Ubuntu
cacti package

cacti 0.8.8b+dfsg-8+deb8u1build0.15.04.1 source package in Ubuntu

Changelog

cacti (0.8.8b+dfsg-8+deb8u1build0.15.04.1) vivid-security; urgency=medium

  * fake sync from Debian (LP: #1210822)

cacti (0.8.8b+dfsg-8+deb8u1) jessie-security; urgency=high

  * Security update
    - CVE-2015-2665 Cross-site scripting (XSS) vulnerability in Cacti
      before 0.8.8d allows remote attackers to inject arbitrary web script
      or HTML via unspecified vectors.
    - CVE-2015-4342 SQL Injection and Location header injection from cdef
      id
    - CVE-2015-4454 SQL injection vulnerability in the
      get_hash_graph_template function in lib/functions.php in Cacti before
      0.8.8d allows remote attackers to execute arbitrary SQL commands via
      the graph_template_id parameter to graph_templates.php.
    - Unassigned CVE SQL injection VN:JVN#78187936 / TN:JPCERT#98968540

 -- Steve Beattie <email address hidden>  Tue, 30 Jun 2015 11:47:36 -0700

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Vivid
Original maintainer:
Cacti Maintainer
Architectures:
all
Section:
web
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Vivid: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
cacti_0.8.8b+dfsg.orig.tar.bz2 2.0 MiB bc4b733055e66e1f75e67e697d97793c072ce82e31c5cfa21aab781cc470171b
cacti_0.8.8b+dfsg-8+deb8u1build0.15.04.1.debian.tar.xz 104.0 KiB e3bdef1f06be6ec906bc894590d5fd657239eb8e732e01ff543db6ae6a48d168
cacti_0.8.8b+dfsg-8+deb8u1build0.15.04.1.dsc 2.0 KiB c8eeb101a7935ca91e451e8be6cef9af6cb56c68caa4f9c9003a0aa80c90ed58

View changes file

Binary packages built by this source

cacti: No summary available for cacti in ubuntu vivid.

No description available for cacti in ubuntu vivid.