug#10334 - Deleting the attachment deletes the recepients
+too.
+ * Fixed bug#10374 - OTRS does not protect against clickjacking.
+ * Fixed bug#10364 - Inline images displayed as attachment in SMIME
+and PGP signed messages.
+ * Fixed bug#10251 - SMIME signing fail on mails with attachements.
+ * Fixed bug#10277 - Statistics per agent also shows invalid agents.
+ * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
+empty values.
+ * Fixed bug#10365 - Custom State types not working with
+otrs.PendingJobs.pl any more.
+ * Fixed bug#10349 - System Email notification external not
+highlighted correctly.
+ * Fixed bug#10361 - Incorrect handling of special characters in
+DynamicFields.
+ * Fixed bug#10324 - Customer user field still marked as empty even
+after providing data.
+ * Fixed bug#10019 - Tickets via In line action bar cannot be moved.
+ * Fixed bug#10283 - MouseOver on the Transitions does not show
+transition actions.
+ * Fixed bug#10241 - ACL-Editor Bug..
+ * Fixed bug#10338 - Empty Content-ID causes strange result -
+HTML-tags are corrupted.
+ * Fixed bug#9951 - Line breaks at the end of salutation templates
+are not saved.
+ * Fixed bug#10275 - Problem with encoding in attachment.
+ * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
+garbage in the database.
+ * Fixed bug#10336 - Problem with symlinked theme directories.
+ * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
+DynamicField changed.
+ * Fixed bug#10264 - Description (espacially article description) in
+processes are shown on improper place.
+ * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
+ * Fixed bug#10240 - Restricting process list by ACLs is only working
+with UserID.
+ * Fixed bug#10299 - Ouf of Office shows inactive agents.
+ * Fixed bug#10321 - Applying Filters to tickets in Status View or
+Queue View will log out session..
+ * Fixed bug#9600 - When a ticket is deleted by generic agent job,
+No such TicketID error.
+ * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
+ * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
+ * Updated Japanese translation, thanks to Norihiro Tanaka!
+ * Fixed bug#10300 - Special character in customer id cuts off string.
+ * Fixed bug#10309 - mails with an empty return-path header must not
+trigger auto responses in OTRS.
+ * Fixed bug#10245 - Use of uninitialized value $Param{Value2} in
+string.
+ * Fixed bug#10182 - Customer email suddenly treated by OTRS as
+'email-internal'.
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2014-03-28 16:25:10 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-03-18 15:12:39.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-03-28 16:25:12.0 +0100 @@ -2 +2 @@ -Tue Mar 11 09:43:25 UTC 2014 - r...@scorpio-it.net +Thu Mar 6 01:12:33 UTC 2014 - ch...@computersalat.de @@ -4,2 +4,156 @@ -- fix deps - * add missing perl List::Util::XS +- update to 3.3.5 + * Improved HTML filter. + * Followup fix for bug#10116 - Random ordering of columns in Small ticket + lists. + * Re-implemented Process Management ProcessImport(). + * Fixed bug#10258 - yellow color for UnreadArticles. + * Updated Japanese translation, thanks to Norihiro Tanaka! + * Updated Brazilian Portugese translation, thanks to Murilo Moreira de + Oliveira! + * Updated Polish translation, thanks to Wojciech Myrda. + * Fixed bug#6323 - Graph/Chart generation selects slice/background color + identical to text color. + * Added feature to download report data shown in dashboard stats as CSV and + PDF. + * Fixed bug#10248 - OTRS Portal - Overview of registered systems. + * Added browser check for IE10 in compatibility mode. + * Followup for bug#9011 - New value after value mapping can't be 0. + * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for + dynamic fields. + * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB. + * Fixed bug#7818 - Menu simplification is not working for item responsible. + * Added new option bin/otrs.LoaderCache.pl -o generate to generate the + loader cache for all frontend modules. This can be useful in cluster setups. + * Fixed bug#10214 - Value 0 for DynamicsFields prevents TicketCreation. + * Fixed bug#10201 - Wrong column sort order in ticketoverview widget. + * Fixed bug#10195 - Folluw up notification shows old prio after prio change. + * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating + new ticket from customer creation. + * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI. + * Follow-up fix for bug#10110 - Stats list may show too few or too many stats. + * Fixed bug#10220 - Invalid Statistics not displayed in overview. + * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl + not set. + * Fixed bug#10177 - Missing sources in tarball. + * Fixed bug#9616 - Too long activities and transitions are not displayed + correctly. + * Fixed bug#7440 - Ticket overviews don't show column headers for priority and + unread articles in small mode. + * Added process management canvas label spacer to avoid overlapping transition + labels. + * Fixed bug#10212 - My tickets Company tickets in 3.3.4. + * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working. + * Fixed bug#10163 - subject shows only 30 characters. + * Fixed bug#10193 - Expired cookie bug in customer interface.. + * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment. + * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not + working. + * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order. + * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket. + * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen + results in an error no matter what data was filled in. + * Fixed bug#10209 - When opening tree selection dialog, the search field + should get the focus. + * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0. + * Fixed bug#10196 - Ticket merge action does not notify the owner of the + existing ticket. + * Fixed bug#10130 - Events Ticket Calendar not working. + * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID + instead Agent ID. + * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile. + * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title + is set. + * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a + customer. + * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when + authenticated as a customer. + * Fixed bug#10176 - available columns selection in search result view is not + scrollable. + * Fixed bug#10120 - Management Dashboard: page reload erases stat graph + settings. + * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with + all lines concatenated to one + * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl. + *
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2014-03-18 15:12:38 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2014-02-27 00:01:32.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-03-18 15:12:39.0 +0100 @@ -1,0 +2,6 @@ +Tue Mar 11 09:43:25 UTC 2014 - r...@scorpio-it.net + +- fix deps + * add missing perl List::Util::XS + +--- @@ -4,2 +10 @@ -- fix for OSA-2014-03 - * https://www.otrs.com/security-advisory-2014-03-xss-issue/?lang=de +- fix for bnc#866476 (CVE-2014-1695) @@ -6,0 +12 @@ + (fix for OSA-2014-03, CVE-2014-1695) Other differences: -- ++ otrs.spec ++ --- /var/tmp/diff_new_pack.2WNyd8/_old 2014-03-18 15:12:41.0 +0100 +++ /var/tmp/diff_new_pack.2WNyd8/_new 2014-03-18 15:12:41.0 +0100 @@ -69,6 +69,7 @@ Requires: perl(GD) Requires: perl(GD::Graph) Requires: perl(GD::Text) +Requires: perl(List::Util::XS) Requires: perl(Net::DNS) Requires: perl(PDF::API2) Requires: perl(YAML::XS) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2014-02-27 00:01:30 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2013-12-12 11:17:41.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2014-02-27 00:01:32.0 +0100 @@ -1,0 +2,45 @@ +Wed Feb 26 20:53:48 UTC 2014 - ch...@computersalat.de + +- fix for OSA-2014-03 + * https://www.otrs.com/security-advisory-2014-03-xss-issue/?lang=de +- update to 3.2.15 + * Improved HTML filter. + * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not + working. + * Followup for bug#9011 - New value after value mapping can't be 0. + * Fixed bug#10214 - Value 0 for DynamicsFields prevents TicketCreation. + * Fixed bug#9616 - Too long activities and transitions are not displayed + correctly. + * Fixed bug#10212 - My tickets Company tickets in 3.3.4. + * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0. + * Fixed bug#10196 - Ticket merge action does not notify the owner of the + existing ticket. + * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer + ID instead Agent ID. + * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title + is set. + * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as + a customer. + * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work + when authenticated as a customer. +- 3.2.14 + * Fixed bug#10172 - Can't create process tickets with disabled richtext. + * Fixed bug#10121 - QQMails break in OTRS. + * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType(). + * Fixed bug#8969 - FAQ module Language files installation fails + (Kernel/Language permissions). + * Fixed bug#9959 - breaks ExpandCustomerName. + * Fixed bug#10099 - Missing challenge token checks on customer interface. + * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose. + * Added functionality to disable access to tickets of other customers with + the same customer company in customer interface. + * Fixed bug#9650 - Special character in customer id breaks Open Tickets in + AgentTicketZoom. + * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many + tickets + * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no + regex match. + * Fixed bug#10070 - Wrong error message if Transition contains no transition + actions. + +--- Old: otrs-3.2.13.tar.bz2 New: otrs-3.2.15.tar.bz2 Other differences: -- ++ otrs.spec ++ --- /var/tmp/diff_new_pack.WUaula/_old 2014-02-27 00:01:34.0 +0100 +++ /var/tmp/diff_new_pack.WUaula/_new 2014-02-27 00:01:34.