Changelog for sarg-2.3.10-bp151.4.3.1.x86_64.rpm :

* Tue Jan 21 2020 Thomas Abraham - insecure usage of /tmp/sarg allows privilege escalation / DoS vector (CVE-2019-18932, bsc#1156643)- Add patches:
* sarg-2.4.0-avoid-race-condition-when-creating-the-temporary-dir.patch
* sarg-2.4.0-use-unpredictable-temporary-directory-name.patch
* sarg-2.4.0-when-recursively-creating-a-directory-make-sure-the.patch
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Thu Jun 15 2017 tchvatalAATTsuse.com- Remove apache2 dependency as it was only for directory ownership- Add patch sarg-no-werror.patch to not build with Werror- Cleanup a bit with spec-cleaner- Remove patch sarg-reports-english.patch which was applied by upstream
* Tue Dec 15 2015 ecsosAATTopensuse.org- update to 2.3.10 - Greatly reduce the complexity and the number of messages to translate. - Fix a couple of minor programming errors.- add missing BuildRequires
* Thu Mar 26 2015 ecsosAATTopensuse.org- fix apache.conf for apache 2.4
* Wed Nov 19 2014 Led - fix bashism in sarg-reports script
* Mon Nov 03 2014 tabrahamAATTsuse.com- update source URL due to source being unavailable at original location- Enable parallel build, remove redundant sections - jengelhAATTinai.de
* Thu Oct 02 2014 tabrahamAATTsuse.com- Update to 2.3.9 - Fix various small compile and link time errors. - Add some code to help in diagnosing an error with the number of old report- Changes from 2.3.8 - Process downloaded volume bigger than 2GB (thanks to Рустам Муса-Ахунов).
* Fri Nov 01 2013 tabrahamAATTsuse.com- Update to 2.3.7 - backport a fix to acccept a per user limit over 2GB
* Sun Jun 02 2013 tabrahamAATTsuse.com- Update to 2.3.6 - Store the IP address in the per user limit file (thanks to xeus)- Changes from 2.3.5 - Fix an issue when creating the redirector report. Sarg was not creating the unsorted file as expected. That regression was introduced in sarg 2.3.4- Changes from 2.3.4 - Fix an error occurring when several user names contain at least two consecutive non-alphanumeric characters. In that case, the mangled file name is not unique. Thanks to Fabiola and Pecha for reporting this bug - Remove a warning about the redirector file that can\'t be deleted when it is not created.- Changes from 2.3.3 - Don\'t abort the report generation due to an error in a squidGuard error (wrapped over long lines) - Support for gd, ldap and iconv can be disabled during configuration - Supporess the blank line breaking the header of the e-mail report - Add many debug messages to help understanding why some parts of the report are not produced. Considering all the options and various conditions that are involved in the creation of a report, that help is welcome - Fix the report generation if users_sites is disabled - Avoid a possible name clash among the temporary files if a user happens to have the same name as one of the files sarg generates - Fix various links and reports when some options are disabled - Accept regular expressions in the hostalias file - URL in SquidGuard logs sometimes don\'t have a scheme. This is now handled properly - Exclude hosts based on the IPv4 address even if a port number is suffixed after the IP address (thanks to Mark Easter for reporting the bug) - IP addresses can be resolved to host names using an external program - Limit the maximum line length read from the input log to avoid consuming all the memory when reading a corrupted or invalid file. The limit is set to 10MB per line - Protect the temporary directory against unsafe deletion (if the temporary path is set to a wrong location, sarg won\'t blindly wipe the directory) - The smartfilter might be fixed (I need test logs to validate this change. If you have some, please send them to fmarchal at users.sourceforge.net) - The top sites report can be sorted according to the number of users who visited each site - The two options --convert and --split can read the log file from stdin - Display execution statistics with --statistics. Only useful to test for regressions during development