Changelog for sarg-2.3.6-20.1.i586.rpm :
Sun Jun 2 14:00:00 2013 tabrahamAATTsuse.com
- Update to 2.3.6
- Store the IP address in the per user limit file (thanks to xeus)
- Changes from 2.3.5
- Fix an issue when creating the redirector report. Sarg was not creating
the unsorted file as expected. That regression was introduced in
sarg 2.3.4
- Changes from 2.3.4
- Fix an error occurring when several user names contain at least two
consecutive non-alphanumeric characters. In that case, the mangled
file name is not unique. Thanks to Fabiola and Pecha for reporting
this bug
- Remove a warning about the redirector file that can\'t be deleted
when it is not created.
- Changes from 2.3.3
- Don\'t abort the report generation due to an error in a squidGuard
error (wrapped over long lines)
- Support for gd, ldap and iconv can be disabled during configuration
- Supporess the blank line breaking the header of the e-mail report
- Add many debug messages to help understanding why some parts of the
report are not produced. Considering all the options and various
conditions that are involved in the creation of a report, that
help is welcome
- Fix the report generation if users_sites is disabled
- Avoid a possible name clash among the temporary files if a user
happens to have the same name as one of the files sarg generates
- Fix various links and reports when some options are disabled
- Accept regular expressions in the hostalias file
- URL in SquidGuard logs sometimes don\'t have a scheme. This is now
handled properly
- Exclude hosts based on the IPv4 address even if a port number is
suffixed after the IP address (thanks to Mark Easter for
reporting the bug)
- IP addresses can be resolved to host names using an external program
- Limit the maximum line length read from the input log to avoid
consuming all the memory when reading a corrupted or invalid file.
The limit is set to 10MB per line
- Protect the temporary directory against unsafe deletion (if the
temporary path is set to a wrong location, sarg won\'t blindly
wipe the directory)
- The smartfilter might be fixed (I need test logs to validate this
change. If you have some, please send them to fmarchal at
users.sourceforge.net)
- The top sites report can be sorted according to the number of
users who visited each site
- The two options --convert and --split can read the log file from
stdin
- Display execution statistics with --statistics. Only useful to
test for regressions during development

Sun Mar 4 13:00:00 2012 tabrahamAATTnovell.com
- Update to 2.3.2:

* removed obsolete sarg-2.2.3.1-description.patch

* added C_FLAGS=-std99 and sarg-2.3.2-limits_h.diff to compile on
SLE 10 and openSUSE 11.1
- Add support for sorttable.js (http://www.kryogenix.org/code/browser/sorttable/)
to dynamically sort some tables (thanks to Éric).
- Add the two command line options --lastlog and --keeplogs to set the number of
reports to keep or to keep all the reports respectively (thanks to Emmanuel
Lacour for the suggestion).
- Report the user ID in the e-mail report.
- Add an option to sort the top sites by time.
- Delete unused files from the directory containing the user report
(thanks to alf-man).
- Add the index_fields option to hide the directory size column in the index
sorted by date.
- Split the input log file in several files each containing one day worth of
data (thanks to Mauricio Silveira).
- Take the date_format into account when converting a log file.
- Accept IPv6 addresses in the realtime report.
- Don\'t fail for an empty report directory when building the index.
- Fix a read error when parsing the time of a common log format
(thanks to Richard P Scott).
- Use anonymous file and directory names in the report to hide the identity of
the user whose report is displayed and shorten the total path length.
- More robust calls to external sort commands (guard against buffer overflows
and use tab as column separator).
- Replace host names by aliases and group identicaly aliased host names.
- IPv6 is accepted in the hosts exclusion list.
- Discriminate between users whose name produce the same mangled temporary
file name.
- Write a note about the number of entries ignored in the reports (thanks
to Iain Lopata).
- Command line option -z output some messages to explain why the reports
are not generated due to the configuration.
- The Sites & Users report page links to the user\'s page if the user is
listed in the Top Users page.

Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- remove call to suse_update_config (very old work around)

Tue Feb 8 13:00:00 2011 alexandreAATTexatati.com.br
- Update to 2.3.1:
- Please read ChangeLog with changes from 2.3 at
http://sarg.sourceforge.net/sarg.ChangeLog.txt
- Refresh config patch:
Old: sarg-2.2.7.1-config.patch
New: sarg-2.3.1-config.patch
- Really enabled sarg-php;
- Spec file cleaned with spec-cleaner.

Tue Nov 9 13:00:00 2010 nixAATTopensuse.org
- Update conf file to match sarg 2.2.7.1

Tue Nov 9 13:00:00 2010 nixAATTopensuse.org
- Conf file appears to have been word wrapped by mistake. Fixed

Thu Sep 16 14:00:00 2010 chrisAATTcomputersalat.de
- fix build for suse_version < 1130
o BuildReq: apache2 (/etc/apache2/conf.d)

Wed Sep 15 14:00:00 2010 cyberorgAATTopensuse.org
- Remove obsolete patches
- Add english to sarg-report
- Add suse logo to report index
- Improved default config
- Add apache configuration
- Version 2.2.7

* Extra compile and run time protection (FORTIFY_SOURCE) fixed
in configure.

* Use tabulations as columns separator in intermediary files
to avoid problems when a field of the log contains a space.

* Input log file type detection partly rewritten to clearly
distinguish which type is processed where.

* Read the input log file from standard input if log file name
is -.

* Use string pointers in getword instead of copying the
strings over and over.

* Use LC_TIME to format some dates and times in the report
according to the selected locale.

* Sarg.conf can list up to 255 access.log files.

* Downloaded files suffixes are matched against a sorted list
and use a dichotomic search.

* Added getword_atoll to read a number directly from a file
without an intermediary string storage.

* Use boolean to enable the options instead of string
compares.

* Accept an absolute path for the language file in sarg.conf.

* Experimental: Can show the backtrace of the program when a
getword loop is detected to help in locating the origin of
the error.

* Protect the creation of the index against invalid
directories.

* Only copy the files (not the subdirs) when creating the
directory with the images to include in the reports.

* Directories deleted without using the rm system command.

* Index created using an internal sort algorithm instead of a
system call.

* Fixed Debian bug #408577 (changed exclude_hosts to exclude
subdomains and IPv4 subnets).

* Replace --enable-htmldir by --enable-sargphp to avoid
confusion on the name (thanks to Peter Nixon).

* Installation of sarg-php can be disabled with
- -disable-sargphp.

* Fixed empty entries in squidGuard log when the URL doesn\'t
start with protocol://.

* Fixed regressions in creation and reading of a sarg parsed
log (thanks to Joao Alves).

* Does not report URLs consisting of only a host name ending
with .com as a downloaded file.

* Mangle the $ and AATT signs in user ID to make the resulting
file name valid in shell commands.

* Fixed a regression in the default value of --enable-sargphp.

* Increase the maximum size of a line read from access.log and
detect longer lines that were silently splitted in previous
versions.

* Tolerate longer URLs during the reading of the access.log to
have less chances of aborting during that phase. It only
helps if short URLs are output in the reports. If long_url is set, sarg will
still abort on over sized URLs.

Sat Oct 10 14:00:00 2009 crrodriguezAATTopensuse.org
- sarg-2.2.5-46.17: missing call to fclose [bnc#544699]

Tue Feb 3 13:00:00 2009 kssingvoAATTsuse.de
- purified specfile
- added manpage for sarg-report
- fixed wrong permissions of various files

Tue Sep 9 14:00:00 2008 kssingvoAATTsuse.de
- fix for buffer check assertion in make_index (bnc#416077)

Thu Apr 24 14:00:00 2008 kssingvoAATTsuse.de
- fix for buffer size in log.c: fun[] CVE-2008-???
- fix for sprintf() calls through use of snprintf() calls CVE-2008-???
- fix for font buffer size CVE-2008-???

Tue Apr 22 14:00:00 2008 kssingvoAATTsuse.de
- getword3() needs also to be checked CVE-2008-1922 (bugzilla#382255)

Mon Apr 21 14:00:00 2008 kssingvoAATTsuse.de
- added suse_version check: old distributions don\'t support Recommends:

Mon Apr 21 14:00:00 2008 kssingvoAATTsuse.de
- fix for buffer size in report.c (bugzilla#209273)
- buffer checks for getword() introduced (bugzilla#209273)

Tue Apr 8 14:00:00 2008 crrodriguezAATTsuse.de
- Reccommend cron, otherwise it may not work properly.

Thu Mar 6 13:00:00 2008 kssingvoAATTsuse.de
- update to version 2.2.5:

* new fix to the script insertion vulnerability via user-agent
report. javascript can still be executed via e.g. the \" onload=function();>\" scheme.

Mon Mar 3 13:00:00 2008 kssingvoAATTsuse.de
- update to version 2.2.4:

* a issue to be execute arbitrary code when sarg is used with
malicious input files.

* French language fixed.

