Fwd: cacti security update

Mon, 14 Jul 2014 12:35:02 -0700 

Hi all,

On 5 July, I sent the attached security update to the announce list. It
seems to have never reached that list. Could somebody enlighten me and
tell me what I did wrong?

Paul
--- Begin Message --- 
Package        : cacti
Version        : 0.8.7g-1+squeeze4
CVE ID         : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328
                 CVE-2014-2708 CVE-2014-2709 CVE-2014-4002
Debian Bug     : 742768 743565 752573

Multiple security issues (cross-site scripting, cross-site request
forgery, SQL injections, missing input sanitising) have been found in
Cacti, a web frontend for RRDTool.

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to