Accepted cacti 1.1.38+ds1-1~bpo9+1 (source) into stretch-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 26 Apr 2018 13:25:27 +0200
Source: cacti
Binary: cacti
Architecture: source
Version: 1.1.38+ds1-1~bpo9+1
Distribution: stretch-backports
Urgency: medium
Maintainer: Cacti Maintainer <pkg-cacti-maint@lists.alioth.debian.org>
Changed-By: Paul Gevers <elbrus@debian.org>
Description:
cacti - web interface for graphing of monitoring systems
Changes:
cacti (1.1.38+ds1-1~bpo9+1) stretch-backports; urgency=medium
.
* Rebuild for stretch-backports.
.
cacti (1.1.38+ds1-1) unstable; urgency=medium
.
* New upstream release 1.1.38
* [tests] Remove mysql-server test as it isn't available in testing
.
cacti (1.1.37+ds1-1) unstable; urgency=medium
.
* New upstream release 1.1.37
* CVE-2018-10059: (XSS) the get_current_page function in
lib/functions.php relies on $_SERVER['PHP_SELF'] instead of
$_SERVER['SCRIPT_NAME'] to determine a page name
* CVE-2018-10060: (XSS) does not properly reject unintended characters,
related to use of the sanitize_uri function in lib/functions.php
* CVE-2018-10061: (XSS) makes certain htmlspecialchars calls without the
ENT_QUOTES flag
Checksums-Sha1:
0331e0b19928ed9f8f6e68fe071553faac0a5eb9 2174 cacti_1.1.38+ds1-1~bpo9+1.dsc
2196c87c820524b08c0a212a52fb65fad5faab24 52160 cacti_1.1.38+ds1-1~bpo9+1.debian.tar.xz
Checksums-Sha256:
7be8c8599471eb0cfe264f85ae209d74caebcee63e63ff14ad3c7f17c9077605 2174 cacti_1.1.38+ds1-1~bpo9+1.dsc
afe89b85c62cf4b0402dc7df144287ec38f82fecf041cdeca8240f417f56dfb1 52160 cacti_1.1.38+ds1-1~bpo9+1.debian.tar.xz
Files:
a6a07af359eee8230745a65382d92bb3 2174 web optional cacti_1.1.38+ds1-1~bpo9+1.dsc
e386bbb7d8921a56042343ed210fccc0 52160 web optional cacti_1.1.38+ds1-1~bpo9+1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAlrht08ACgkQnFyZ6wW9
dQqzGwf9GIdMqto1l1IT34COQ5o/EzoDH0FOFO62T4DS4QAg9uhClN4BbXEWNYfF
tDH4c5HsGFK/iQyADLU2wvT9je64dk7EVO3fTq+8JGendV4Xn1/Ne5OyVvfr4OX6
3JOSahlhIJS/j5SF8bxCKXwveIGHWV3q/x/foZRshTsc0S0z/BeZQ7q3Lz0q7c4z
/vjcQ1Z3t3t5gmcZIX54uxTejOtAgc5aFDEsyhw4FGHQp2AOZKusmCWyy49feOZe
Nfd9Lyx3usncSGXmlWBj6vkxAMa/Wcc19A4WcOTRtnLnL9TPNQyFgOv88vtSxFDA
6Ep5klBsnUyTYDd0ld6G1Bc1ajgEwA==
=6aI9
-----END PGP SIGNATURE-----
Reply to: