Thanks for the debdiff Brian. There seems to be parts missing from the 2010-254* patch...AFAICT, the upstream commits are:
http://svn.cacti.net/viewvc?view=rev&revision=6025 http://svn.cacti.net/viewvc?view=rev&revision=6037 http://svn.cacti.net/viewvc?view=rev&revision=6038 http://svn.cacti.net/viewvc?view=rev&revision=6041 http://svn.cacti.net/viewvc?view=rev&revision=6042 Could you check, and update the patch if necessary? Also, you should add Origin tags to your patches in the future so they are easier to retrace to the upstream commits, for example: Origin: upstream, http://svn.cacti.net/viewvc?view=rev&revision=6025 or Origin: backport, http://svn.cacti.net/viewvc?view=rev&revision=6025 I'm unsubscribing ubuntu-security-sponsors for now. Please re-subscribe ubuntu-security-sponsors when you update debdiff, and set the status to "NEW". Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. https://bugs.launchpad.net/bugs/599892 Title: [Security] cacti - CVE-2009-4032, CVE-2010-1431, and CVE-2010-2092 -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