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package otrs # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,7 +16,7 @@ # -%define otrs_ver 3.2.13 +%define otrs_ver 3.2.15 %define itsm_ver 3.2.9 %define itsm_min 3.2 %define otrs_root /srv ++ otrs-3.2.13.tar.bz2 - otrs-3.2.15.tar.bz2 ++ /work/SRC/openSUSE:Factory/otrs/otrs-3.2.13.tar.bz2 /work/SRC/openSUSE:Factory/.otrs.new/otrs-3.2.15.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2013-12-12 11:17:40 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2013-09-23 11:17:33.0 +0200 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2013-12-12 11:17:41.0 +0100 @@ -1,0 +2,77 @@ +Wed Dec 11 11:39:07 UTC 2013 - ch...@computersalat.de + +- update to 3.2.13 + * Bug#9327 – Filter breaks “Select all” functionality. + * Bug# – Timestamps in HistoricalValueGet return milliseconds on SQL +Server. + * Bug#10027 – Added old ticket information to ticket_history. + * Bug#7337 – AJAX Error on new Phone Ticket on IIS when using JSON::XS. + * Bug#8991 – Back-action does not work when search result returned just 1 +ticket. + * Bug#9937 – Activity-Dialogs in wrong order. + * Bug#9954 – PGP Crypted and Signed emails could be wrongly parsed. + * Bug#9639 – TextArea validation message not translated. + * Bug#9944 – Search Template issue. + * Bug#9938 – ActivityDialog doesn’t show queues with move_into permissions. + * Bug#9940 – Fedora misses dependency on Sys::Syslog. + * Removed Patch/Workaround for CPAN MIME::Parser v5.503 +(introduced in OTRS 3.2.2) replaced with another solution, as it was +causing problems with PGP. + * Bug#9916 – Error when updating CustomerUser Login on ForeignDB. + * Bug#9841 – Tabbing changes radio button of owner change selection. + * Bug#9867 – Validation errors are not shown correctly when replying to a +ticket in Customer Interface. + * Bug#9914 – Spellchecker ignores double wrong words. + +--- +Wed Nov 6 21:00:17 UTC 2013 - alexan...@exatati.com.br + +- Update to 3.2.12: + * Updated French translation, thanks to Olivier Sallou! + * Bug#9910 - Startup warnings/errors with Perl 5.18.1. + * Bug#9753 - META HTTP-EQUIV=Refresh tag not stripped from HTML +email. + * Bug#9897 - process ticket 'fading away' - Process is invalid. + * Bug#9749 - Using spell checker in rich text Editor strips HTML +formatting. + * Bug#4465 - Spell checker ispell ignores some characters such German +umlauts. + * Bug#9883 - Stats Overview is slow due Caching bug (object cache does +not work). + * Bug#9839 - Inline images not showing up when cookies are disabled. + * Moved process import functionality in the backend module +Kernel/System/ProcessManagement/DB/Process.pm. + * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard. + * Bug#9814 - Tickets without articles not shown correcly in medium view. + * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values +of toolbar widgets are ignored. + * Bug#9391 - Incorrect permissions on .procmailrc. + * Bug#9796 - Misaligned Headers on Simple Stats. +- Aditional changes from 3.2.11: + * Bug#9542 – Uninitialized value in AgentTicketForward. + * Bug#9765 – Dynamic Field values are completely removed if one entry +contains a dash. + * Bug#9764 – ACL, Queue will ignored with customerID. + * Bug#9762 – Queue View – S / M / L views – not saved after logout. + * Bug#9580 – Time fields in TicketGetResponse Ticket element do not +comply with xsd:DateTime format. + * Bug#9748 – ProcessManagement: Duplicate articles in a process-ticket +(TransitionAction). + * Bug#9759 – Installer Error DB – max key length is 767 bytes. + * Bug#9747 – Only first selected process displays the RichText editor. + * Bug#9688 – ORA-01839 error occurs at DynamicField in TicketSearch. + * Bug#9751 – TimeUnits are not accepted with a value of 0. + * Bug#9739 – Customer interface not working with MySQL 5.6. + * Bug#8489 – setting Tickets per page resets AgentTicketQueue. + * Bug#9732 – German translation file de.pm incomplete. + * Bug#9728 – Bulk action (send email) ignores reply-to address from +unknown customers. + * Bug#9661 – Useless code in DynamicField backend. + * Bug#9701 – Ticket overview Queue Sort Filter is missing. + * Bug#8173 – Dashboard Widget “Online” does not save state. + * Bug#9188 – AgentTicketEmail always loads a signature, even if no +queue is selected. + * Bug#9672 – Undecrypted HTML part displayed when viewing a +multipart/alternative PGP encrypted HTML mail. + +--- Old: otrs-3.2.10.tar.bz2 New: otrs-3.2.13.tar.bz2 Other differences: -- ++ otrs.spec ++ --- /var/tmp/diff_new_pack.PcaDNX/_old 2013-12-12 11:17:43.0 +0100 +++ /var/tmp/diff_new_pack.PcaDNX/_new 2013-12-12
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2013-09-23 10:40:12
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2013-08-02
07:07:50.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2013-09-23
11:17:33.0 +0200
@@ -1,0 +2,81 @@
+Wed Sep 18 12:06:19 UTC 2013 - ch...@computersalat.de
+
+- update OTRS::ITSM to 3.2.9
+ * Bug#9637 - ITSM Overview shows error if agent has no permission to any
+config item class.
+ * Bug#9621 - GeneralCatalog does not allow the number zero (0) as value
+for a GeneralCatatalog ClassItem.
+ * Rollback changes for bug#9613. Due to a last minute problem with the
+mentioned bug fix we had to revert and release a new version of OTRS ITSM!
+- rebase otrs-perm patch
+ * fix spec (better fix cause than symptom)
+remove exclude %{otrs_root}/%{name}/Kernel/System/Package.pm.orig
+
+---
+Thu Sep 5 05:16:31 UTC 2013 - alexan...@exatati.com.br
+
+- Update to 3.2.10:
+ * Bug#9617 - Event-based notifications are not sent for process-tickets.
+ * Bug#9666 - Installing an invalid package cause an server error on
+package manager.
+ * Bug#8408 - No separator used in CSV files if UserCSVSeparator enabled
+and not set.
+ * Bug#9635 - article_search not updated on ticket merges.
+ * Bug#9629 - ORA-936 error in AgentTicketSearch with some search clauses.
+ * Bug#9631 - BuildSelection() Selected does not work if value contains
+strings that are HTML-escaped.
+ * Bug#9630 - Dynamic Fields of type Date can record wrong date when
+TimeZoneSettings are used.
+ * Bug#9316 - Under nginx CustomerInformationCenter search returns Bad
+Gateway.
+ * Bug#9610 - When email does not specify charset, content is not
+displayed in IE10.
+ * Bug#9622 - Actions in Small ticket overview don't work when cookies
+are turned off.
+ * Bug#9541 - Package manager cannot use https proxy.
+ * Fixed bug pull#[83](https://github.com/OTRS/otrs/pull/83) - Pagination
+next page link, thanks to Renée Bäcker.
+ * Bug#9594 - No auro-reply sent with multiple From addresses in
+AgentTicketPhone on PostgreSQL and Oracle.
+ * Bug#3434 - Validity of search time frame not checked by OTRS.
+ * Bug#5475 - Incorrectly limited ticket list queries in queue view.
+ * Bug#8667 - No error Message when tryiing to Merge Ticket with itself.
+ * Bug#6985 - SMTPTLS backend requires username and password.
+ * Bug#3434 - Validity of search time frame not checked by OTRS.
+ * Bug#9598 - Typo in vacation message for German locale.
+ * Bug#9595 - Incomplete page reload handling in merge and bounce.
+ * Bug#5307 - Tickets can be raised against an invalid Customer Company.
+ * Bug#9596 - On merge and bounce screens is confusing when fill or
+not 'To', 'Subject' and 'Body' fields.
+ * Bug#9514 - Bulk action (send email) uses senders address instead of
+customer id.
+ * Bug#9595 - Incomplete page reload handling in merge and bounce.
+ * Bug#9570 - AgentTicketSearch with exclamation mark emits invalid SQL
+ * Bug#3007 - CheckMXRecord and CheckEmailAddresses have no effect on
+AgentTicketBounce.
+ * Bug#9512 - Database error for invalid date in AgentTicketSearch.
+ * Bug#4465 - Spell checker ispell ignores some characters such German
+umlauts.
+ * Bug#8428 - Bad usability of multiple sender/recipient feature.
+ * Bug#9556 - Bounce and merge require notification recipient, subject
+and body even if no notification is sent.
+ * Bug#9584 - No server side validation of To/Subject/Body in merge
+mask.
+ * Bug#9578 - DynamicField sorting does not work on TicketSearch
+results in Customer Interface.
+ * Bug#9579 - SOAP Serializer used in
Kernel/GenericInterface/Transport/HTTP/SOAP.pm
+does not correctly set namespace.
+ * Bug#9577 - Engine translate date to dado from english to pt_BR.
+ * Bug#7359 - Setting pending states via generic agent does not set
+pending time.
+ * Bug#5920 - Search restriction for dates is not displayed in
+customer interface.
+ * Bug#8380 - Middle name not displayed in AdminCustomerUser.
+ * Bug#9576 - GI TicketSearch Date and Date/Time dynamic fields are
+ignored.
+ * Changed Dynamic Field SearchFieldParameterBuild() API, LayoutObject
+is now optional.
+ * Bug#9573 - Date and DateTime dynamic fields not considered in
+GenericAgent Jobs.
