- Add 0003-6.8-core.http-Cleanup-catch-all-route-for-paths-with.patch
  to fix an open redirect flaw tracked as CVE-2021-22141, bsc#1186868

• Files Changed
• Browse Source

- Ensure /etc/sysconfig/kibana is present

• Files Changed
• Browse Source

- Update to Kibana 4.6.6 (bsc#1044849, CVE-2017-11499, ESA-2017-14, 
  ESA-2017-16) 
  * [4.6] ignore forked code for babel transpile build phase (#13483)
  * Allow more than match queries in custom filters (#8614) (#10857)
  * [state] don't make extra $location.replace() calls (#9954)
  * [optimizer] move to querystring-browser package for up-to-date api
  * [state/unhashUrl] use encode-uri-query to generate cleanly encoded urls
  * server: refactor log_interceptor to be more DRY (#9617)
  * server: downgrade ECANCELED logs to debug (#9616)
  * server: do not treat logged warnings as errors (#8746) (#9610)
  * [server/logger] downgrade EPIPE errors to debug level (#9023)
  * Add basepath when redirecting from a trailling slash (#9035)
  * [es/kibanaIndex] use unmapped_type rather than ignore_unmapped (#8968)
  * [server/shortUrl] validate urls before shortening them
- Add CVE-2017-11481.patch (bsc#1044849, CVE-2017-11481)
  * This fixes an XSS vulnerability in URL fields
- Remove %dir declaration from /opt/kibana/optimize to ensure
  no files owned by root end up in there
- Exclude /opt/kibana/optimize from %fdupes
- Restart service on upgrade
- Do not copy LICENSE.txt and README.txt to /opt/kibana
- Fix rpmlint warnings/errors
- Switch to explicit patch application
- Fix source URL
- Fix logic for systemd/systemv detection

• Files Changed
• Browse Source

Add missing (bsc#1048688, FATE#323204) reference.

• Files Changed
• Browse Source

- Add 0001-Configurable-custom-response-headers-for-server.patch
  (bsc#1171909, CVE-2020-10743)

• Files Changed
• Browse Source

osc copypac from project:Cloud:OpenStack:Master package:kibana revision:1, using expand

• Browse Source