Fwd: cacti security update

[Paul Gevers <elbrus@debian.org>]

Hi all,

On 5 July, I sent the attached security update to the announce list. It
seems to have never reached that list. Could somebody enlighten me and
tell me what I did wrong?

Paul

--- Begin Message ---

• To: debian-lts-announce@lists.debian.org
• Subject: cacti security update
• From: Paul Gevers <elbrus@debian.org>
• Date: Sat, 05 Jul 2014 19:18:49 +0200
• Message-id: <53B83379.6010802@debian.org>

Package        : cacti
Version        : 0.8.7g-1+squeeze4
CVE ID         : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328
                 CVE-2014-2708 CVE-2014-2709 CVE-2014-4002
Debian Bug     : 742768 743565 752573

Multiple security issues (cross-site scripting, cross-site request
forgery, SQL injections, missing input sanitising) have been found in
Cacti, a web frontend for RRDTool.

Attachment: signature.asc
Description: OpenPGP digital signature

--- End Message ---

Attachment: signature.asc
Description: OpenPGP digital signature