pool/ganglia-web
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1032451 from network:cluster

Browse Source 
- updated to 3.7.5 which fixes bsc#1179835
 * add the available memory to the graph, if present
- Possible XSS via ce & cs parameters in header.php are no longer present
  in this version (bsc#1160761, CVE-2019-20378).

OBS-URL: https://build.opensuse.org/request/show/1032451
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ganglia-web?expand=0&rev=6
This commit is contained in:
Dominique Leuenberger 2022-10-31 12:26:27 +00:00 committed by Git OBS Bridge
commit bfbdb39a89
2 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ganglia-web.changes
View File

@ -7,7 +7,8 @@ Fri Jan 29 14:53:55 UTC 2021 - Christian Goll <cgoll@suse.com>
* Fix XSS from OBB#1005024 (https://www.openbugbounty.org/reports/1005024/) * Fix XSS from OBB#1005024 (https://www.openbugbounty.org/reports/1005024/)
* uses `httponly` and `secure` flags in setcookie calls * uses `httponly` and `secure` flags in setcookie calls
* add the available memory to the graph, if present * add the available memory to the graph, if present
- Possible XSS via ce & cs parameters in header.php are no longer present
in this version (bsc#1160761, CVE-2019-20378).
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Dec 4 12:54:20 UTC 2019 - Christian Goll <cgoll@suse.com> Wed Dec 4 12:54:20 UTC 2019 - Christian Goll <cgoll@suse.com>

3
ganglia-web.spec
View File

@ -1,7 +1,7 @@
# #
# spec file for package ganglia-web # spec file for package ganglia-web
# #
# Copyright (c) 2021 SUSE LLC # Copyright (c) 2022 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@ -53,6 +53,7 @@ written in the PHP5/7 language and uses the Dwoo templating engine.
%prep %prep
%setup -q -n %{name}-%{gittag} %setup -q -n %{name}-%{gittag}
%autopatch -p1 %autopatch -p1
%build %build
cp %SOURCE2 . cp %SOURCE2 .