From 6cc545750d5f86b3b0b7d748348932e6df38332a Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Wed, 20 Jul 2022 15:28:40 +0200 Subject: [PATCH 1/2] fedpkg import awstats-7.8-7.fc37.src.rpm --- .cvsignore | 0 .gitignore | 1 + Makefile | 21 - awstats-7.0-httpd-2.4.patch | 45 ++ awstats-CVE-2020-35176.patch | 20 + awstats-awredir.pl-sanitize-parameters.patch | 32 ++ awstats.cron | 3 + awstats.spec | 503 +++++++++++++++++++ sources | 1 + 9 files changed, 605 insertions(+), 21 deletions(-) delete mode 100644 .cvsignore create mode 100644 .gitignore delete mode 100644 Makefile create mode 100644 awstats-7.0-httpd-2.4.patch create mode 100644 awstats-CVE-2020-35176.patch create mode 100644 awstats-awredir.pl-sanitize-parameters.patch create mode 100644 awstats.cron create mode 100644 awstats.spec diff --git a/.cvsignore b/.cvsignore deleted file mode 100644 index e69de29..0000000 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..2f0ffee --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +/awstats-7.8.tar.gz diff --git a/Makefile b/Makefile deleted file mode 100644 index 3a4d010..0000000 --- a/Makefile +++ /dev/null @@ -1,21 +0,0 @@ -# Makefile for source rpm: awstats -# $Id$ -NAME := awstats -SPECFILE = $(firstword $(wildcard *.spec)) - -define find-makefile-common -for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done -endef - -MAKEFILE_COMMON := $(shell $(find-makefile-common)) - -ifeq ($(MAKEFILE_COMMON),) -# attept a checkout -define checkout-makefile-common -test -f CVS/Rootx && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2 -endef - -MAKEFILE_COMMON := $(shell $(checkout-makefile-common)) -endif - -include $(MAKEFILE_COMMON) diff --git a/awstats-7.0-httpd-2.4.patch b/awstats-7.0-httpd-2.4.patch new file mode 100644 index 0000000..2fe23b6 --- /dev/null +++ b/awstats-7.0-httpd-2.4.patch @@ -0,0 +1,45 @@ +diff -up awstats-7.0/tools/httpd_conf.http-2.4 awstats-7.0/tools/httpd_conf +--- awstats-7.0/tools/httpd_conf.http-2.4 2012-11-16 16:11:07.612386681 +0100 ++++ awstats-7.0/tools/httpd_conf 2012-11-16 16:44:24.921755562 +0100 +@@ -10,20 +10,33 @@ + + # + # Directives to add to your Apache conf file to allow use of AWStats as a CGI. +-# Note that path "/usr/local/awstats/" must reflect your AWStats install path. ++# Note that path "/usr/share/awstats/" must reflect your AWStats install path. + # +-Alias /awstatsclasses "/usr/local/awstats/wwwroot/classes/" +-Alias /awstatscss "/usr/local/awstats/wwwroot/css/" +-Alias /awstatsicons "/usr/local/awstats/wwwroot/icon/" +-ScriptAlias /awstats/ "/usr/local/awstats/wwwroot/cgi-bin/" ++Alias /awstatsclasses "/usr/share/awstats/wwwroot/classes/" ++Alias /awstatscss "/usr/share/awstats/wwwroot/css/" ++Alias /awstatsicons "/usr/share/awstats/wwwroot/icon/" ++ScriptAlias /awstats/ "/usr/share/awstats/wwwroot/cgi-bin/" + + + # + # This is to permit URL access to scripts/files in AWStats directory. + # +- ++ + Options None + AllowOverride None +- Order allow,deny +- Allow from all ++ ++ # Apache 2.4 ++ Require local ++ ++ ++ # Apache 2.2 ++ Order allow,deny ++ Allow from 127.0.0.1 ++ Allow from ::1 ++ + ++# Additional Perl modules ++ ++ SetEnv PERL5LIB /usr/share/awstats/lib:/usr/share/awstats/plugins ++ ++ diff --git a/awstats-CVE-2020-35176.patch b/awstats-CVE-2020-35176.patch new file mode 100644 index 0000000..c954a95 --- /dev/null +++ b/awstats-CVE-2020-35176.patch @@ -0,0 +1,20 @@ +diff --git a/wwwroot/cgi-bin/awstats.pl