+
+---
Old:
itsm-3.2.7.tar.bz2
otrs-3.2.9.tar.bz2
New:
itsm-3.2.9.tar.bz2
otrs-3.2.10.tar.bz2
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2013-08-02 07:07:46 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2013-03-21 09:53:45.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2013-08-02 07:07:50.0 +0200 @@ -1,0 +2,242 @@ +Sat Jul 27 00:12:28 UTC 2013 - ch...@computersalat.de + +- fix for bnc#828850 (CVE-2013-4717, CVE-2013-4718) +- Update to 3.2.9 + (fix for OSA-2013-05, CVE-2013-4717, CVE-2013-4718) + http://otrs.org/advisory/ + * Bug#9561 - ACL restriction with CustomerID for DynamicFields at +new Ticket screen not working. + * Bug#8728 - Problem loading otrs-initial_insert.oracle.sql. + * Bug#9481 - Possible to select invalid services in SLA admin screen. + * Bug#9539 - Cannot send notification to a group of customers. + * Bug#8273 - Copying text in preview mode not possible. + * Bug#9557 - Cannot see quoted text in customer ticket zoom. + * Bug#9011 - GenericInterface: New value after value mapping can't be 0. + * Improved parameter quoting in various places. + * Bug#9104 - Group permission for customer subset overwrites +permissions for other customers. + * Bug#9434 - Activities are not translated. + * Bug#9261 - Ticket Inbound changes FROM in view. + * Bug#9540 - AgentTicketOwner doesn't activate PreviousOwner if new +owner is selected. + * Bug#9365 - AgentLinkObject screen does not provide a search +restriction for ticket type. + * Bug#9533 - Delete Inactive Process button not aligned. + * Bug#9504 - wrong status after answer via customer portal. + * Bug#9425 - Wrong created date for queue view. + * Follow-up fix for bug#[8880] - No inline image shown if HTML +email contains 'base' tag. + * Bug#8112 - Display issue in FROM column of AgentTicketZoom with +some agent names. + * Bug#9524 - Uninitialized value after step2 in TicketAccountedTime +stats. + * Bug#9511 - ProcessManagement: No SLA verification after Service +update. + * Bug#9513 - Frontend::ToolBarModule###11-CICSearchCustomerUser +does not use settings of Frontend::Agent::CustomerSearch. + * Bug#8719 - PasswordMin2Lower2UpperCharacters problem. +- update OTRS::ITSM to 3.2.7 + (fix for OSA-2013-05, CVE-2013-4717, CVE-2013-4718) +- fix spec + +--- +Tue Jun 18 22:22:50 UTC 2013 - ch...@computersalat.de + +- Update to 3.2.8: 2013-06-18 + (fix for OSA-2013-04, CVE-2013-4088) + * bug#9464 - Unique email address only checked during CustomerUserAdd, not +during Update. + * bug#9497 - AgentTicketSearch logs a Uninitialized error message in Oracle. + * bug#9451 - Possible to select invalid autoresponses for queues. + * bug#9516 - Field names for account signups in some languages are broken. + * bug#9501 - Missing values in GenericAgent ticket list for tickets without +articles. + * bug#9447 - Empty line at PDF search result with process tickets (0 article). + * bug#9409 - If HTTP_USER_AGENT isn't set, error on Layout.pm. + * bug#9454 - Use of uninitialized value error in AgentTicketForward.pm, undef +Next ticket state. + * bug#9493 - Use of uninitialized value error in AgentTicketPhone.pm on Ticket +Split action. + * bug#9503 - no connection header in soap responses. + * Improved permission checks in AgentTicketWatcher. + * bug#7143 - SFTP. gets rewritten to Shttp://FTP.; + * bug#9488 - Use of uninitialized value at OutofOffice setting in +AgentPreferences. + * bug#9479 - ProcessManagement: Article and CustomerID should not be Hidden. + * bug#9491 - GenericAgent job update with dynamic fields sends Uninitialized +value error. + * bug#9456 - Empty 'Dropdown' dynamic field value of GenericAgent job wont get +used and stored. + * Follow-up fix for bug#9245 - Added translatable titles for transition +buttons. + * Updated Russian translation, thanks to Alexey Gluhov! + * bug#9245 - Improve user interaction on transitions. + * bug#9284 - Improve user experience of accordion widget. + * bug#9105 - Opening reply view crashes browsers on iPad 3. + * Fixed caching key and inquiry of dynamic field value in HistoryTicketGet +function (TE). + * Added a new parameter to disable default sorting of statistics. + * Added '-a reinstall-all' feature to bin/otrs.PackageManager.pl. + * bug#9476 - AgentTicketZoom: translation of split into german language. + * bug#9459 - Creating a new transition action coming from the transition path +view produces errors. + * bug#9458 - Double click on Transition opens error message. + * bug#9241 - Article ignored in article search index if body is almost
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2013-03-21 09:53:42 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs, Maintainer is lmue...@suse.com Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2013-03-08 09:30:06.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2013-03-21 09:53:45.0 +0100 @@ -1,0 +2,162 @@ +Fri Mar 15 11:58:28 UTC 2013 - alexan...@exatati.com.br + +- Update to 3.2.3: + * Bug#9221 - Got error log message when customer user take +activity dialog operation in customer interface. + * Bug#8727 - Webservices can be created with an invalid/incomplete +configuration. + * Bug#9214 - IE10: impossible to open links from rich text articles. + * Bug#9218 - Cannot use special characters in TicketHook. + * Bug#9056 - Unused SysConfig option Ticket::Frontend::CustomerInfoQueueMaxSize. + * Bug#8764 - Added @ARGV encoding to command line scripts. + * Bug#9189 - Executing DBUpdate-to-3.2.pl as root user leaves file +permissions on ZZZAuto.pm in incorrect state. + * Bug#9196 - ProcessManagement: Internal Server Error for Ended +process zoom in Customer Interface. + * Bug#9202 - ProcessManagement: ActivityDialog Admin GUI should +not let internal article types for Customer Interface. + * Bug#9193 - Process Management: (First) article filled in in +customer frontend causes Need ArticleTypeID! error. + * Follow-up fix for bug#8533 apache will not start on Fedora. + * Bug#9172 - Generic Interface does not work on IIS 7.0. + * Bug#8865 - Additional empty data column in statistics CSV-Output. + * Bug#4056 - Delete S/MIME Certificate via AdminSMIME does not +update CustomerUserPreferences. + * Bug#9128 - OTRS uses internal sub of Locale::Codes::Country +which causes trouble for Debian. + * Bug#9173 - ProcessManagement: Very right aligned activities +can't display assigned dialogs. + * Bug#9174 - Process Management: Save / Save and finish / Cancel +inside process diagram canvas. + * Bug#9155 - SMIME: DefaultSignKey not selected in AJAX refreshes. + * Bug#9164 - ProcessManagement: Default values of assigned +hidden activity dialogs not considered. + * Bug#7312 - otrs.SetPermissions.pl does not take scripts in +$OTRSHOME/Custom into account. + * Bug#7237 - Better Shortening Logic in Ascii2Html. + * Bug#9139 - Context sensitive search in CIC doesn't open +CIC search. + * Bug#9087 - ProcessManagement: AgentTicketProcess doesn't show +multi level queue structure. + * Follow-up fix for bug#9158 - ProcessManagement: Priority +field error message: Need Priority or PriorityID!. +- Refresh otrs-perm.patch and otrs-httpd_conf.patch patches. +- Remove obsolete *.pm from %files section. + +--- +Thu Mar 7 23:10:56 UTC 2013 - ch...@computersalat.de + +- update to 3.2.2 + * fixed bug#9171 - ProcessManagement: AgentTicketProcess lists all state types. + * Follow-up fix for bug#4513 - Password and Username are added +automatically by the browser in AdminUser dialog. + * Updated Spanish translation, thanks to Enrique Matías Sánchez! + * Fixed bug#9157 - ProcessManagement: Activity labels not aligned well. + * Fixed bug#9156 - ProcessManagement: Transition Condition Fields cannot be removed correctly. + * Fixed bug#9160 - ProcessManagement: Path dialog looses data after editing transition actions. + * Fixed bug#9159 - ProcessManagement: Date fields are activated by default. + * Added display restriction for field CustomerID in Process Management Activity +Dialogs to only be shown as mandatory or not shown. + * Fixed bug#9150 - Process Management: CustomerUser field not indicated as required field. + * Fixed bug#9158 - ProcessManagement: Priority field error message: Need Priority or PriorityID! + * Fixed bug#9162 - Setting the start day of the week for the datepicker to Sunday does not work. + * Fixed bug#9127 - Problem with CustomerPanelOwnSelection. + * Added new Canadian French translation, thanks to Evans Bernier / CDE Solutions Informatique! + * Fixed bug#5492 - Need Template or TemplateFile Param error message after activating AgentInfo. + * Fixed bug#9138 - Unused X-OTRS-Info header in SysConfig. + * Fixed bug#9117 - CustomerUpdate history entry added even if customer user has not +been updated. + * Fixed bug#9006 - Labels and values are misaligned. + * Fixed bug#9132 - Button to create new ticket appears in Customer Interface although +ticket creation is disabled. + * Added Patch/Workaround for CPAN MIME::Parser v5.503 that prevent the trimming of empty +lines that lead to inconsistencies between signed
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2013-03-08 09:30:03
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2012-12-19
11:23:35.0 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2013-03-08
09:30:06.0 +0100
@@ -1,0 +2,52 @@
+Tue Feb 19 16:42:56 UTC 2013 - ch...@computersalat.de
+
+- update to 3.1.13
+ - http://www.otrs.com/en/open-source/community-news/releases-notes/
+release-notes-otrs-help-desk-3113/
+ -
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.2260.2.206view=markup
+ * Fixed bug#9162 - Setting the start day of the week for the datepicker to
+Sunday does not work.
