Changelog for
awstats-7.8-lp154.5.1.noarch.rpm :
* Wed Feb 28 2024 roAATTsuse.de- use the apache_apxs macro to get apxs2
* Mon Aug 02 2021 Andrew Daugherity
- Include upstream (post-7.8) fix for CVE-2020-35176. - Note that the OBS package since 2018-03-05 was NOT vulnernable to either this or CVE-2020-29600, as it created a placeholder awstats.conf which prevented awstats from looking elsewhere.- Update the comment in said placeholder conf and add these CVE references to the Mar 5, 2018 changelog entry.
* Wed Feb 24 2021 larsAATTlinux-schulserver.de - 7.8- update to version 7.8 + NEW Add SelectBox for DatabaseBreak Mode: month,day and hour. + Update http status codes + Add more file types + Update README.md + Fix geoip2 formatting problem + corner case 99 + Fix some incoherent entries in search_engines.pm + Fix geoip2 plugin on windows by renaming it + Update robots.pm with PR118 data. + Change markdown to better readability + Change to https links + Fix links for perl download + NEW add %time6 tag in log format to support some IIS log format + geoip2: Fix table formatting error. Missing \"\" item tag. + Changes to robots.pm + Add support for macOS DMG and PKG files + Fix browser detection with HTTP 206 status code + Support for macOS 10.13/10.14 + improved image compression of icons + Fix use the 5 top hits as base 100 for graph to show the top 5 hits. + Clean up geoip2 and geoip2 city modules + Losslessly reduced size of PNG images by about 33% using zopfli, pngout and oxipng. Also added os icons for macOS 10.13 and 10.14. + Add Robot: The Knowledge AI + Fix Error: Not same number of records of RobotsSearchIDOrder_listx + Robots, Search Engine and Web Page Tracking Modifications + Added UptimeRobot https://uptimerobot.com/ + Fix a few grammar errors in the model config + Ignore search phrases longer than 80 characters. + Fix 404 detail page not updating + Decode RFC 3986 \"unreserved chars\" in URLs. + Disable nested includes warnings for Perl > 5.6. + Update domains.pm + Fix two invalid entries in search_engines.pm + Format Tera Bytes + Fix \"Illegal division by zero\" error. + Improving error handling in awstats_buildstaticpages.pl + Exclude private IP addresses since GeoIP2::Reader doesn\'t support them + Ignore search phrases longer than 80 characters. + Only purge data for the saved section. + Make city plugin more functional + Fix issue with ShowHost section when address is resolved. + Initial implementation of GeoIP2 City lookup. + Fix a few issues with Country lookup. + Initial implementation. Looksup only Country code for IPv4 and IPv6 + Update hebrew file + Quite a few additions and modifications. Especially yahoo detection. + Added device pixel ratio ( dpr ) to awstats_misc_tracker.js. + added 37 new robots to robots.pm file using v 7.7 robots.pm file as base file. + Move oBot entry lower as to not incorrectly get picked for other *obot robots. + Decode RFC 3986 \"unreserved chars\" in URLs. This makes awstats treat \"/foo\" and \"/%66%6f%6f\" as equivalent. + Missing Sint Maarten flag + Wrong label cf. https://dev.maxmind.com/geoip/legacy/codes/iso3166/ + Fix country name not correct + Fix utf bom files + Fix another vulnerability reported by cPanel Security Team (can execute arbitraty code) + Add more tests- refreshed patches: + awstats-3473378-urldecode.patch + awstats-fix_css_icon_path.patch * Mon Nov 30 2020 roAATTsuse.de- add cron.d when building on factory * Sun Jul 05 2020 larsAATTlinux-schulserver.de - 7.7- require needed perl modules: perl(Net::DNS) and perl(Net::IP)- use perl module requires for perl-URI -> perl(URI)- Apache is not required to run awstats. Lower dependency to only recommend apache2 * Mon Mar 05 2018 adaugherityAATTtamu.edu- Update to version 7.7 - Security fix: CVE-2017-1000501 - Security fix: Missing sanitizing of parameters - Fix LogFormat=4 with url containing spaces. - Fix to window.opener vulnerability in external referral site links. - Add methodurlprot in key to define log format. - Add Dynamic DNS Lookup. - Fix edge support.- Rebase awstats-3473378-urldecode.patch- Create placeholder awstats.conf file to work around incomplete fix for CVE-2017-1000501 (https://github.com/eldy/awstats/issues/90). This issue was later assigned CVE-2020-29600 (full paths) and CVE-2020-35176 (unqualified paths). * Mon Jan 09 2017 adaugherityAATTtamu.edu- Update to version 7.6 - Security fix: \"|\" not allowed into DirLang parameter. - Security fix: More restrictive rule for using AWSTATS_ENABLE_CONFIG_DIR. - Update robots database. - Fix OS database. - Update/fix of documentation. - Add missing country flag for \"el\". - Add partial support for pure-ftpd stats format in method field. - Add support for macOS Sierra. - Add web fonts to default NotPageList, add support for GPX and JSON files * Fri Jul 08 2016 adaugherityAATTtamu.edu- Update to version 7.5 - Compatibility with Perl 5.22 - Support detection of Edge browser with detail of version. - Update robots database - Add eot/woff/woff2 to mime.pm as fonts - Add .svgz to image list - Exclude groups.google from search engines - Add %time5 tag to support log format with iso time with timezone. - Add option DynamicDNSLookup to make DNS lookup during output instead of during log analysis processing. - Increase default value for MaxRowsInHTMLOutput * Tue Sep 22 2015 adaugherityAATTtamu.edu- Update apache configuration syntax for apache 2.4. * This should still use old-style syntax on distros with apache 2.2. * Fix tabs/spaces. * Wed Jul 29 2015 wittemarAATTgooglemail.com- update to version 7.4 * New features: - Add debian patch debian-patches-1019_allow_frame_resize.patch to add option nboflastupdatelookuptosave on command line. - #199 Added geoip6 plugin with support for IPv4 AND IPv6. - Work with Amazon AWS log files (using %time5 tag). * Fixes: - Fixes permission on some .pl scripts. - #205 GetResolvedIP_ipv6 does not strip trailing dot. - #496 tools scripts should print warnings and errors to STDERR. - #919 Referrals not getting tracked due to improperly getting flagged as a search. - Add debian patch 0007_russian_lang.patch. - Add debian patch 2001_awstatsprog_path.patch. - #921 Failure in the help text for geoip_generator.pl - #909 awstats_buildstaticpages.pl noisy debug output. - #680 Invalid data passed to Time::Local causes global destruction. - #212 Fix CVE-2006-2237 |
|