7.7:
Security fix: CVE-2017-1000501
Security fix: Missing sanitizing of parameters
Fix LogFormat=4 with url containing spaces.
Fix to window.opener vulnerability in external referral site links.
Add methodurlprot in key to define log format.
Add Dynamic DNS Lookup.
Fix edge support.
- Security fix: "|" not allowed into DirLang parameter.
- Security fix: More restrictive rule for using AWSTATS_ENABLE_CONFIG_DIR.
- Update robots database.
- Fix OS database.
- Update/fix of documentation.
- Add missing country flag for "el".
- Add partial support for pure-ftpd stats format in method field.
- Add support for macOS Sierra.
- Add web fonts to default NotPageList, add support for GPX and JSON files
- Compatibility with Perl 5.22
- Support detection of Edge browser with detail of version.
- Update robots database
- Add eot/woff/woff2 to mime.pm as fonts
- Add .svgz to image list
- Exclude groups.google from search engines
- Add %time5 tag to support log format with iso time with timezone.
- Add option DynamicDNSLookup to make DNS lookup during output instead
of during log analysis processing.
- Increase default value for MaxRowsInHTMLOutput
New features:
- Add debian patch debian-patches-1019_allow_frame_resize.patch to add
option nboflastupdatelookuptosave on command line.
- 199 Added geoip6 plugin with support for IPv4 AND IPv6.
- Work with Amazon AWS log files (using %time5 tag).
Fixes:
- Fixes permission on some .pl scripts.
- 205 GetResolvedIP_ipv6 does not strip trailing dot.
- 496 tools scripts should print warnings and errors to STDERR.
- 919 Referrals not getting tracked due to improperly getting flagged as a search.
- Add debian patch 0007_russian_lang.patch.
- Add debian patch 2001_awstatsprog_path.patch.
- 921 Failure in the help text for geoip_generator.pl
- 909 awstats_buildstaticpages.pl noisy debug output.
- 680 Invalid data passed to Time::Local causes global destruction.
- 212 Fix CVE-2006-2237
Do it for all packages that
* mention perl, or
* have a directory name starting with p5-*, or
* depend on a package starting with p5-
like last time, for 5.18, where this didn't lead to complaints.
Let me know if you have any this time.
New features:
- Add command line option -version
- Better error management of geoip modules.
- Update domains, robots and search engines database:
- Windows 8 + iOS Support in AWStats
- Detection of 8.1 and IE11.
Fixes:
- When using builddate option of script awstats_buildstaticpages,
static link is wrong.
- Restore detection of Opera browsers versions.
- GeoIP Cities page doesnt work.
- Add missing icons.
- Avoid warning mixed http/https with module graphgooglechartapi.
- $MinHit{'Host'} rather than $MinHit{'Login'} used in sub HTMLShowLogins.
Other:
- Move version system to sourceforge Git instead of CVS.
New features:
- Upgrade licence to GPL v3+.
- Update documentation.
Fixes:
- Since updating Webmin to 1.53, the Add New Config File screen layout is
totally messed up and unusable.
- Update broken links to maxmind.
a) refer 'perl' in their Makefile, or
b) have a directory name of p5-*, or
c) have any dependency on any p5-* package
Like last time, where this caused no complaints.
New features/improvements:
- Update translations.
- Add example of nginx setup.
- Add some patches from debian package.
- Rename domain name into documentation to awstats.org
- Can allow urls with awredir without using md5 key parameter.
- Usage of databasebreak option possible with awstats_buildstaticpages.
- Add rel=nofollow on links.
- Add option AddLinkToExternalCGIWrapper to add link to a wrapper script
into each title of Dolibarr reports. This can be used to add a wrapper
to download data into a CSV file for example.
Fixes:
- Security fix into awredir.pl
- Fix: Case of uk in googlechart api
mirrored by NetBSD.org, had completely hosed file permissions; plus,
it differed in size (but not version) from the distfile available from
the sourceforge project site.
Since the latter actually works, I updated the checksum to use it.
New features/improvements:
- Detect Windows 7.
- Can format numbers according to language.
- More mime types.
- Added geoip_asn_maxmind plugin.
- Geoip Maxmind city plugin have now override file capabilities to complete
missing entries in geoip maxmind database.
- Added graphgooglechartapi to use online Google chart api to build graph.
- Can show map of country to report countries when using graphgooglechartapi.
- Part of codes was change to use more functions and have a cleaner code.
- Added parameter to ignore missing log files when merging for a site on
multiple servers where a single server may not have created a log for a given day.
- Update robots database.
- Added Download tracking where certain mime types are defined as downloads
and HTTP status 206 is tracked as download continuation
- Can use wrapper with parameters in WrapperScript parameter.
- Change to allow usage of AWStats inside a plugin
for Opensource Dolibarr ERP & CRM software (http://www.dolibarr.org).
Fixes:
- Webmin module works with new version of webmin.
- Security fix (Traverse directory of LoadPlugin)
- Security fix (Limit config to defined directory to avoid access to external
config file via a nfs or webdav link).
New features/improvements:
* Fix security in awredir.pl script by adding a security key required by
default.
* Enhance security of parameter sanitizing function.
* Add name of config file used to build data files inside data files header.
* Added details of version for Chrome, Opera, Safari and Konqueror browsers.
* Add AdobeAir detection.
* Major update of browsers, robots and search_engines databases (among them,
the Bing search engine).
* Increase seriously bot detection.
* Add Brezhoneg language.
* Add a better way to detect Safari versions.
* Added subpages for geoip maxmind modules in awstats_buildstaticpages.
Fixes:
* Fix typo in polish language file
* awstats emmits ton of warnings with new geoipfree - ID: 2794728
* Fix: can detect robots with robots.txt url even if file is not root.
* Other minor fixes.
pkgsrc changes:
* Patch XML encoding problem when the AT&T searchbot is encountered.
* With postfix that support DSN (Delivery Status Notifications) we exclude
some lines to avoid counting mails twice in maillogconvert.pl script.
* Logresolvemerge.pl support FreeRADIUS logs or anything else using
(the fixed length!) ctime format timestamp.
* Add option stoponfirsteof in logresolvemerge tool.
* Add patch to support host_proxy tag in LogFormat (for Apache LogFormat
containing %{X-Forwarded-For}i)
* Renamed Add to favourites on "Hit on favicon".
* Increase robots, search engines database (Added Google Chrome browser,
better Vista, WII, detection, ...)
* Update languages files.
* Added a lot of patch from sourceforge.
* Bug fixes.
New features/improvements:
- Added OnlyUsers option.
- Can track RPC request.
- HTMLHeadSection can accept \n in string.
- Add option MetaRobot.
- Increase seriously bot detection.
- Better detection of windows OS.
- Add condition HOSTINLOG in extra sections.
- Can show a full list for extrasection.
Fixes:
- Fixed pb in xml output for history files.
- Fixed a bug in awstats_configure.pl script.
Other/Documentation:
- Updated some language files.
- Updated documentation.
- Updated browsers database.
- Added a more complete xslt example.
- Remove some deprecated code.
- Update status of GeoIP City plugin database. A free version is
now available like GeoIP Country database.
patches to add it). Drop pax from the default USE_TOOLS list.
Make bsdtar the default for those places that wanted gtar to extract
long links etc, as bsdtar can be built of the tree.
New features/improvements:
- Full support for -day option. To build different report for each day
- Added virtualenamequot tag
- Added option NotPageList
- Addes .jobs and .mobi domains
Fixes:
- Minor bug in awstats_configure.pl
Other/Documentation:
- Updated some language files.
- Updated browsers database.
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
Major changes since 6.4:
- Fixed CVE-2006-2237.
- All geoip plugins support the PurePerl version.
- Possible use of vhost in extra section.
- Support IPv6 in AllowAccessFromWebToFollowingIPAddresses parameter.
- Added svn family to browsers detection.
- RSS catcher/readers in robot database.
- LogFormat=2 can now change its value dynamically if logformat change.
- More new features and bug fixes.