b/wwwroot/cgi-bin/awstats.pl +index e709b7f5..8341c0a5 100755 +--- a/wwwroot/cgi-bin/awstats.pl ++++ b/wwwroot/cgi-bin/awstats.pl +@@ -1711,13 +1711,13 @@ sub Read_Config { + # Check config file in common possible directories : + # Windows : "$DIR" (same dir than awstats.pl) + # Standard, Mandrake and Debian package : "/etc/awstats" +- # Other possible directories : "/usr/local/etc/awstats", "/etc" ++ # Other possible directories : "/usr/local/etc/awstats", + # FHS standard, Suse package : "/etc/opt/awstats" + my $configdir = shift; + my @PossibleConfigDir = ( + "$DIR", + "/etc/awstats", +- "/usr/local/etc/awstats", "/etc", ++ "/usr/local/etc/awstats", + "/etc/opt/awstats" + ); + diff --git a/awstats-awredir.pl-sanitize-parameters.patch b/awstats-awredir.pl-sanitize-parameters.patch new file mode 100644 index 0000000..bc92ebb --- /dev/null +++ b/awstats-awredir.pl-sanitize-parameters.patch @@ -0,0 +1,32 @@ +diff -up awstats-7.1/wwwroot/cgi-bin/awredir.pl.sanitize awstats-7.1/wwwroot/cgi-bin/awredir.pl +--- awstats-7.1/wwwroot/cgi-bin/awredir.pl.sanitize 2012-02-15 15:19:22.000000000 +0100 ++++ awstats-7.1/wwwroot/cgi-bin/awredir.pl 2013-01-04 10:31:33.303448288 +0100 +@@ -21,6 +21,8 @@ + + #use DBD::mysql; + use Digest::MD5 qw(md5 md5_hex md5_base64); ++use HTML::Entities; ++use URI::Escape; + + + #------------------------------------------------------- +@@ -193,14 +195,17 @@ if ($TRACEBASE == 1) { + if ($ENV{REMOTE_ADDR} !~ /$EXCLUDEIP/) { + if ($DEBUG == 1) { print LOGFILE "Execution requete Update sur BASE=$BASE, USER=$USER, PASS=$PASS\n"; } + my $dbh = DBI->connect("DBI:mysql:$BASE", $USER, $PASS) || die "Can't connect to DBI:mysql:$BASE: $dbh->errstr\n"; +- my $sth = $dbh->prepare("UPDATE T_LINKS set HITS_LINKS = HIT_LINKS+1 where URL_LINKS = '$Url'"); +- $sth->execute || error("Error: Unable execute query:$dbh->err, $dbh->errstr"); ++ my $sth = $dbh->prepare("UPDATE T_LINKS set HITS_LINKS = HIT_LINKS+1 where URL_LINKS = ?"); ++ $sth->execute($Url) || error("Error: Unable execute query:$dbh->err, $dbh->errstr"); + $sth->finish; + $dbh->disconnect; + if ($DEBUG == 1) { print LOGFILE "Execution requete Update - OK\n"; } + } + } + ++$Url=uri_escape($Url, "^A-Za-z0-9\-\._~/:"); ++$Tag=uri_escape($Tag); ++ + if ($TRACEFILE == 1) { + if ($ENV{REMOTE_ADDR} !~ /$EXCLUDEIP/) { + open(FICHIER,">>$TXTDIR/$TXTFILE") || error("Error: Enable to open trace file $TXTDIR/$TXTFILE: $!"); diff --git a/awstats.cron b/awstats.cron new file mode 100644 index 0000000..c2a44ab --- /dev/null +++ b/awstats.cron @@ -0,0 +1,3 @@ +#!/bin/bash +exec /usr/share/awstats/tools/awstats_updateall.pl now -configdir="/etc/awstats" -awstatsprog="/usr/share/awstats/wwwroot/cgi-bin/awstats.pl" >/dev/null +exit 0 diff --git a/awstats.spec b/awstats.spec new file mode 100644 index 0000000..725eacd --- /dev/null +++ b/awstats.spec @@ -0,0 +1,503 @@ +Name: awstats +Version: 7.8 +Release: 7%{?dist} +Summary: Advanced Web Statistics +License: GPLv3+ +URL: http://awstats.sourceforge.net +Source0: http://downloads.sourceforge.net/project/awstats/AWStats/%{version}/awstats-%{version}.tar.gz +Source1: %{name}.cron +Patch0: awstats-awredir.pl-sanitize-parameters.patch + +%if 0%{?rhel} >= 7 || 0%{?fedora} +# fix configuration for httpd 2.4 (#871366) +Patch1: awstats-7.0-httpd-2.4.patch +%endif + +# https://github.com/eldy/awstats/pull/196/commits/0d4d4c05f8e73be8f71dd361dc55cbd52858b823.diff +Patch2: awstats-CVE-2020-35176.patch + +# distribution specific definitions +%define use_systemd (0%{?fedora} || 0%{?rhel} >= 7) + +BuildArch: noarch +BuildRequires: coreutils +BuildRequires: findutils +BuildRequires: perl-interpreter +BuildRequires: perl-generators +BuildRequires: recode +Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) +Requires: perl-Net-IP, perl-Net-DNS, perl-Geo-IP +Requires: crontabs +Requires(post): perl-interpreter + +%if %use_systemd +# For systemd.macros +BuildRequires: systemd +Requires(postun): systemd +%else +Requires(postun): /sbin/service +%endif + +## SELinux policy is now included upstream +Obsoletes: awstats-selinux < 6.8-1 +Provides: awstats-selinux = %{version}-%{release} + + +%description +Advanced Web Statistics is a powerful and full-featured tool that generates +advanced web server graphical statistics. This server log analyzer works +from the command line or as a CGI and shows all information your log contains, +in graphical web pages. It can analyze a lot of web/wap/proxy servers such as +Apache, IIS, Weblogic, Webstar, Squid, ... but also mail or FTP servers. + +This program can measure visits, unique visitors, authenticated users, pages, +domains/countries, OS busiest times, robot visits, type of files, search +engines/keywords used, visit duration, HTTP errors and more... +Statistics can be updated from a browser or your scheduler. +The program also supports virtual servers, plugins and a lot of features. + +With the default configuration, the statistics are available: +http://localhost/awstats/awstats.pl + + +%prep +%setup -q +%patch0 -p 1 +%if 0%{?rhel} >= 7 || 0%{?fedora} +%patch1 -p 1 +%patch2 -p 1 +%endif + +# Fix style sheets. +perl -pi -e 's,/icon,/awstatsicons,g' wwwroot/css/* +# Fix some bad file permissions here for convenience. +chmod -x tools/httpd_conf +find tools/xslt -type f | xargs chmod -x +# Remove \r in conf file (file written on MS Windows) +perl -pi -e 's/\r//g' docs/COPYING.TXT docs/LICENSE.TXT docs/pad_awstats.xml docs/awstats_changelog.txt docs/styles.css tools/httpd_conf tools/logresolvemerge.pl tools/awstats_exportlib.pl tools/awstats_buildstaticpages.pl tools/maillogconvert.pl tools/urlaliasbuilder.pl wwwroot/cgi-bin/awredir.pl +# Encoding +recode ISO-8859-1..UTF-8 docs/awstats_changelog.txt +# Stray version control file +rm -f tools/webmin/.gitignore + +%install +rm -rf $RPM_BUILD_ROOT + +### Create folders +mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{httpd/conf.d,%{name},cron.hourly} +mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/%{name} +mkdir -p $RPM_BUILD_ROOT%{_datadir}/%{name} + +### Install files +cp -pr tools $RPM_BUILD_ROOT%{_datadir}/%{name} +chmod 755 $RPM_BUILD_ROOT%{_datadir}/%{name}/tools/*.pl +chmod 644 $RPM_BUILD_ROOT%{_datadir}/%{name}/tools/httpd_conf +cp -pr wwwroot $RPM_BUILD_ROOT%{_datadir}/%{name} +chmod 755 $RPM_BUILD_ROOT%{_datadir}/%{name}/wwwroot/cgi-bin/*.pl +rm -rf $RPM_BUILD_ROOT%{_datadir}/%{name}/wwwroot/classes/src +### We want these outside CGI path. +rm -rf $RPM_BUILD_ROOT%{_datadir}/%{name}/wwwroot/cgi-bin/{lang,lib,plugins} +cp -pr wwwroot/cgi-bin/{lang,lib,plugins} $RPM_BUILD_ROOT%{_datadir}/%{name} + +rm -f $RPM_BUILD_ROOT%{_datadir}/%{name}/wwwroot/cgi-bin/awstats.model.conf + +### Commit permanent changes to default configuration +install -p -m 644 wwwroot/cgi-bin/awstats.model.conf \ + $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/%{name}.model.conf +perl -pi -e ' + s|^LogFile=.