From 6a867a60cb40b5269923dfd64fde6e5a7e940b51a9639f612b56c7556eff4e39 Mon Sep 17 00:00:00 2001 From: Eric Schirra Date: Wed, 28 Jul 2021 12:32:55 +0000 Subject: [PATCH 1/2] Accepting request 908883 from home:ecsos:server - Update to 4.4.0 * Breaking Changes - The logme method for automatic logins is now disabled by default for new installations. For existing installations it will be enabled automatically on update. If you do not need it please consider disabling it again for security reasons by setting login_allow_logme = 0 in General section of config.ini.php. - The redirect using the url param for the automatic login action logme, will no longer do redirects to untrusted hosts. If you need to do redirects to other URLs on purpose, please add the according hosts as trusted_hosts entry in config.ini.php * New config.ini.php settings - When determining the client IP address from proxy headers like X-Forwarded-For, Matomo will by default look at the first IP in the list. If you need to read the last IP instead, the new INI config option [General] proxy_ip_read_last_in_list be set to 1. Using the last IP can be more secure when you are using proxy headers in combination with a load balancer. - Matomo logs can now be written into "errorlog" (logs using the error_log() php function) and "syslog" (logs to the syslog service) (to complement existing log writers: "screen", "file", "database"). Learn more. * New commands - Added new command core:version which returns the Matomo version number. OBS-URL: https://build.opensuse.org/request/show/908883 OBS-URL: https://build.opensuse.org/package/show/network:utilities/matomo?expand=0&rev=95 --- matomo-4.3.1.tar.gz | 3 --- matomo-4.4.0.tar.gz | 3 +++ matomo.changes | 31 +++++++++++++++++++++++++++++++ matomo.spec | 2 +- 4 files changed, 35 insertions(+), 4 deletions(-) delete mode 100644 matomo-4.3.1.tar.gz create mode 100644 matomo-4.4.0.tar.gz diff --git a/matomo-4.3.1.tar.gz b/matomo-4.3.1.tar.gz deleted file mode 100644 index e70ecc0..0000000 --- a/matomo-4.3.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:55ee0fd5c555fee679f4171069464b4d33b0a635fbbdea1ff6347497763dc4e4 -size 14931040 diff --git a/matomo-4.4.0.tar.gz b/matomo-4.4.0.tar.gz new file mode 100644 index 0000000..44283d2 --- /dev/null +++ b/matomo-4.4.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3eea92155178a53410c35a6489995ff4deb9ece7182dc4a11e06f96ad3b707ba +size 15388929 diff --git a/matomo.changes b/matomo.changes index bbe306c..a58bc7c 100644 --- a/matomo.changes +++ b/matomo.changes @@ -1,3 +1,34 @@ +------------------------------------------------------------------- +Wed Jul 28 10:55:31 UTC 2021 - ecsos + +- Update to 4.4.0 + * Breaking Changes + - The logme method for automatic logins is now disabled by + default for new installations. For existing installations it + will be enabled automatically on update. If you do not need + it please consider disabling it again for security reasons + by setting login_allow_logme = 0 in General section of + config.ini.php. + - The redirect using the url param for the automatic + login action logme, will no longer do redirects to untrusted + hosts. If you need to do redirects to other URLs on purpose, + please add the according hosts as trusted_hosts entry in + config.ini.php + * New config.ini.php settings + - When determining the client IP address from proxy headers + like X-Forwarded-For, Matomo will by default look at the first + IP in the list. If you need to read the last IP instead, + the new INI config option [General] proxy_ip_read_last_in_list + be set to 1. Using the last IP can be more secure when you are + using proxy headers in combination with a load balancer. + - Matomo logs can now be written into "errorlog" (logs using + the error_log() php function) and "syslog" (logs to the + syslog service) (to complement existing log writers: + "screen", "file", "database"). Learn more. + * New commands + - Added new command core:version which returns the Matomo + version number. + ------------------------------------------------------------------- Wed May 26 17:25:19 UTC 2021 - ecsos diff --git a/matomo.spec b/matomo.spec index a4b5436..a9e1a06 100644 --- a/matomo.spec +++ b/matomo.spec @@ -21,7 +21,7 @@ %{!?_tmpfilesdir:%global _tmpfilesdir %{_prefix}/lib/tmpfiles.d} Name: matomo -Version: 4.3.1 +Version: 4.4.0 Release: 0 Summary: Web analytics platform License: GPL-3.0-or-later From b0160e8cf23f88f8a121c07ac54ccbaf4cf87d86e7fb5062712553ea7a05d89a Mon Sep 17 00:00:00 2001 From: Eric Schirra Date: Wed, 28 Jul 2021 12:35:57 +0000 Subject: [PATCH 2/2] Accepting request 908516 from home:StevenK:branches:network:utilities - Change shebang of misc/log-analytics/import_logs.py to be python3. OBS-URL: https://build.opensuse.org/request/show/908516 OBS-URL: https://build.opensuse.org/package/show/network:utilities/matomo?expand=0&rev=96 --- matomo.changes | 5 +++++ matomo.spec | 1 + 2 files changed, 6 insertions(+) diff --git a/matomo.changes b/matomo.changes index a58bc7c..254ac47 100644 --- a/matomo.changes +++ b/matomo.changes @@ -29,6 +29,11 @@ Wed Jul 28 10:55:31 UTC 2021 - ecsos - Added new command core:version which returns the Matomo version number. +------------------------------------------------------------------- +Tue Jul 27 06:31:06 UTC 2021 - Steve Kowalik + +- Change shebang of misc/log-analytics/import_logs.py to be python3. + ------------------------------------------------------------------- Wed May 26 17:25:19 UTC 2021 - ecsos diff --git a/matomo.spec b/matomo.spec index a9e1a06..0547b3e 100644 --- a/matomo.spec +++ b/matomo.spec @@ -108,6 +108,7 @@ find . -type f "(" -name "*.c" -o -name "*.h" -o -name "*.js.orig" ")" -delete # env-script-interpreter find . -type f -exec sed -i -e 's|\/usr\/bin\/env php|\/usr\/bin\/php|g' {} + find . -type f -name "*.sh" -exec sed -i -e 's|\/usr\/bin\/env bash|\/bin\/bash|g' {} + +sed -i 's|python$|python3|' misc/log-analytics/import_logs.py # # disable the auto updater, it can't work properly with the new, more secure permissions and is a bad idea on a RPM based setup anyways.