* Fixed: Segfault in x86_64
- removed static buffer fix in util.c, now in upstream

Wed Dec 5 13:00:00 2007 kssingvoAATTsuse.de
- added daily,weekly,monthly cronjobs for sarg reports
- added sarg-reports tool
- adapted configuration to SUSE paths
- fixed default config file
- fixed issue in util.c (bugzilla#342529)
- fixed wrong description (bugzilla#334146)
- http_proxy is no longer Requires:, using instead Recommends:

Wed Jan 31 13:00:00 2007 kssingvoAATTsuse.de
- upgrade to version 2.2.3.1:

* fidex -m option to show all the used tags

* date period invalid in download reports

* wrong results when userid contain \'%20\' character

* previous reports info wrong in index.html

* gd graph font change from FreeSans.ttf to DejaVuSans.ttf

* minor fixes when only denied records in access.log file.

* ulimit tag changed. If you run sarg with a low privilege user,
set to \'none\' to disable ulimit.

* Russian_UTF-8 language fixed by Igor Ageikin


* realtime_unauthenticated_records tag changed to show by
default.

* chmod 755 in sarg-php due to errors in rpmbuild.

* when the keyword \"anonymous\" is used in squidGuard.conf, Sarg
does

* when the keyword \"anonymous\" is used in squidGuard.conf, Sarg
does not find the log-files anymore.

* after reading the squidGuard configuration, the data read from
the usertab file was corrupted.

* milisec values showed as bytes.

* with squidGuard, you can log groups in only one log file. We
must parse each log files only one time.

* error message(removetmp) Cannot open /tmp/sarg_tmp/../general
when sending report by email.

* incorrect off_t size in printf. In FreeBSD off_t is 64bit long
long, but sarg always use %d to display off_t in log
processing. This cause garbage while reading log files on a
freebsd, and possible crash.

* squid24 on/off tag added in sarg.conf to implement
compatibility if using squid <= 2.4 and using squid common
logs.

* exclude_hosts and some code errors fixed by Alexander Kozlov
. Many thanks.

* temporary file names changed to sarg-... to avoid conflicts
with usernames.

* SARG support Japanese wordset but not support charset. submited
by anonymous at sourceforge.net Many thanks.

* support for utf-8 character set added by Peter Warasin
. Many thanks.

* if all the data is at the hour each day, totaliza_day() treates
it all as being on the last day. This is observed for users
which only download via a cron job at the same time each day.
Now the date and time will be checked to see if changed.

* greport_day() doesn\'t add the volume for the first hour of each
day to the total.

* Russian_koi8 and Russian_windows1251 languages updated by Stas
Degteff . Many thanks

* realtime reporting is sorted by URL, and not by Date/Time.

Fri Nov 10 13:00:00 2006 kssingvoAATTsuse.de
- fixed build issue with permission check of docs and manuals

Tue Aug 29 14:00:00 2006 kssingvoAATTsuse.de
- update to version 2.2.2

* malloc test implemented to avoid high-memory consuming.
Thanks to Rodrigo Rubira Branco

* Czech UTF8 language added by Josef Karliak

* fixed: parsed mismatch in realtime_access_log_lines and
access_log_lines tags.
Thanks to Kuznetsov Andrey

* changed: realtime report sort changed by date/time
Thanks to Leonardo Buonsanti

* GD minor fixes added.

* bug fixed.
*
*
* buffer overflow detected
*
*
*: sarg terminated
in Fedora Core 5 when using -D FORTIFY_SOURCE in gcc or in kernel

Thu Aug 10 14:00:00 2006 kssingvoAATTsuse.de
- update to version 2.2.1

* iconv problems fixed in Freebsd and Slackware.
Thanks to Grigory Trenin .

* new word added to languages: Topuser

* missing fclose fp-in in css.c
Thanks to Renato Botelho .

* index.c fixed. Missing -r in reverse sort.
Thanks to Fernando Lemes da Silva

* wrong values in columns in-cache and out-cache.
Thanks to Hugo P S Costa

* sarg ported to 64 bits.
Thanks to Antonio F. Zago
to share your Fedora Core 5 64 bits with me.

* fixed conflict types for \'saverecs2\' in .configure

* fixed no index.html when lastlog tag is greather then 0,
caused by some debug messages.

* removed some development debug message

* user_limit_block script added to block users when limit exceeded

* fixed wrong sort in index.html

* removed \'+\' argument to sort utility.
Thanks to Julio Cesar Covolato

* fixed \"file too long\" messages when using long_url
Thanks to Fabio Lo Votrico

* fixes and improvements from Oleg - Tanks.
. fprintf faster than sprintf+fputs (fixed in some places);
. strcpy+strcat is faster than sprintf (fixed in some places);
. unused variables removed;
. fixed headers look and feel (