~ubuntu-branches/ubuntu/oneiric/awstats/oneiric : changes

~ubuntu-branches/ubuntu/oneiric/awstats/oneiric » Changes from revision 14

From Revision 14

Rev	Summary	Authors	Tags	Date
14	[ Sergey B Kirpichev ] [ Sergey B Kirpichev ] * Process the /etc/awstats/awstats.conf file in update.sh/buildstatic.sh only if it's exists (Closes: #613524) * Allow change $NBOFLASTUPDATELOOKUPTOSAVE via CGI/CLI arguments (Closes: #600225). [ Jonas Smedegaard ] * Remove myself as uploader. Thanks for all the fish. [ Sergey B Kirpichev ] * Drop Debian AWStats Team from Maintainer's	Sergey B Kirpichev	7.0~dfsg-2	13 years ago
13	* New upstream release. * New upstream release. Closes: bug#613447. [ Sergey B Kirpichev ] * Unfuzz patches. * Update patch 1008. * Drop obsolete patches. * Fix +x bit on .js in docs/examples Avoid asterisks in debian/NEWS entries, to please lintian. * Fix recode bulgarian tooltips file as utf-8. Closes: bug#610632. * Forward patches 0007 and 1015 upstream. * Allow DM (Debian Maintainer) uploads. [ Jonas Smedegaard ] * Update copyright file: + Rewrite using Subversion rev.173 of draft DEP5 format. + Add some previously missed authors and licenses.	Jonas Smedegaard	7.0~dfsg-1	13 years ago
12	[ Sergey B Kirpichev ] [ Sergey B Kirpichev ] * Bump up Standards-Version to 3.9.1. * Remove examples/staticpages.sh. * Take sucurity fixes from upstream CVS: - CVE-2010-4369: patch 0009 (closes directory traversal vulnerability via crafted LoadPlugin directory). - CVE-2010-4367(and CVE-2010-4368): update patch 1002 (sanitize configdir, disable overwriting of configdir parameter in cgi mode). Closes: bug#606263. [ Jonas Smedegaard ] * Unfuzz patches. * Ease building with git-buildpackage: + Add dpkg-source local-options. + Suppress .pc dir.	Jonas Smedegaard	6.9.5~dfsg-5	13 years ago
11	[ Jonas Smedegaard ] [ Jonas Smedegaard ] * Fix bashism in buildstatic.sh. Closes: bug#582861. * Recommend versions of coreutils supporting mktemp --tmpdir. Closes: bug#582602, thanks to Vincent Danjean. [ Andreas Henriksson ] * Remove myself from uploaders. [ Sergey B Kirpichev ] * Install logresolvemerge.pl in tools. Closes: bug#275491. * Change order of configs parsing in update.sh and buildstatic.sh. Closes: bug#580699, thanks to Ken Neighbors. * Improve documentation. Logfile permissions, EnableLockForUpdate option, setup for multiple sites. Closes: bug#580702, thanks to Ken Neighbors. * Prevent nested includes from being prematurely closed. Closes: bug#575545, thanks to Ken Neighbors. * Rephrase steps needed for apache.conf installation. Closes: bug#590947.	Jonas Smedegaard	6.9.5~dfsg-4	13 years ago
10	[ Sergey B Kirpichev ] [ Sergey B Kirpichev ] * Show error messages from cron jobs. Closes: bug#580672, thanks to Ken Neighbors. * Add option to disable nightly generation of static html reports. Closes: bug#580692, thanks to Ken Neighbors. * Option to use "nice" to lower the priority of cron scripts. Closes: bug#580693, thanks to Ken Neighbors. * Set default language (en) for static reports generation * Cosmetic improvements to cron scripts. Closes: bug#580704. * Recognize method/protocol RTSP in uppercase. Closes: bug#350601, thanks to Lee Maguire. * Report permissions problem while reading awstats.custom.conf. Closes: bug#572353, thanks to Ken Neighbors. [ Jonas Smedegaard ] * Reverse test logic when sourcing /etc/default/awstats to not fail if missing. * Respect TMPDIR for temporary files (i.e. use mktemp --tmpdir). * Update patches: + Drop (unapplied) patch 0011: applied upstream at some point in the past. + Unfuzz (unapplied) patch 0006. + Refresh patches 0006, 1015 and 1016 with compacting quilt options --no-index --no-timestamps -pab.	Jonas Smedegaard	6.9.5~dfsg-3	14 years ago
