Re: [SECURITY] [DLA 2069-1] cacti security update

2020-01-22 Thread Chris Lamb
[adding Dylan Aïssi to CC] Chris Lamb wrote: > > a followup patch was just published for CVE-2020-7106[0]. If you want to > > release a regression update, I'd recommend to wait a few days. > > Thanks for spotting this and for your sage advice — I have added it to my > calendar to recheck this s

Re: [SECURITY] [DLA 2069-1] cacti security update

2020-01-22 Thread Dylan Aïssi
Hi Chris, Le mer. 22 janv. 2020 à 12:11, Chris Lamb a écrit : > To prevent duplicated work, Dylan, just checking that you are either > aware of this thread and its context? It was, of course, my mistake > for not commenting and/or claiming it in dla-needed.txt. No problem, feel free to claim it

Re: [SECURITY] [DLA 2069-1] cacti security update

2020-01-22 Thread Hugo Lefeuvre
Hi Chris, > > a followup patch was just published for CVE-2020-7106[0]. If you want to > > release a regression update, I'd recommend to wait a few days. > > Thanks for spotting this and for your sage advice — I have added it to my > calendar to recheck this shortly and will investigate and follo