*$|LogFile="%{_localstatedir}/log/httpd/access_log"|; + s|^DirData=.*$|DirData="%{_localstatedir}/lib/awstats"|; + s|^DirCgi=.*$|DirCgi="/awstats"|; + s|^DirIcons=.*$|DirIcons="/awstatsicons"|; + s|^SiteDomain=.*$|SiteDomain="localhost.localdomain"|; + s|^HostAliases=.*$|HostAliases="localhost 127.0.0.1"|; + s|^EnableLockForUpdate=.*$|EnableLockForUpdate=1|; + s|^SaveDatabaseFilesWithPermissionsForEveryone=.*$|SaveDatabaseFilesWithPermissionsForEveryone=0|; + s|^SkipHosts=.*$|SkipHosts="127.0.0.1"|; + s|^Expires=.*$|Expires=3600|; + ' $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/%{name}.model.conf +install -p -m 644 $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/%{name}.{model,localhost.localdomain}.conf + +# Fix AWStats path in scripts +perl -pi -e 's|/usr/local/awstats|%{_datadir}/awstats|g' \ + $RPM_BUILD_ROOT%{_datadir}/%{name}/tools/*.pl + +# Apache configuration +install -p -m 644 tools/httpd_conf $RPM_BUILD_ROOT/%{_sysconfdir}/httpd/conf.d/%{name}.conf + +# Cron job +install -m 0750 -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/cron.hourly/%{name} + +# replace logos with Copyright and Trademark problem by unknown.png +# https://bugzilla.redhat.com/show_bug.cgi?id=1196549 +cd $RPM_BUILD_ROOT%{_datadir}/%{name}/wwwroot/icon +for i in browser/adobe.png browser/seamonkey.png os/win*.png os/macos*.png cpu/intel.png cpu/ibm.png; do + cp -v os/unknown.png $i +done +cd - + + +%post +if [ $1 -eq 1 ]; then + if [ ! -f %{_sysconfdir}/%{name}/%{name}.`hostname`.conf ]; then + %{__cat} %{_sysconfdir}/%{name}/%{name}.model.conf | \ + %{__perl} -p -e 's|^SiteDomain=.*$|SiteDomain="'`hostname`'"|; + s|^HostAliases=.*$|HostAliases="REGEX[^.*'${HOSTNAME//./\\\\.}'\$]"|; + ' > %{_sysconfdir}/%{name}/%{name}.`hostname`.conf || : + fi +fi + +%postun +%if %use_systemd +%systemd_postun_with_restart httpd.service +%else +if [ $1 -ne 0 ]; then + /sbin/service httpd condrestart >/dev/null 2>&1 +fi +%endif + + +%files +# Apache configuration file +%config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf +%config(noreplace) %attr(750,root,root) %{_sysconfdir}/cron.hourly/%{name} +%config(noreplace) %{_sysconfdir}/%{name}/ +%{_localstatedir}/lib/%{name} +%dir %{_datadir}/%{name} +%dir %{_datadir}/%{name}/wwwroot +%{_datadir}/%{name}/tools +%{_datadir}/%{name}/wwwroot/cgi-bin +# Different defattr to fix lots of files which should not be +x. +%defattr(644,root,root,755) +%doc README.md docs/* +%{_datadir}/%{name}/lang +%{_datadir}/%{name}/lib +%{_datadir}/%{name}/plugins +%{_datadir}/%{name}/wwwroot/classes +%{_datadir}/%{name}/wwwroot/css +%{_datadir}/%{name}/wwwroot/icon +%{_datadir}/%{name}/wwwroot/js + + +%changelog +* Mon May 30 2022 Jitka Plesnikova - 7.8-7 +- Perl 5.36 rebuild + +* Wed Jan 19 2022 Fedora Release Engineering - 7.8-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Wed Jul 21 2021 Fedora Release Engineering - 7.8-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Fri May 21 2021 Jitka Plesnikova - 7.8-4 +- Perl 5.34 rebuild + +* Tue Jan 26 2021 Fedora Release Engineering - 7.8-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Wed Dec 30 2020 Tim Jackson - 7.8-2 +- Fix CVE-2020-35176 + +* Fri Aug 07 2020 Tim Jackson - 7.8-1 +- Version 7.8 + +* Mon Jul 27 2020 Fedora Release Engineering - 7.7-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Fri Jun 26 2020 Jitka Plesnikova - 7.7-10 +- Perl 5.32 re-rebuild of