Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b19c2452 by Salvatore Bonaccorso at 2025-04-05T13:00:17+02:00
Track fixed version for CVE-2025-26520/cacti via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23245,7 +23245,7 @@ CVE-2024-55228 (A cross-site scripting (XSS)
vulnerability in the Product module
CVE-2024-55227 (A cross-site scripting (XSS) vulnerability in the
Events/Agenda module ...)
- dolibarr <removed>
CVE-2025-26520 (Cacti through 1.2.29 allows SQL injection in the template
function in ...)
- - cacti <unfixed> (bug #1095721)
+ - cacti 1.2.30+ds1-1 (bug #1095721)
[bookworm] - cacti <not-affected> (Vulnerable code introduced later)
[bullseye] - cacti <not-affected> (Vulnerable code introduced later)
NOTE: Proposed fix: https://github.com/Cacti/cacti/pull/6096
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b19c24525f132e4032f4a0a8d3b3ed2e81fa87e4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b19c24525f132e4032f4a0a8d3b3ed2e81fa87e4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
