[Pkg-cacti-maint] Fwd: Re: Multiple vulnerabilities in Cacti 0.8.8a in Debian 7.1

[Paul Gevers]

On 08-08-13 11:56, Salvatore Bonaccorso wrote:
> Assuming both packages were tested, could you please upload to
> security-master? Please make sure to build the one targetting
> wheezy-security with -sa to include to orig.tar.gz (as new to the
> security.d.o archive).

Just to be sure, a regression in 0.8.8b surfaced today on the cacti-user
e-mail list [1] and Gandalf (one of the cacti maintainers) proposed a
patch [2]. I think we should include the (final) patch in the update.
What do you think?

Paul

[1] http://sourceforge.net/mailarchive/message.php?msg_id=31262707
[2] http://sourceforge.net/mailarchive/message.php?msg_id=31262712
      and probably (I have not verified that this is indeed the same):
    http://svn.cacti.net/viewvc?view=rev&revision=7408
    http://svn.cacti.net/viewvc?view=rev&revision=7409
    http://svn.cacti.net/viewvc?view=rev&revision=7413

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 551 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130808/344bb769/attachment.sig>