bootstrapped packages + +* Mon Jun 22 2020 Jitka Plesnikova - 7.7-9 +- Perl 5.32 rebuild + +* Tue Jan 28 2020 Fedora Release Engineering - 7.7-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Wed Jul 24 2019 Fedora Release Engineering - 7.7-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Thu May 30 2019 Jitka Plesnikova - 7.7-6 +- Perl 5.30 rebuild + +* Thu Jan 31 2019 Fedora Release Engineering - 7.7-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Thu Jul 12 2018 Fedora Release Engineering - 7.7-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Jun 27 2018 Jitka Plesnikova - 7.7-3 +- Perl 5.28 rebuild + +* Wed Feb 07 2018 Fedora Release Engineering - 7.7-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Mon Jan 08 2018 Petr Lautrbach - 7.7-1 +- Version 7.7 + +* Tue Jan 02 2018 Petr Lautrbach - 7.6-8 +- Fix two path traversal issues in awstat.pl - CVE-2017-1000501 (#1529349) + +* Wed Jul 26 2017 Fedora Release Engineering - 7.6-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Fri Jul 14 2017 Petr Pisar - 7.6-6 +- perl dependency renamed to perl-interpreter manually + + +* Thu Jul 13 2017 Petr Pisar - 7.6-5 +- perl dependency renamed to perl-interpreter + + +* Sun Jun 04 2017 Jitka Plesnikova - 7.6-4 +- Perl 5.26 rebuild + +* Tue May 30 2017 Petr Lautrbach - 7.6-3 +- Revert "Move cron file to awstats-cron" + +* Tue May 23 2017 Petr Lautrbach - 7.6-2 +- Move cron file to awstats-cron +- Update default path to be more compatible with Linux distro + +* Wed Apr 12 2017 Petr Lautrbach - 7.6-1 +- version 7.6 + +* Fri Feb 10 2017 Fedora Release Engineering - 7.4-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Fri Jul 22 2016 Jitka Plesnikova - 7.4-5 +- Fix FTBFS when perl is not in the SRPM build root + +* Sat May 14 2016 Jitka Plesnikova - 7.4-4 +- Perl 5.24 rebuild + +* Thu Feb 25 2016 Petr Lautrbach 7.4-3 +- replace logos with Copyright and Trademark problem by unknown.png (#1196549) + +* Wed Feb 03 2016 Fedora Release Engineering - 7.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Fri Sep 11 2015 Petr Lautrbach 7.4-1 +- version 7.4 + +* Wed Jun 17 2015 Fedora Release Engineering - 7.3-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Wed Jun 03 2015 Jitka Plesnikova - 7.3-3 +- Perl 5.22 rebuild + +* Fri Sep 05 2014 Jitka Plesnikova - 7.3-2 +- Perl 5.20 rebuild + +* Wed Sep 03 2014 Petr Lautrbach 7.3-1 +- version 7.3 + +* Tue Aug 26 2014 Jitka Plesnikova - 7.2-2 +- Perl 5.20 rebuild + +* Mon Jun 09 2014 Petr Lautrbach 7.2-1 +- version 7.2 + +* Sat Jun 07 2014 Fedora Release Engineering - 7.1.1-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Thu Oct 10 2013 Ralf Corsépius - 7.1.1-5 +- Add BR: systemd for systemd.macros (RHBZ #1017665). + +* Sat Aug 03 2013 Fedora Release Engineering - 7.1.1-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Wed Jul 17 2013 Petr Pisar - 7.1.1-3 +- Perl 5.18 rebuild + +* Tue Apr 02 2013 Petr Lautrbach 7.1.1-2 +- add a missing requirement on crontab and fix (#947040) +- add missing requirements (#908981) +- spec file and patches cleanup + +* Mon Mar 18 2013 Petr Lautrbach 7.1.1-1 +- version 7.1.1 + +* Wed Feb 13 2013 Fedora Release Engineering - 7.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Fri Jan 04 2013 Petr Lautrbach 7.1-1 +- version 7.1 + +* Fri Nov 16 2012 Petr Lautrbach 7.0-11 +- fix configuration for httpd 2.4 (#871366) +- fix potential XSS attacks - CVE-2012-4547 (#871159) + +* Wed Jul 18 2012 Fedora Release Engineering - 7.0-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jun 08 2012 Petr Pisar - 7.0-9 +- Perl 5.16 rebuild + +* Thu Jan 12 2012 Fedora Release Engineering - 7.0-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Mon Jan 02 2012 Petr Lautrbach 7.0-7 +- fix for perl-5.14 (#768443,#768982,#771031) + +* Fri Oct 07 2011 Petr Lautrbach 7.0-6 +- fix CRLF Injection flaw (#740926) + +* Mon Oct 03 2011 Petr Lautrbach 7.0-5 +- fix multiple XSS and sql injection flaws (#740926) + +* Wed Aug 10 2011 Petr Lautrbach 7.0-4 +- don't use Switch module + +* Tue Feb 15 2011 Petr Lautrbach 7.0-3 +- update to upstream 7.0 version + +* Mon Feb 07 2011 Fedora Release Engineering - 7.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Tue Jul 13 2010 Aurelien Bompard - 7.0-1 +- version 7.0 + +* Thu Nov 26 2009 Aurelien Bompard - 6.95-1 +- version 6.95 (security fix) +- drop patch0 + +* Fri Aug 21 2009 Aurelien Bompard - 6.9-4 +- don't backup the cgi when patching (#518168) + +* Fri Jul 24 2009 Fedora Release Engineering - 6.9-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Mon Feb 23 2009 Fedora Release Engineering - 6.9-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Wed Dec 31 2008 Aurelien Bompard 6.9-1 +- version 6.9 +- use Debian's version of the CVE-2008-3714 fix + +* Sat Dec 06 2008 Aurelien Bompard 6.8-3 +- Use Debian's patch for CVE-2008-3714 (rh#474396) + +* Sat Aug 23 2008 Aurelien Bompard 6.8-2 +- Add upstream patch for CVE-2008-3714 + +* Mon Jul 21 2008 Aurelien Bompard 6.8-1 +- version 6.8 + +* Fri Mar 14 2008 Aurelien Bompard 6.7-3 +- SELinux policy is included upstream +- Fix cron job (bug 435101) + +* Sun Dec 02 2007 Aurelien Bompard 6.7-2 +- awstats does not actually require httpd (bug 406901) + +* Mon Aug 13 2007 Aurelien Bompard 6.7-1 +- split SElinux bits in the -selinux package (bug 250637) +- use an SElinux module instead of semanage +- update to version 6.7 + +* Sun Jan 07 2007 Aurelien Bompard 6.6-1 +- version 6.6 final + +* Fri Nov 03 2006 Aurelien Bompard 6.6-0.4.beta +- fix typo in the cron job (bug 213803) + +* Mon Oct 30 2006 Aurelien Bompard 6.6-0.3.beta +- fix DOS encoding on logresolvemerge.pl + +* Wed Aug 30 2006 Aurelien Bompard 6.6-0.2.beta +- rebuild + +* Sun May 07 2006 Aurelien Bompard 6.6-0.1.beta +- version 6.6 (beta), fixes CVE-2005-2732 (bug 190921, 190922, and 190923) + +* Sun Apr 09 2006 Aurelien Bompard 6.5-3 +- SELinux support: use semanage to label the cgi and the database files +- Only allow access from localhost by default (this app has a security history) + +* Thu Feb 23 2006 Aurelien Bompard 6.5-2 +- rebuild for FC5 + +* Wed Jan 11 2006 Aurelien Bompard 6.5-1 +- version 6.5 final + +* Mon Aug 22 2005 Aurelien Bompard 6.5-1 +- version 6.5 (beta), fixes CAN-2005-1527 + +* Mon Mar 21 2005 Aurelien Bompard 6.4-1 +- version 6.4 final +- change release tag (following Owen's scheme) +- convert tabs into spaces + +* Tue Feb 15 2005 Aurelien Bompard 6.4-0.1.pre +- update to 6.4pre to fix a vulnerability + +* Thu Feb 10 2005 Aurelien Bompard 6.3-1 +- version 6.3 final + +* Thu Jan 27 2005 Aurelien Bompard 6.3-0.1.20050122 +- update to 6.3pre to fix vulnerability + +* Sun Nov 28 2004 Aurelien Bompard 6.2-0.fdr.1 +- version 6.2 + +* Thu May 20 2004 Aurelien Bompard 6.1-0.fdr.6 +- remove redundant substitution + +* Thu May 20 2004 Aurelien Bompard 6.1-0.fdr.5 +- be closer to upstream default configuration +- use the included apache conf file +- merge changes from Michael Schwendt (bug 1608) + +* Wed May 19 2004 Aurelien Bompard 6.1-0.fdr.4 +- fix cron job for relocated tools + +* Wed May 19 2004 Aurelien Bompard 6.1-0.fdr.3 +- keep the tools in the tools subdirectory + +* Wed May 19 2004 Aurelien Bompard 6.1-0.fdr.2 +- fix scripts in /usr/bin +- rename configure.pl to awstats_configure.pl + +* Sun May 16 2004 Aurelien Bompard 6.1-0.fdr.1 +- version 6.1 + +* Wed Mar 03 2004 Aurelien Bompard 6.0.0.fdr.2 +- requires perl without version to fix build on rh9 + +* Thu Feb 19 2004 Aurelien Bompard 6.0-0.fdr.1 +- version 6.0 + +* Mon Dec 22 2003 Aurelien Bompard 5.9-0.fdr.5 +- solve stupid bug in %%install +- only create the preconfigured config file on install, not on upgrade + +* Mon Dec 22 2003 Aurelien Bompard 5.9-0.fdr.4 +- post scriptlet doesn't overwrite user configuration now + be careful if you upgrade from 5.9-0.fdr.3 +- replace _DATADIR in apache configuration in the install stage + (was in the post scriptlet before) +- remove 'noreplace' tag from the apache config file +- various cleanups in the %%install stage +- Thanks to Mickael Schwendt. + +* Sun Dec 07 2003 Aurelien Bompard 5.9-0.fdr.3 +- %%post et %%postun now use condrestart instead of restart +- only restart apache if we are upgrading +- install and cp use the "-p" switch +- use %%_datadir in /etc/httpd/conf.d/awstats.conf +- improve cron job +- don't brutally recode HTML pages +- the scan is now done hourly instead of daily +- *.pm files are not executable any more +- tools are in %%bindir +- various other improvements +- many thanks to Michael Schwendt and Dag Wieers. + +* Sat Nov 29 2003 Aurelien Bompard 5.9-0.fdr.2 +- Set the hostname in %%post (thanks to Michael Koziarski) +- Improved customization in %%post + +* Sun Nov 16 2003 Aurelien Bompard 5.9-0.fdr.1 +- fix /etc/cron.daily/awstats permissions +- fix log name in conf file +- port to fedora (from Mandrake) diff --git a/sources b/sources index e69de29..318d463 100644 --- a/sources +++ b/sources @@ -0,0 +1 @@ +SHA512 (awstats-7.8.tar.gz) = b532f74a8b420841b1ae7eea73fd341049925af01688a06114f53807c14c6a4edc4ca4f671b2b9c1aee8024ba25ccf69b6eae391250e5722d2fd719de4cf87e2 From 63a711d44922e8e29aac56e6e51f871c52d35467 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Tue, 9 Aug 2022 12:45:26 +0200 Subject: [PATCH 2/2] Do not require perl-Geo-IP which is EOL --- awstats.spec | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/awstats.spec b/awstats.spec index 725eacd..85072d5 100644 --- a/awstats.spec +++ b/awstats.spec @@ -1,6 +1,6 @@ Name: awstats Version: 7.8 -Release: 7%{?dist} +Release: 8%{?dist} Summary: Advanced Web Statistics License: GPLv3+ URL: http://awstats.sourceforge.net @@ -26,7 +26,13 @@ BuildRequires: perl-interpreter BuildRequires: perl-generators BuildRequires: recode Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) -Requires: perl-Net-IP, perl-Net-DNS, perl-Geo-IP +Requires: perl-Net-IP, perl-Net-DNS +# perl-Geo-IP and GeoIP are EOL and are not available in epel9 +# https://bugzilla.redhat.com/show_bug.cgi?id=2091875 +# https://bugzilla.redhat.com/show_bug.cgi?id=2066787 +%if 0%{?rhel} < 9 +Requires: perl-Geo-IP +%endif Requires: crontabs Requires(post): perl-interpreter @@ -180,6 +186,9 @@ fi %changelog +* Mon Aug 1 2022 Petr Lautrbach - 7.8-8 +- Do not require perl-Geo-IP which is EOL + * Mon May 30 2022 Jitka Plesnikova - 7.8-7 - Perl 5.36 rebuild