+ * Fixed bug#9141 - Confused Columns in CustomerTicketSearch (ResultShort).
+ * Fixed bug#9146 - Signed SMIME mails with altered content shows a not clear
+message.
+ * Fixed bug#9145 - SMIME sign verification errors are not displayed in
TicketZoom.
+ * Fixed bug#9140 - Postmaster Filter for empty subjects does not work.
+ * Fixed bug#9121 - Filenames with Unicode NFD are incorrectly reported as NFC
+by Main::DirectoryRead().
+ * Fixed bug#9108 - Check for opened/closed tickets not working with
+Ticket::SubjectFormat = Right.
+ * Fixed bug#8839 - DateChecksum followup doesn't get correctly SystemID.
+ * Updated Russian translation, thanks to Vadim Goncharov!
+ * Fixed bug#9101 - Not possible to create dropdown with autocomplete
attribute.
+ * Fixed bug#9096 - All services list is shown instead of only default
services.
+ * Fixed bug#8470 - otrs.GenericAgent.pl reports: Can't open
+
'/opt/otrs/otrs_vemco/var/tmp/CacheFileStorable/DynamicField/f3b7e10730fb6c9cab5ae0e7f7e034f3'.
+ * Added new translation for Spanish (Colombia), thanks to John Edisson Ortiz
Roman!
+ * Fixed bug#9054 - Link Object deletes all links under certain conditions.
+ * Fixed bug#8944 - do not backup the cache.
+ * Fixed bug#9057 - Generating a PDF with bin/otrs.GenerateStats.pl produces
lots
+of warnings.
+ * Fixed bug#8929 - Fix problems with empty ticket search results while
+Ticket::Frontend::AgentTicketSearch###ExtendedSearchCondition is inactive.
+ * Fixed bug#9042 - Add X-Spam-Score to Ticket.xml.
+ * Fixed bug#9047 - HistoryTicketGet caches info on disk directly.
+ * Fixed bug#8923 - Alert message shown, if parent window is reloaded while
+bulk action popup is open.
+ * Fixed bug#9030 - Wrong handling of Invalid YAML in Scheduler Tasks.
+ * Updated CKEditor to version 3.6.6.
+ * Updated Polish translation, thanks to Pawel @ ib.pl!
+ * Follow-up fix for bug#8805 - Cron missing as RPM dependency on RHEL.
+Changed dependency on 'anacron' to 'vixie-cron' on RHEL5.
+ * Fixed bug#9020 - Generic Ticket Connector does not support attachments with
+ContentType without charset.
+ * Fixed bug#8545 - Attachment download not possible if pop up of another
action is open.
+ * Fixed bug#9009 - Empty Multiselect Dynamic Fields provokes an error.
+ * Fixed bug#8589 - Bulk-Action not possible for single ticket.
+ * Fixed bug#7198 - Broken repository selection width in Package Manager.
+ * Fixed bug#8457 - Error if accessing AgentTicketSearch from
AgentTicketPhone in IE8.
+ * Fixed bug#8695 - Table head of Customer Ticket History does not resize on
window resize.
+ * Fixed bug#8533 - Apache will not start if you use mod_perl on Fedora 16 or
17.
+ * Fixed bug#8974 - Event Based Notification does not populate REALNAME with
+Customer User data.
+
+---
Old:
otrs-3.1.12.tar.bz2
New:
otrs-3.1.13.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.nmzlNu/_old 2013-03-08 09:30:10.0 +0100
+++ /var/tmp/diff_new_pack.nmzlNu/_new 2013-03-08 09:30:10.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package otrs
#
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,7 +16,7 @@
#
-%define otrs_ver 3.1.12
+%define otrs_ver 3.1.13
%define itsm_ver 3.1.7
%define itsm_min 3.1
%define otrs_root /srv
++ ZZZAuto.pm ++
--- /var/tmp/diff_new_pack.nmzlNu/_old 2013-03-08 09:30:10.0 +0100
+++ /var/tmp/diff_new_pack.nmzlNu/_new 2013-03-08 09:30:10.0 +0100
@@ -11,8 +11,10 @@
$Self-{'Package::RepositoryList'} = {
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2012-12-19 11:23:31 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs, Maintainer is lmue...@suse.com Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2012-11-22 17:40:23.0 +0100 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2012-12-19 11:23:35.0 +0100 @@ -1,0 +2,96 @@ +Wed Dec 12 17:11:37 UTC 2012 - ch...@computersalat.de + +- update to 3.1.12 + * Fixed bug#8933 - ArticleStorageInit permission check problem. + * Fixed bug#8763 - Please add charset conversion for customer companies. + * Fixed bug#1970 - Email attachments of type .msg (Outlook-Message) are converted. + * Fixed bug#8955 - Init script might fail on SUSE. + * Fixed bug#8936 - Ticket close date is empty when ticket is created in closed state. + * Fixed bug#8937 - $ should be escaped in interpolated strings when javascript is meant. + * Fixed bug#8919 - Customer interface search results: ticket can only be accessed +via ticket number and subject. + * Fixed bug#8850 - CustomerTicketOverview - MouseOver Age isn't always correct. + * Fixed bug#8868 - Event Based Notification problem saving 'text' Dynamic Fields. + * Fixed bug#8914 - Syntax error in hash loop in TicketGet operation. + * Fixed bug#8749 - CustomerFrontend: missing dynamicfield in search results. + * Fixed bug#8873 - Bad example of customization of static dynamic fields in +AgentTicketOverviewSmall. + * Fixed bug#8791 - IMAPTLS fails with some Microsoft Exchange servers. + * Fixed bug#8841 - Search for Dynamic Fields shows all tickets (on enter key pressed). + * Fixed bug#8861 - Ticket History overlaid calender choice function. + * Fixed bug#8862 - GI debugger GUI does not show SOAP XML tags correctly. + * Fixed bug#8566 - Cannot download attachment if filename has character #. + * Fixed bug#8833 - Article table in TicketZoom does not scroll correctly. + * Fixed bug#8673 - Richtext-Editor popups broken on Customer-Interface. + * Fixed bug#8859 - Package upgrade does not work if an installed testpackage +should be upgraded with a newer regular package. + * Fixed bug#8678 - 'WidgetAction Toggle' is always shown as 'Expanded' when nesting elements + * Fixed bug#8378 - Validation fails if the ID of the element contains a dot (.) or a +colon (:) + * Fixed bug#8847 - Inline PGP message description routine does not add any info, thanks +to IB Development Team. + * Fixed bug#8848 - AgentTicketEmail does not preserve PGP Signatures set if attachment +is added. + * Fixed bug#8149 - Wrong handling of subject when SubjectFormat=right. + * Updated Polish translation, thanks to Pawel! + * Fixed bug#8820 - Service rcotrs restart fails because a race condition happens. + * Fixed bug#8819 - Syntax error (stop crontab command) in SuSE rc script. + * Removed auto cleanup of expired sessions in CreateSessionID() to improve the scalability +of the hole system. + * Fixed bug#8667 - TicketSplit does not use QueueID of old Ticket for ACL Checking. + * Fixed bug#8780 - 508 Compliance: Text descriptions of Responsible Tickets +and Locked Tickets links are insufficient for screen reader users. + * Fixed bug#8812 - Encrypted email doesn't see properly in Outlook. + * Fixed bug#8214 - OTRS Init script on Red Hat fails to check scheduler. + * Fixed bug#8850 - Cron missing as RPM dependency on Red Hat Enterprise Linux. + * Fixed bug#7274 - Ticket QueueView sorts by priority on first page but subsequent +pages sort incorrectly by Age. + * Fixed bug#8792 - TriggerEscalationStopEvents logs as loglevel 'error'. + * Fixed bug#8743 - AgentTicketCompose.pm creates To, CC, BCC filelds without +spaces after comma. + * Fixed bug#8606 - Escalation notifications should not be sent to agents who +are set out-of-office. + * Fixed bug#8740 - backup.pl: insufficient handling of system() return values. + * Fixed bug#8622 - Storing a new GI Invoker or Operation with an existing name doesn't +complain anything. + * Fixed bug#8770 - AJAX Removes Default Options (follow-up fix). + * Improved caching for Services and Service Lists. +- Update ITSM to 3.1.7 + - News + * In AgentTicketZoom the service and the sla are now shown as links +to the service zoom / sla zoom screens. + * Updated Polish translation, thanks to Pawel! + * Added feature in bin/otrs.ITSMConfigItemDelete.pl script to delete +config items by class together with the deployment state. + * Added CustomerCompany field type that allows to link CI's with +Customer Companies registered in OTRS. + * Enhanced Import/Export screen to show a summary after importing. + * Added new optional
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2012-11-22 17:40:20
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2012-09-14
12:33:03.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2012-11-22
17:40:23.0 +0100
@@ -1,0 +2,24 @@
+Thu Nov 22 12:10:49 UTC 2012 - ch...@computersalat.de
+
+- fix for bnc#790729 (typo in ZZZAuto.pm)
+
+---
+Thu Oct 25 18:53:53 UTC 2012 - alexan...@exatati.com.br
+
+- Update to 3.1.11:
+ - Fixed bug#8770 - AJAX Removes Default Options.
+ - Fixed bug#7135 - Queueview, Ticketwindow closing on Refresh.
+ - Fixed bug#7294 - Ticket search window closes on background
+refresh of ticket queue.
+ - Fixed bug#8765 - Package Manager OS detection does not work.
+ - Improved HTML security filter to better find javascript source
+URLs.
+ - Fixed bug#8575 - SSL protocol negotiation fails using SMTPTLS
+with recent IO::Socket::SSL versions by upgrading TLS module to
+0.20.
+ - Fixed bug#4475 - Extra double quote added to HTML links when
+using http-link field.
+ - Improved caching of search results when the result set is empty.
+- Rebase otrs-perm.patch.
+
+---
Old:
otrs-3.1.10.tar.bz2
New:
otrs-3.1.11.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.TAxON0/_old 2012-11-22 17:40:27.0 +0100
+++ /var/tmp/diff_new_pack.TAxON0/_new 2012-11-22 17:40:27.0 +0100
@@ -16,7 +16,7 @@
#
-%define otrs_ver 3.1.10
+%define otrs_ver 3.1.11
%define itsm_ver 3.1.6
%define itsm_min 3.1
%define otrs_root /srv
++ ZZZAuto.pm ++
--- /var/tmp/diff_new_pack.TAxON0/_old 2012-11-22 17:40:27.0 +0100
+++ /var/tmp/diff_new_pack.TAxON0/_new 2012-11-22 17:40:27.0 +0100
@@ -11,7 +11,7 @@
$Self-{'Package::RepositoryList'} = {
'file://@OTRS_ROOT@/otrs/itsm/packages30/' = '[--OTRS::ITSM 3.0 local
repo]',
'file://@OTRS_ROOT@/otrs/itsm/packages31/' = '[--OTRS::ITSM 3.1 local
repo]',
- 'http://ftp.otrs.org/pub/otrs/itsm/packages30/' = '[--OTRS::ITSM 3.0
Master--] http://ftp.otrs.org/'
+ 'http://ftp.otrs.org/pub/otrs/itsm/packages30/' = '[--OTRS::ITSM 3.0
Master--] http://ftp.otrs.org/',
'http://ftp.otrs.org/pub/otrs/itsm/packages31/' = '[--OTRS::ITSM 3.1
Master--] http://ftp.otrs.org/'
};
$Self-{'Package::RepositoryAccessRegExp'} = '127\\.0\\.0\\.1';
++ otrs-3.1.10.tar.bz2 - otrs-3.1.11.tar.bz2 ++
/work/SRC/openSUSE:Factory/otrs/otrs-3.1.10.tar.bz2
/work/SRC/openSUSE:Factory/.otrs.new/otrs-3.1.11.tar.bz2 differ: char 11, line 1
++ otrs-perm.patch ++
--- /var/tmp/diff_new_pack.TAxON0/_old 2012-11-22 17:40:27.0 +0100
+++ /var/tmp/diff_new_pack.TAxON0/_new 2012-11-22 17:40:27.0 +0100
@@ -2,7 +2,7 @@
===
--- Kernel/System/Package.pm.orig
+++ Kernel/System/Package.pm
-@@ -2801,7 +2801,7 @@ sub _FileSystemCheck {
+@@ -2796,7 +2796,7 @@ sub _FileSystemCheck {
}
# create test files in following directories
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit otrs for openSUSE:Factory
Hello community, here is the log from the commit of package otrs for openSUSE:Factory checked in at 2012-09-14 12:33:01 Comparing /work/SRC/openSUSE:Factory/otrs (Old) and /work/SRC/openSUSE:Factory/.otrs.new (New) Package is otrs, Maintainer is lmue...@suse.com Changes: --- /work/SRC/openSUSE:Factory/otrs/otrs.changes2012-07-12 13:48:38.0 +0200 +++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2012-09-14 12:33:03.0 +0200 @@ -1,0 +2,101 @@ +Mon Sep 10 14:55:38 UTC 2012 - ch...@computersalat.de + +- fix for bnc#778655 (CVE-2012-4600) +- update to 3.1.10 + (fix for OSA-2012-02, http://otrs.org/advisory/) + * Improved HTML security filter to detect tag nesting. + * Bug#8611 - Ticket count is wrong in QueueView. + * Bug#8698 - Layout.pm only looks at first entry from +HTTP_ACCEPT_LANGUAGE to determine language. + * Bug#8731 - LDAP group check returns wrong error. +- fix License: AGPL-3.0 - AGPL-3.0+ + +--- +Wed Aug 22 17:40:22 UTC 2012 - ch...@computersalat.de + +- fix for bnc#776966 (CVE-2012-2582) +- update to 3.1.9 + (fix for OSA-2012-01, http://otrs.org/advisory/) + * HTML mails will now be displayed in an HTML5 sandbox iframe. This +means that modern browsers will not execute plugins or JavaScript +on the content any more. Currently, this is supported by Chrome +and Safari, but IE10 and FF16 are also + * HTML mails will now be displayed in the restricted zone in IE. +This means that more restrictive security settings will apply, +such as blocking of JavaScript content by default. + * Bug#8360 Cannot search for tickets by dynamic fields via SOAP. + * Bug#8697 Time related restrictions in TicketSearch operator +(GenericInterface) not working. + * Bug#8685 - Cannot use address book / customer / spell check in +phone / email if cookies are disabled. (partly fixed) + * Bug#8682 - linking search conditions with in Customersearch +is not working since Update from 3.1.1 to 3.1.7. + * Bug#8683 - Cannot create dynamic field if cookies are disabled. + * Bug#8672 - Search Profile can't have an ampersand in the name via +Toolbar module. + * Bug#8619 - The UPGRADING file has incorrect patchlevel upgrade +description. + * Bug#6882 - Dummy field set first child to the very right in edit +screen. + * Bug#8680 - Bulk action fails if cookies are disabled. +- Update ITSM to 3.1.6 + * HTML mails will now be displayed in an HTML5 sandbox iframe. This +means that modern browsers will not execute plugins or JavaScript +on the content any more. Currently, this is supported by Chrome +and Safari, but IE10 and FF16 are also + * HTML mails will now be displayed in the restricted zone in IE. +This means that more restrictive security settings will apply, +such as blocking of JavaScript content by default. + * Bug# 6329 - Type = 'Dummy' not shown in AgentITSMConfigItemZoom. +- rebase perm patch + +--- +Tue Aug 7 11:19:33 UTC 2012 - ch...@computersalat.de + +- update to 3.1.8 + * Updated Greek translation file, thanks to Maistros Stelios! + * Improved robustness of HTML security filter: Detect masked +UTF-7 and signs. + * Added config option for ticket permission in the escalation view. + * Fixed bug#8675 - Kernel::GenericInterface::Mapping doesn't provide +a ConfigObject. + * Fixed bug#8660 - Duplicate DF X-Headers in PostMaster module. + * Fixed bug#8647 - otrs.GenerateStats.pl -S option does not +function. + * Fixed bug#8616 - Spell Checker does not work using IE9. + * Fixed bug#8568 - IMAPTLS - More than one email at one cron run will +not work. + * Added bug#8627 - bin/otrs.AddQueue2StdResponse.pl Script to add +standard responses to queues. +Thanks to Oliver Skippe @ CIPHRON GmbH. + * Fixed bug#8607 - otrs service fails in 3.1.7 on SUSE linux. + * Increased cache TTL of some core modules to improve performance. + * Fixed bug#8620 - Using a default queue in the customer interface +causes database error on PostgresSQL if ACLs are used. + * Fixed bug#8618 - Inform and Involved Agents select boxes can not +be resizable. + * Fixed bug#8558 - GenericInterface: response isn't valid UTF-8 +content. + * Added bug#7039 - bin/otrs.AddService.pl script to add services +from the command line. + * Made display of pending time consistent with escalation time +display. + * Fixed bug#8230 - Invalid Challenge Token when creating ticket out +of hyperlinks. + - The detailed ChangeLog can be found at: + http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.2260.2.95view=markup +- Update ITSM to 3.1.5: + * Bug# 8581 - No CI Table visible in AgentITSMConfigItem when
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2012-07-12 13:48:35
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2012-06-13
13:32:31.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2012-07-12
13:48:38.0 +0200
@@ -1,0 +2,60 @@
+Tue Jun 26 13:15:09 UTC 2012 - ch...@computersalat.de
+
+- update to 3.1.7
+Bug#8593 - Wrong description for 'Agent Notifications' on Admin
+ interface.
+Bug#8587 - Typo in French translation.
+Bug#7879 - Broken Content-Type in forwarded attachments.
+Bug#8583 - Unneeded complexity and performance degradation
+ creating Service Lists (Replacement for bug fix 7947).
+Bug#8580 - SQL warnings for CustomerCompanyGet on some database
+ backends.
