- updated to 3.7.5 which fixes bsc#1179835

* add the available memory to the graph, if present
- Possible XSS via ce & cs parameters in header.php are no longer present
  in this version (bsc#1160761, CVE-2019-20378).

OBS-URL: https://build.opensuse.org/package/show/network:cluster/ganglia-web?expand=0&rev=22
This commit is contained in:
Egbert Eich 2022-10-31 10:21:57 +00:00 committed by Git OBS Bridge
parent 055680d20b
commit cac85125ac
2 changed files with 7 additions and 5 deletions

View File

@ -1,13 +1,14 @@
-------------------------------------------------------------------
Fri Jan 29 14:53:55 UTC 2021 - Christian Goll <cgoll@suse.com>
- updated to 3.7.5 which fixes bsc#1179835
- updated to 3.7.5 which fixes bsc#1179835
- various bugfixes and enhancements, highlights are:
* heatmap coloring enhanced
* Fix XSS from OBB#1005024 (https://www.openbugbounty.org/reports/1005024/)
* uses `httponly` and `secure` flags in setcookie calls
* add the available memory to the graph, if present
* add the available memory to the graph, if present
- Possible XSS via ce & cs parameters in header.php are no longer present
in this version (bsc#1160761, CVE-2019-20378).
-------------------------------------------------------------------
Wed Dec 4 12:54:20 UTC 2019 - Christian Goll <cgoll@suse.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package ganglia-web
#
# Copyright (c) 2021 SUSE LLC
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -53,6 +53,7 @@ written in the PHP5/7 language and uses the Dwoo templating engine.
%prep
%setup -q -n %{name}-%{gittag}
%autopatch -p1
%build
cp %SOURCE2 .
@ -78,7 +79,7 @@ cp -v download_js.sh %{buildroot}%{_docdir}/%{name}/download_js.sh
%defattr(-,root,root)
%doc AUTHORS TODO README README.SUSE
%{_docdir}/%{name}/download_js.sh
%license COPYING
%license COPYING
%dir %{web_prefixdir}/
%dir %{web_prefixdir}/dwoo
%{web_prefixdir}/*