[packages/cacti] up to 0.8.8g; fixes CVE-2015-8604, CVE-2015-8377

glen glen at pld-linux.org
Thu Feb 25 22:04:40 CET 2016


commit 773e0c1cb1211b3e91f0bc7b5de9e6b5fde97b28
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Thu Feb 25 23:03:41 2016 +0200

    up to 0.8.8g; fixes CVE-2015-8604, CVE-2015-8377
    
    - bug:0002652: CVE-2015-8604: SQL injection in graphs_new.php
    - bug:0002655: CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php

 cacti.spec | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/cacti.spec b/cacti.spec
index 2c757cc..576bac4 100644
--- a/cacti.spec
+++ b/cacti.spec
@@ -4,12 +4,12 @@
 Summary:	Cacti is a PHP frontend for rrdtool
 Summary(pl.UTF-8):	Cacti - frontend w PHP do rrdtoola
 Name:		cacti
-Version:	0.8.8f
+Version:	0.8.8g
 Release:	1
 License:	GPL v2
 Group:		Applications/WWW
 Source0:	http://www.cacti.net/downloads/%{name}-%{version}.tar.gz
-# Source0-md5:	8d90642b362f80c46c489c5531e2ba90
+# Source0-md5:	75f660d54152182e1dbbf0db73143098
 Source2:	%{name}.crontab
 Source3:	%{name}-apache.conf
 Source4:	%{name}-lighttpd.conf
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/cacti.git/commitdiff/773e0c1cb1211b3e91f0bc7b5de9e6b5fde97b28



More information about the pld-cvs-commit mailing list