+Bug#8251 - Defect handling of invalid Queues in AJAX refresh.
+Bug#8574 - Perl special variable $/ is changed and never restored.
+Bug#8337 - Parentheses in user last_name / first_name are not
+ sanitized (follow-up fix).
+Bug#8575 - Assignment of users does not work for responsible or
+ owner permission in AgentTicketPhone.
+Bug#7872 - Created date in Large view is actually Last Updated
+ date.
+Bug#8457 - Paste on a newly created ckeditor instance does not
+ work on webkit based browsers.
+Bug#8565 - Exportfile action from otrs.PackageManaget.pl is broken.
+Bug#8458 - $OTRS_SCHEDULER -a start missing from /etc/init.d/otrs
+ after update.
+Bug#8139 - SUSE RPM has no dependency on Date::Format perl module.
+Bug#8544 - Hovering ticket title is still shortened.
+Bug#8553 - Agent notifications can't be loaded from the database
+ in some scenarios.
+Bug#8383 - Email address in 'To' field is lost after second
+ reload if address is not in customer database.
+Bug#8549 - Need User warning in error log when creating a ticket
+ for a customer not in DB.
+Bug#8546 - LinkObject Type is not translated in ticket zoom.
+Bug#7533 - SQL error if body contains only a picture.
+Bug#2626 - Default Service does not work for unknown customers.
+ You can use the new setting
+ Ticket::Service::Default::UnknownCustomer to specify if unknown
+ customers should also receive the default services.
+Bug#8481 - Dynamic Fields lost after ticket move to another queue
+ (using quick move Dropdown).
+ - The detailed ChangeLog can be found at:
+
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.2260.2.76view=markup.
+- added missing optional deps (bin/otrs.CheckModules.pl)
+ * Recommends:
+ perl(Crypt::SSLeay)
+ perl(JSON::XS)
+ perl(Mail::IMAPClient)
+ perl(Net::SSL)
+ * Suggests:
+ perl(Net::LDAP)
+ perl(Text::CSV_XS)
+
+---
+Tue Jun 19 15:14:56 UTC 2012 - ch...@computersalat.de
+
+- fix permission (750,wwwrun,www) for module
+ * SystemMonitoring (bin/otrs.NagiosCheck.pl)
+ * Survey (bin/otrs.SurveyTriggerSendRequests.pl)
+
+---
Old:
otrs-3.1.6.tar.bz2
New:
otrs-3.1.7.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.vFgDRI/_old 2012-07-12 13:48:40.0 +0200
+++ /var/tmp/diff_new_pack.vFgDRI/_new 2012-07-12 13:48:40.0 +0200
@@ -16,7 +16,7 @@
#
-%define otrs_ver 3.1.6
+%define otrs_ver 3.1.7
%define itsm_ver 3.1.4
%define itsm_min 3.1
%define otrs_root /srv
@@ -72,9 +72,16 @@
Requires: perl(Net::DNS)
Requires: perl(PDF::API2)
#
+Recommends: perl(Crypt::SSLeay)
Recommends: perl(Encode::HanExtra)
Recommends: perl(IO::Socket::SSL)
+Recommends: perl(JSON::XS)
+Recommends: perl(Mail::IMAPClient)
+Recommends: perl(Net::SSL)
Recommends: perl(SOAP::Lite)
+#
+Suggests: perl(Net::LDAP)
+Suggests: perl(Text::CSV_XS)
%if %_vendor == suse
%define VENDOR SUSE
@@ -194,6 +201,12 @@
done
touch $RPM_BUILD_ROOT${DESTROOT}var/log/TicketCounter.log
+# add ghost file 'otrs.NagiosCheck.pl'
+# otherwise module 'SystemMonitoring' won't install
+touch ${RPM_BUILD_ROOT}${DESTROOT}/bin/%{name}.NagiosCheck.pl
+# otherwise module 'Survey' won't install
+touch ${RPM_BUILD_ROOT}${DESTROOT}/bin/%{name}.SurveyTriggerSendRequests.pl
+
# install README
for lang in en de; do
%__cp -p ${RPM_SOURCE_DIR}/%{name}.README.${lang}
README.%{VENDOR}.${lang}
@@ -338,6 +351,11 @@
#%attr(0700,%{name},%{name})
%{otrs_root}/%{name}/bin/%{name}.DeleteSessionIDs.pl
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2012-06-13 13:32:17
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2011-12-06
16:23:30.0 +0100
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2012-06-13
13:32:31.0 +0200
@@ -1,0 +2,312 @@
+Mon Jun 11 09:05:12 UTC 2012 - ch...@computersalat.de
+
+- cleanup source, spec
+ * - remove 'permissions' stuff
+- fix changes file
+
+---
+Tue Jun 5 16:07:59 UTC 2012 - ch...@computersalat.de
+
+- update to 3.1.6
+ * Bug#8495 - Generic Agent TicketAction single value attributes
+ should not let multiple selection.
+ * Bug#8378 - Validation fails if the ID of the element contains a
+ dot (.) or a colon (:).
+ * Bug#7532 - 'Field is required' message should be removed in RTE if
+ content is added.
+ * Bug#8514 - Long words in description break rendering of SysConfig
+ items.
+ * Bug#8537 - DynamicField caching issue.
+ * Bug#8482 - Responsible of a ticket without responsible permission.
+ * Bug#8485 - CustomerUser validation fails in GI Ticket Operations
+ if there is no ValidID in the mapping.
+ * Bug#8529 - Fixed print to STDERR in ReferenceData.pm.
+ * Bug#8427 - Dynamic Field Type Multiselect not shown in Notification
+ (event).
+ * Bug#8189 - AgentTicketCompose: Pressing Enter will delete
+ Attachment.
+ * Bug#7844 - Escalation Event does not respect service calendar of
+ ticket/queue.
+ * Bug#8228 - Ticket::Frontend::AgentTicketNote###StateDefault
+ doesn't work.
+ * Bug#8519 - Kernel::System::TicketSearch-TicketSearch() doesn't
+ properly handle array references in SortBy parameter
+ * Bug#7519 - AJAX-reload of SMIME-fields did not work properly.
+ * Bug#8518 - Crypt on multiple recipients error replaces Crypt
+ selection.
+ * Bug#8164 - Internal articles are visible within customer ticket
+ overview.
+ * Bug#8506 - Customer email link won't open in popup as expected.
+ * Bug#7844 - Escalation Event does not respect service calendar of
+ ticket/queue.
+ * Bug#8498 - OpenSSL 1.0.0 does not get the stored SMIME
+ certificates when -CApath is used in the command.
+ * Bug#8337 - Parentheses in user last_name / first_name are not
+ sanitized.
+ * Bug#8467 - Reply to an e-mail address with ' not possible.
+ * Bug#8352 - Wrong substitution regex in HTMLUtils.pm-ToAscii.
+ * Bug#8401 - DynamicField Update doesn't update the
+ X-OTRS-DynamicField-XXX Fields in Postmaster Filters.
+ * Bug#5746 - Using PerlEx you have to restart IIS each time a setting
+is changed in SysConfig.
+ * Bug#8452 - Dynamic Field Date/Time not working when server runs on
+ UTC.
+ - The detailed ChangeLog can be found at:
+
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.2260.2.47view=markup.
+- Update ITSM to 3.1.4:
+ * Bug#8479 - Change and workorder notification records are not
+ deleted during module uninstallation.
+ * Bug#8484 - Can't create cache for Change Management Toolbar
+ Modules on win32 platform.
+ * Bug#8453 - Saved time in ITSMChangeManagement screens adds UTC
+ offset.
+ * Bug#8487 - Usage of event.stopPropagation() causes javascript
+ error in IE8.
+ * Bug#8488 - Change search should require at least one search
+ parameter.
+ * Bug#8507nbsp;- Font size is ignored for text if input is made in
+ certain order.
+ * Bug#8515 - Search icon shows the ticket search instead of the
+ change search when the current screen is the workorder zoom.
+ * Bug#8521 - Back-Link in Workorder-Zoom returns to the previous
+ page, but does not reload the page
+ (the page comes from the browser cache).
+ * Bug#8538 - AgentTicketZoom does not show Review Required Field.
+
+---
+Wed May 16 21:00:51 UTC 2012 - ch...@computersalat.de
+
+- fix itsm sources
+ * dos2unix INSTALL-3.1.ITSM
+ * readd packages30
+ * readd packages31/*3.1.{1,2}.opm
+- fix itsm deps
+- remove/disable permissions file stuff
+- exclude bin/otrs.SetPermissions.pl
+- fix perl deps
+ * use module names, not pkg names
+
+---
+Wed May 16 16:22:36 UTC 2012 - alexan...@exatati.com.br
+
+- Update to 3.1.5:
+ - Updated Hungarian translation, thanks to Csaba Nemeth!
+ - Added possibility to specify a cache type for selective cache
+cleaning in bin/otrs.DeleteCache.
+ - Added possibility to define ACL rules by user role.
+ - Bug#8466 - On Win32 GenericInterface does not return results
+
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2011-12-06 16:23:29
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/otrs/otrs.changes2011-09-23
12:21:10.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs.changes 2011-12-06
16:23:30.0 +0100
@@ -1,0 +2,16 @@
+Fri Dec 2 21:14:19 UTC 2011 - alexan...@exatati.com.br
+
+- Fix wrong tests in init script;
+- Fix permissions in bin to properly functioning of cron tasks;
+- Fix sysconfig variable for OTRS_CLEANUP;
+- Refresh all patches with -p0.