9	[ Sergey B Kirpichev ] [ Sergey B Kirpichev ] * New upstream release (Closes: #494676). * Add myself to Uploaders field. * Drop patches 0001 and 1005 (applied upstream). * Unfuzz patches 1002-1004. * Add new patch 1007 updating Russian translation. Thanks to Sergey Kirpichev at upstream tracker #2540486. * Add new patch 1008 enhancing the ExtraSection headings to include the words (Top XXX) for consistency with all other section headings. * Add new patch 1009 fixing URL to Hurd (Closes: #408086). * Add new patch 1010 fixing dirdata permissions (Closes: #299148). * Add new patch 1011 fixing Geo::IPfree warnings (Closes: #512373). * Add new patch 2001 hiding charts in days of month statistics. * Use debian defaults for geoip data files. [ Jonas Smedegaard ] * Repackage upstream tarball. * Packaging moved to Git (from Subversion). Update debian/control and git-buildpackage configfile, enabling pristine-tar support. * Use new local CDBS snippet package-relations.mk to resolve, cleanup and apply CDBS-declared (build-)dependencies. * Add DEB_MAINTAINER_MODE in debian/rules (thanks to Romain Beauxis). * Update local CDBS snippets: + upstream-tarball.mk: internal restructuring + buildinfo.mk: fix copyright years + copyright-check.mk: major rewrite, now generating hint file more readily usable as template for new proposed copyright format + Update README.cdbs-tweaks to also cover newly added package- relations.mk. * Rewrite debian/copyright using new proposed syntax (v440). Update copyright-hints. * Unfuzz patch 1006. * Depend on misc:depends (thanks to lintian) and cdbs:depends (currently unused, and drop superfluous dependencies (fulfilled by perl even in oldstable).	Jonas Smedegaard	6.9~dfsg-1	15 years ago
8	* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Strip '"' characters during URL decoding, fixing a cross-site scripting attack (CVE-2008-3714; CVE-2008-5080; Closes: #495432).	Nico Golde	6.7.dfsg-5.1	15 years ago
7	[ Charles Fry ] [ Charles Fry ] * Require AWSTATS_ENABLE_CONFIG_DIR environmental variable in order to enable configdir. Closes: #365910 (thanks to Hendrik Weimer <hendrik@enyo.de>) * Integrated security patches from upstream: + Decode QueryString. Closes: #364443 (thanks to Micah Anderson <micah@debian.org>) + Sanitize migrate parameter. Closes: #365909 (thanks to Hendrik Weimer <hendrik@enyo.de>) * Indent Homepage in long description, per debian reference guideline [ Jonas Smedegaard ] * Update local cdbs snippet copyright-check.mk: + Broaden scan to also look for "(c)" by default. + Make egrep options configurable. * Semi-auto-update debian/control: + Bump up versioned build-dependency on debhelper. * Semi-auto-update debian/copyright_hints (nothing remarkable). * Set urgency=high as this upload fixes security-related bugs (bug#365909: CVE-2006-2237). * Fix including a couple of example shell scripts ignored by mistake.	Jonas Smedegaard	6.5-2	18 years ago
6	* SECURITY UPDATE: Cross-site scripting. * SECURITY UPDATE: Cross-site scripting. * debian/patches/1001_sanitize_more.patch: - Use the Sanitize function to filter out arbitrary HTML from 'diricons' parameter (analoguous to CVE-2006-1945, which is already fixed in this version). - Sanitize MigrateStats parameter (XSS if statistics updates are enabled). [CVE-2006-2237] - Patch from upstream CVS, taken from Debian's 6.5-2 version.	Martin Pitt	6.5-1ubuntu1	18 years ago
5	[ Jonas Smedegaard ] [ Jonas Smedegaard ] * New upstream release. + Recognizes GNUTLS from lynx User-Agent header. Closes: #306130 (thanks to Dmitry Baryshkov <mitya@school.ioffe.ru>). + Geoip shows countries for resolved hostnames. Closes: #317310 (thanks to Administrator <azhrarn@underhanded.org>). * Simplify watch file to better work with parser used at qa.d.o. * Improve cdbs rules: + Use quilt (rather than cdbs-internal patch system). + Add and enable new local snippets copyright-check and auto-update. + Update local snippet buildinfo (fixing its namespace). * Auto-update debian/control: + Tightened build-dependency on cdbs. + Added build-dependencies on patchutils and quilt. * Package is now team-maintained: + New maintainer: Debian AWStats Team <pkg-awstats-devel@lists.alioth.debian.org>. + Add myself as uploader. [ Charles Fry ] * Use qa.debian.org SF redirector in watch file. * Use Homepage instead of Website in debian/control, per DDR 6.2.4. * Removed patches integrated upstream	Jonas Smedegaard	6.5-1	18 years ago
4	[ Charles Fry ] [ Charles Fry ] * New co-maintainer. * Suggest libgeo-ipfree-perl. Closes: #316126 (thanks to Gunnar Wolf <gwolf@gwolf.org>). * Fixed README.Debian path to configure.pl. Closes: #313093 (thanks to Michael De Nil <michael@flex-it.be>). [ Jonas Smedegaard ] * Acknowledge NMU. Closes: bug#322591. * Bump up watch version, and adjust the default command (we have moved to SubVerSion). * Add proto to URL in long description. * User newer chown syntax in postinst (thanks to lintian).	Jonas Smedegaard	6.4-2	18 years ago
3	* New upstream release. Closes: bug#293702, #293668 (thanks ... * New upstream release. Closes: bug#293702, #293668 (thanks to Nelson A. de Oliveira <naoliv@biolinux.df.ibilce.unesp.br>). + Includes upstream fix for security bug fixed in 6.2-1.1. + Includes upstream fix for most of security bug fixed in 6.2-1.1. * Acknowledge NMUs. Closes: bug#291064, #294488 (thanks to Martin Schulze <joey@infodrom.org>, Martin Pitt <mpitt@debian.org>, Ubuntu, Joey Hess <joeyh@debian.org>, Frank Lichtenheld <djpig@debian.org> and Steve Langasek <vorlon@debian.org>). * Include patch for last parts of security bug fixed in 6.2-1.1: 01_sanitize_more.patch. * Patch (02) to include snapshot of recent development: + Fix security hole that allowed a user to read log file content even when plugin rawlog was not enabled. + Fix a possible use of AWStats for a DoS attack. + configdir option was broken on windows servers. + DebugMessages is by default set to 0 for security reasons. + Minor fixes. * References: CAN-2005-0435 - read server logs via loadplugin and pluginmode CAN-2005-0436 - code injection via PluginMode CAN-2005-0437 - directory traversal via loadplugin CAN-2005-0438 - information leak via debug	Jonas Smedegaard	6.3-1	19 years ago
2	Really fix bug#247265. Really closes: Bug#247265 (thanks to ... Really fix bug#247265. Really closes: Bug#247265 (thanks to Edward J. Shornock <ed@crazeecanuck.homelinux.net>).	Jonas Smedegaard	6.0-4	20 years ago
1	Import upstream version 6.0 Import upstream version 6.0	Jonas Smedegaard	upstream-6.0	20 years ago