Public bug reported:
Since the last uploads in security upload in Trusty and the last upload
in Xenial, multiple CVE's have been reported against cacti.
Please upload the attached debdiff's to fix all open issues in Trusty
and Xenial. Because the state in Debian's LTS Wheezy is similar to
Trusty, I applied all the changes since the last common change-set. For
Xenial, I based the changes on Jessie's stable uploads.
To be perfectly clear, I did verify that all the patches apply cleanly
(and build cleanly on debomatic, although that doesn't say much for a
php package), but I haven't verified functionality as I could bring
myself to do that for Ubuntu (I already did that too often for the
Debian packages). But because this all is php and the patches are
already exposed in Debian for an extremely long time, I don't see much
risk (please judge yourself though).
** Affects: cacti (Ubuntu)
Importance: Undecided
Status: New
** Affects: cacti (Ubuntu Trusty)
Importance: Undecided
Status: New
** Affects: cacti (Ubuntu Xenial)
Importance: Undecided
Status: New
** Tags: security trusty xenial
** Patch added: "Debdiff for trusty"
https://bugs.launchpad.net/bugs/1663891/+attachment/4817011/+files/cacti_trusty-security.debdiff
** Also affects: cacti (Ubuntu Xenial)
Importance: Undecided
Status: New
** Also affects: cacti (Ubuntu Trusty)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1663891
Title:
Security uploads for cacti (trusty and xenial)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/1663891/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs