Hugo Lefeuvre pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f10ec44b by Hugo Lefeuvre at 2019-12-30T10:09:07Z
CVE-2019-17357/cacti: stretch not-affected
0.8.8h does sanitize template_id, the check was removed later.
see #947374 for more information.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14708,6 +14708,7 @@ CVE-2019-17358 (Cacti through 1.2.7 is affected by
multiple instances of lib/fun
CVE-2019-17357
RESERVED
- cacti 1.2.8+ds1-1 (bug #947374)
+ [stretch] - cacti <not-affected> (Vulnerable code not present)
[jessie] - cacti <not-affected> (Vulnerable code not present)
NOTE: https://github.com/Cacti/cacti/issues/3025
NOTE:
https://github.com/Cacti/cacti/commit/d6dc48503bbcde0717e7a93df7638fd4796200f4
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f10ec44bf4986b539888523bbb46dc9169dc3253
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f10ec44bf4986b539888523bbb46dc9169dc3253
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