+
+---
+Fri Nov 18 10:13:06 UTC 2011 - ch...@computersalat.de
+
+- update to 3.0.11
+ o several OTRS bug fixes (http://bugs.otrs.org/)
+for more info please see CHANGES file
+http://otrs.org/releases/3.0.11/
+
+---
Old:
otrs-3.0.10.tar.bz2
otrs-3.0.7-init.patch
New:
otrs-3.0.11-init.patch
otrs-3.0.11.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.zB1br6/_old 2011-12-06 16:23:33.0 +0100
+++ /var/tmp/diff_new_pack.zB1br6/_new 2011-12-06 16:23:33.0 +0100
@@ -16,7 +16,7 @@
#
-%define otrs_ver 3.0.10
+%define otrs_ver 3.0.11
%define itsm_ver 3.0.5
%define itsm_min 3.0
%define otrs_root /srv
@@ -39,7 +39,7 @@
Source14: itsm.README.en
Source15: itsm.README.de
Source16: ZZZAuto.pm
-Patch0: %{name}-3.0.7-init.patch
+Patch0: %{name}-3.0.11-init.patch
Patch1: %{name}-3.0.9-httpd_conf.patch
Patch2: %{name}-3.0.7-perm.patch
BuildArch: noarch
@@ -116,9 +116,9 @@
%prep
%setup -q -n %{name}-%{otrs_ver} -a 1
-%patch0 -p1
-%patch1 -p1
-%patch2 -p1
+%patch0
+%patch1
+%patch2
# rpmlint
incorrect-fsf-address
### http://www.fsf.org/about/contact/
@@ -327,10 +327,11 @@
###
## {otrs,www}
###
-%defattr(0644,%{name},www,0775)
-
+%defattr(0744,%{name},www,0775)
# bin
%{otrs_root}/%{name}/bin
+
+%defattr(0644,%{name},www,0775)
%exclude %{otrs_root}/%{name}/bin/%{name}.DeleteSessionIDs.pl
%exclude %{otrs_root}/%{name}/bin/%{name}.UnlockTickets.pl
%exclude %{otrs_root}/%{name}/bin/%{name}.GetConfig.pl
++ otrs-3.0.7-init.patch - otrs-3.0.11-init.patch ++
--- /work/SRC/openSUSE:Factory/otrs/otrs-3.0.7-init.patch 2011-09-23
12:21:10.0 +0200
+++ /work/SRC/openSUSE:Factory/.otrs.new/otrs-3.0.11-init.patch 2011-12-06
16:23:30.0 +0100
@@ -1,7 +1,8 @@
-diff -ruN otrs-3.0.7-orig/scripts/suse-rcotrs otrs-3.0.7/scripts/suse-rcotrs
otrs-3.0.7-orig/scripts/suse-rcotrs2010-10-11 19:21:09.0
+0200
-+++ otrs-3.0.7/scripts/suse-rcotrs 2011-05-07 13:12:38.0 +0200
-@@ -12,25 +12,39 @@
+Index: scripts/suse-rcotrs
+===
+--- scripts/suse-rcotrs.orig
scripts/suse-rcotrs
+@@ -12,25 +12,57 @@
### BEGIN INIT INFO
# Provides: otrs
@@ -26,34 +27,50 @@
-#
-CONFIGFILE=rcconfig file not found!
-test -r /etc/rc.config . /etc/rc.config
--
--test -r /etc/rc.config.d/otrs . /etc/rc.config.d/otrs
CONFIGFILE=/etc/rc.config.d/otrs
--
--test -r /etc/sysconfig/otrs . /etc/sysconfig/otrs
CONFIGFILE=/etc/sysconfig/otrs
+# Check for existence of needed config file and read it
+OTRS_SYSCONFIG=/etc/sysconfig/otrs
+test -r $OTRS_SYSCONFIG || { echo $OTRS_SYSCONFIG not existing;
+if [ $1 = stop ]; then exit 0;
+else exit 6; fi; }
+
-+# Read config
++# Read config
+. $OTRS_SYSCONFIG
+
-+test -z $OTRS_ROOT || { echo OTRS_ROOT not set;
-+ echo check config: $OTRS_SYSCONFIG;
-+ exit 6; }
++if [ -z $OTRS_ROOT ]; then
++echo OTRS_ROOT not set;
++echo check config: $OTRS_SYSCONFIG;
++exit 6;
++fi
+
-+test -z $OTRS_POSTMASTER || { echo OTRS_POSTMASTER not set;
-+ echo check config: $OTRS_SYSCONFIG;
-+ exit 6; }
++if [ -z $OTRS_POSTMASTER ]; then
++echo OTRS_POSTMASTER not set;
++echo check config: $OTRS_SYSCONFIG;
++exit 6;
++fi
+
+-test -r /etc/rc.config.d/otrs . /etc/rc.config.d/otrs
CONFIGFILE=/etc/rc.config.d/otrs
++if [ -z $OTRS_CHECKDB ]; then
++echo OTRS_CHECKDB not set;
++echo check config: $OTRS_SYSCONFIG;
++exit 6;
++fi
+
+-test -r /etc/sysconfig/otrs . /etc/sysconfig/otrs
CONFIGFILE=/etc/sysconfig/otrs
++if [ -z $OTRS_CLEANUP ]; then
++echo OTRS_CLEANUP not set;
++echo check config: $OTRS_SYSCONFIG;
++
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory checked in
at 2011-12-06 18:35:16
Comparing /work/SRC/openSUSE:Factory/otrs (Old)
and /work/SRC/openSUSE:Factory/.otrs.new (New)
Package is otrs, Maintainer is lmue...@suse.com
Changes:
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.a2gGBi/_old 2011-12-06 18:56:47.0 +0100
+++ /var/tmp/diff_new_pack.a2gGBi/_new 2011-12-06 18:56:47.0 +0100
@@ -26,7 +26,7 @@
Summary:The Open Ticket Request System
Version:%{otrs_ver}
Release:1
-License:AGPLv3
+License:AGPL-3.0
Group: Productivity/Networking/Email/Utilities
Url:http://otrs.org/
AutoReqProv:off
@@ -79,7 +79,7 @@
Authors list: see CREDITS
%package doc
-License:AGPLv3
+License:AGPL-3.0
Summary:OTRS Documentation
Group: Documentation/Other
@@ -89,7 +89,7 @@
Authors list: see CREDITS
%package -n otrs-itsm
-License:AGPLv3
+License:AGPL-3.0
Summary:ITIL (R) focused IT service management
Version:%{itsm_ver}
Release:1
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory
checked in at Thu May 26 14:39:14 CEST 2011.
--- otrs/otrs.changes 2011-05-07 12:46:37.0 +0200
+++ /mounts/work_src_done/STABLE/otrs/otrs.changes 2011-05-22
18:48:33.0 +0200
@@ -1,0 +2,28 @@
+Sun May 22 16:47:15 UTC 2011 - ch...@computersalat.de
+
+- update to 3.0.7
+ o several OTRS bug fixes (http://bugs.otrs.org/)
+for more info please see CHANGES file
+- update OTRS::ITSM to 3.0.3
+ o for more info please see
+http://lists.otrs.org/pipermail/itsm-announce/2011/subject.html
+- reworked init patch
+ o removed 2.4.7-init
+ o added 3.0.7-init
+- move /opt to /srv
+ o add 3.0.7-httpd_conf patch
+ o updated
+- ZZZAuto.pm
+- sysconfig.otrs
+- itsm.README.{de,en}
+- spec mods
+ o add macro {otrs_root}
+ o macro usage
+ o wrong-file-end-of-line-encoding
+INSTALL-3.0.ITSM
+- do not overwrite Kernel/Config.pm* on update
+- rework dir/file permissions
+ o remove sbits from var/{article,log}
+ o add 3.0.7-perm patch (no check_permission on /bin/)
+
+---
calling whatdependson for head-i586
Old:
itsm-2.1.3.tar.bz2
otrs-2.4.10.tar.bz2
otrs-2.4.7-init.patch
rpmlintrc
New:
itsm-3.0.3.tar.bz2
otrs-3.0.7-httpd_conf.patch
otrs-3.0.7-init.patch
otrs-3.0.7-perm.patch
otrs-3.0.7.tar.bz2
otrs.rpmlintrc
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.hnTQwG/_old 2011-05-26 12:50:35.0 +0200
+++ /var/tmp/diff_new_pack.hnTQwG/_new 2011-05-26 12:50:35.0 +0200
@@ -16,10 +16,11 @@
#
+%define otrs_ver 3.0.7
+%define itsm_ver 3.0.3
+%define itsm_min 3.0
+%define otrs_root /srv
%define otrsdoc_dir_files CHANGES COPYING* CREDITS INSTALL README* TODO
UPGRADING doc
-%define otrs_ver 2.4.10
-%define itsm_ver 2.1.3
-%define itsm_min 2.1
Name: otrs
Summary:The Open Ticket Request System
@@ -31,21 +32,23 @@
AutoReqProv:off
Source: ftp://ftp.otrs.org/pub/otrs/%{name}-%{otrs_ver}.tar.bz2
Source1:itsm-%{itsm_ver}.tar.bz2
-Source2:rpmlintrc
+Source2:%{name}.rpmlintrc
Source11: sysconfig.%{name}
Source12: %{name}.README.en
Source13: %{name}.README.de
Source14: itsm.README.en
Source15: itsm.README.de
Source16: ZZZAuto.pm
-Patch0: %{name}-2.4.7-init.patch
+Patch0: %{name}-3.0.7-init.patch
+Patch1: %{name}-3.0.7-httpd_conf.patch
+Patch2: %{name}-3.0.7-perm.patch
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
PreReq: %insserv_prereq %fillup_prereq
PreReq: coreutils mktemp net-tools pwdutils
# /usr/bin/getent
PreReq: glibc
-PreReq: apache2 grep sed
+PreReq: apache2 grep permissions sed
BuildRequires: pwdutils
%if 0%{?suse_version} 1020
BuildRequires: fdupes
@@ -91,7 +94,7 @@
Version:%{itsm_ver}
Release:1
Group: Productivity/Networking/Email/Utilities
-Requires: %{name} = 2.4.0
+Requires: %{name} = 3.0.6
Provides: itsm OTRS::ITSM
%description itsm
@@ -107,87 +110,109 @@
for INSTALL see INSTALL-%{itsm_min}.ITSM
please see README.itsm for further details, which comes with otrs package
-Required OTRS::ITSM modules can be found under /opt/%{name}/itsm
+Required OTRS::ITSM modules can be found under %{otrs_root}/%{name}/itsm
Authors list: see CREDITS
%prep
%setup -q -n %{name}-%{otrs_ver} -a 1
%patch0 -p1
+%patch1 -p1
+%patch2 -p1
find -name .cvsignore -type f | xargs rm -fv
+find -name .htaccess -type f | xargs rm -fv
pushd Kernel/Config/Files
-%{__cp} %{S:16} .
+%__cp %{S:16} .
+%__sed -i -e s,@OTRS_ROOT@,%{otrs_root},g\
+ ZZZAuto.pm ../../../scripts/apache2-httpd.include.conf
popd
+# fix old otrs_root (/opt)
+%__sed -i -e s,/opt/%{name},%{otrs_root}/%{name},g \
+ bin/otrs.SetPermissions.pl \
+ Kernel/Config/Files/Framework.xml \
+ Kernel/Config/Defaults.pm \
+ Kernel/Config.pm.dist \
+ README \
+ scripts/apache2-perl-startup.pl \
+ scripts/restore.pl
+
+## rpmlint:
+# wrong-file-end-of-line-encoding
+%{__perl} -p -i -e s|\r\n|\n| itsm-%{itsm_ver}/INSTALL-%{itsm_min}.ITSM
+
%build
%{_sbindir}/groupadd -g 88 -r %{name} 2/dev/null || :
-%{_sbindir}/useradd -c OTRS User -d /opt/%{name} -G %{name},www -g %{name} \
+%{_sbindir}/useradd -c OTRS User -d %{otrs_root}/%{name} -G %{name},www -g
%{name} \
-u 88 -r -s /bin/false %{name} 2/dev/null || :
# copy config file
-cp -a Kernel/Config.pm.dist Kernel/Config.pm
+%__cp -a Kernel/Config.pm.dist Kernel/Config.pm
cd Kernel/Config/
for file in *.dist
do
-cp -a $file `basename $file .dist`
+ %__cp -a $file `basename $file .dist`
done
cd ../../
# copy all crontab dist files
for file in var/cron/*.dist
do
-mv
commit otrs for openSUSE:Factory
Hello community,
here is the log from the commit of package otrs for openSUSE:Factory
checked in at Mon May 9 10:03:59 CEST 2011.
--- otrs/otrs.changes 2011-03-04 14:39:38.0 +0100
+++ /mounts/work_src_done/STABLE/otrs/otrs.changes 2011-05-07
12:46:37.0 +0200
@@ -1,0 +2,63 @@
+Sat May 7 10:28:02 UTC 2011 - ch...@computersalat.de
+
+- update to 2.4.10
+ (fix for OSA-2011-01, http://otrs.org/advisory/OSA-2011-01-en/)
+ - 2011-03-23 Updated Brazilian Portugese translation, thanks to
+Murilo Moreira de Oliveira!
+ - 2011-03-18 Added required settings for oracle databases in
+apache2-httpd-new.include.conf.
+ - 2011-03-07 Fixed bug#6014 - Printed pdf tickets are not searchable.
+ - 2011-02-17 Fixed bug#6906 - Vendor URL points to Basename+URL
+instead of URL.
+ - 2011-01-25 Event Based notification - respect Include Attachments
+to Notification.
+ - 2010-12-17 Fixed bug#6510 - Signature ID missing.
+ - 2010-12-14 Fixed bug#6532 - With multiple inline images, only
+first one is preserved when replying.
+ - 2010-12-13 Fixed bug#6520 - backup.pl doesn't backup with strong
+password.
+ - 2010-12-09 Fixed bug#6488 - otrs.ArticleStorageSwitch.pl creating
+wrong files.
+ - 2010-12-09 Fixed bug#3984 - HTML Notifications - Links to
+ticketsystem are not clickable.
+ - 2010-12-02 Fixed bug#6366 - gnupg signatures not working correct
+for partly signed messages.
+ - 2010-11-29 Fixed bug#5981 - Warnings from TransfromDateSelection()
+in AgentTicketMove.
+ - 2010-11-23 Fixed bug#6131 - Lack of warning for revoked and expired
+PGP keys in email compose screens.
+ - 2010-11-04 Fixed bug#6211 - Wrong TicketFreeText-value in ticket
+creation by using event notifications.
+ - 2010-11-02 Email.ticket: wrong signature is shown.
+ - 2010-10-26 Improved German translation, thanks to Stelios Gikas!
+ - 2010-10-13 Fixed some Perl uninitialized value warnings.
+ - 2010-10-12 Fixed bug#6087 - Search template name is broken if
+ or ; is used.
+- update OTRS::ITSM to 2.1.3
+ - ENHANCEMENTS
+* Added persian translation for Change Management, thanks to Masoud
+ Ramezani masoud.ramez...@gmail.com
+ - SELECTED BUG FIXES ( http://bugs.otrs.org/)
+* Bug# 6908 - Uninstalling the Change Management module and
+ installing it again does not delete the cache.
+* Bug# 6918 - Search for changes between 12.2. and 13.2. does not
+ find changes terminated for the 12.2. at 00:00.
+* Bug# 6989 - Missing condition check while Workorder deletion if
+ condition is not valid.
+* Bug# 7067 - Condition Edit screen does not store the number zero
+ 0 for value fields.
+* Bug# 7069 - Condition Operator Less Than recognizes equal
+ values as less than.
+* Bug# 7068 - Can not use number zero 0 or numbers with a decimal
+ point in condition expressions with compare operator less than
+ or greater than.
+* Bug# 7070 - Can not use negative numbers in condition expressions
+ with compare operator less than or greater than.
+* Bug# 7131 - Limiting CI classes is not fully respected when
+ linking CIs.
+* Bug# 7065 - !ConfigItemDelete function doesn't delete link
+ relations before deleting CIs.
+* Bug# 7196 - Not possible to set the workorder agent to empty
+ in an action.
+
+---
calling whatdependson for head-i586
Old:
itsm-2.1.2.tar.bz2
otrs-2.4.9.tar.bz2
New:
itsm-2.1.3.tar.bz2
otrs-2.4.10.tar.bz2
Other differences:
--
++ otrs.spec ++
--- /var/tmp/diff_new_pack.Lj667Y/_old 2011-05-09 10:03:27.0 +0200
+++ /var/tmp/diff_new_pack.Lj667Y/_new 2011-05-09 10:03:27.0 +0200
@@ -17,14 +17,14 @@
%define otrsdoc_dir_files CHANGES COPYING* CREDITS INSTALL README* TODO
UPGRADING doc
-%define otrs_ver 2.4.9
-%define itsm_ver 2.1.2
+%define otrs_ver 2.4.10
+%define itsm_ver 2.1.3
%define itsm_min 2.1
Name: otrs
Summary:The Open Ticket Request System
Version:%{otrs_ver}
-Release:3
+Release:1
License:AGPLv3
Group: Productivity/Networking/Email/Utilities
Url:http://otrs.org/
@@ -89,7 +89,7 @@
License:AGPLv3
Summary:ITIL (R) focused IT service management
Version:%{itsm_ver}
-Release:2
+Release:1
Group: Productivity/Networking/Email/Utilities
Requires: %{name} = 2.4.0
Provides: itsm OTRS::ITSM
++ itsm-2.1.2.tar.bz2 - itsm-2.1.3.tar.bz2 ++
15496 lines of diff (skipped)
++ otrs-2.4.9.tar.bz2 - otrs-2.4.10.tar.bz2 ++
otrs/otrs-2.4.9.tar.bz2 /mounts/work_src_done/STABLE/otrs/otrs-2.4.10.tar.bz2
differ: char 11, line 1
Remember to
