Overview
Request 909838 accepted
- Include upstream (post-7.8) fix for CVE-2020-35176.
- Note that the OBS package since 2018-03-05 was NOT vulnernable to either
this or CVE-2020-29600, as it created a placeholder awstats.conf which
prevented awstats from looking elsewhere.
- Update the comment in said placeholder conf and add these CVE references to
the Mar 5, 2018 changelog entry.
- Created by adaugherity
- In state accepted
-
Package maintainer:
lrupp
Request History
adaugherity created request
- Include upstream (post-7.8) fix for CVE-2020-35176.
- Note that the OBS package since 2018-03-05 was NOT vulnernable to either
this or CVE-2020-29600, as it created a placeholder awstats.conf which
prevented awstats from looking elsewhere.
- Update the comment in said placeholder conf and add these CVE references to
the Mar 5, 2018 changelog entry.
msmeissn accepted request
ok
@lrupp: review reminder