Package: ocsinventory-server / 2.8.1+dfsg1-1+deb11u1

Metadata

Package Version Patches format
ocsinventory-server 2.8.1+dfsg1-1+deb11u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
apache_conf_name | (download)

ocsreports/plugins/language/en_GB/en_GB.txt | 2 1 + 1 - 0 !
ocsreports/plugins/language/fr_FR/fr_FR.txt | 2 1 + 1 - 0 !
ocsreports/plugins/language/it_IT/it_IT.txt | 2 1 + 1 - 0 !
3 files changed, 3 insertions(+), 3 deletions(-)

 fix apache conf file name in help messages
fix_tools install_plugin.py paths.patch | (download)

ocsreports/tools/install_plugin.py | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix_tools install_plugin.py paths

fix ocsreports paths.patch | (download)

ocsreports/css/dataTables-custom.css | 10 5 + 5 - 0 !
ocsreports/var.php | 2 1 + 1 - 0 !
2 files changed, 6 insertions(+), 6 deletions(-)

 fix ocs-reports paths
use_system_libraries | (download)

ocsreports/plugins/main_sections/ms_computer/ms_qrcode.php | 4 1 + 3 - 0 !
ocsreports/require/function_commun.php | 26 13 + 13 - 0 !
ocsreports/var.php | 2 1 + 1 - 0 !
3 files changed, 15 insertions(+), 17 deletions(-)

 use debian packaged libraries
fix php cas api change for cve 2023 39369.patch | (download)

ocsreports/backend/AUTH/methode/cas.php | 2 1 + 1 - 0 !
ocsreports/backend/require/cas.config.php | 5 4 + 1 - 0 !
ocsreports/require/header.php | 2 1 + 1 - 0 !
ocsreports/update.php | 4 2 + 2 - 0 !
4 files changed, 8 insertions(+), 5 deletions(-)

 adapt ocsinventory to api-breaking change of php-cas/cve-2022-39369

Bug-Debian: (CVE of php-cas): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023571
0006 Fix vendored CVE 2022 39369.patch | (download)

ocsreports/vendor/jasig/phpcas/source/CAS.php | 24 20 + 4 - 0 !
ocsreports/vendor/jasig/phpcas/source/CAS/Client.php | 112 58 + 54 - 0 !
ocsreports/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php | 152 152 + 0 - 0 !
ocsreports/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php | 98 98 + 0 - 0 !
ocsreports/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php | 61 61 + 0 - 0 !
ocsreports/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php | 69 69 + 0 - 0 !
ocsreports/vendor/jasig/phpcas/test/CAS/Tests/ServiceBaseUrlTest.php | 244 244 + 0 - 0 !
7 files changed, 702 insertions(+), 58 deletions(-)

 fix vendored cve-2022-39369

Merge pull request from GHSA-8q72-6qq8-xv64

* Add ServerName classes and required service_name constructor argument

This includes a refactoring of moving Client->_getClientUrl() method to a new class.

Unit tests are also added and updated for the new constructor argument.

* Add service_name argument to the static helper class and examples

* Update docs for 1.6.0 release

* Update versions for the 1.6.0 release

* Rename ServerName class to ServiceBaseUrl and add protocol in allowedlist check

* Update docs for the ServiceBaseUrl class and argument change

* Minor typo fixes