[Pkg-cacti-maint] Bug#868080: CVE-2017-11163

[Paul Gevers]

Hi,

On 07/11/17 23:13, Moritz Muehlenhoff wrote:
> Package: cacti
> Severity: important
> Tags: security
> 
> This was assigned CVE-2017-11163:
> https://github.com/Cacti/cacti/issues/847

The root cause of this CVE is the same as CVE-2017-11163. Upstream is
even surprised that a new CVE is assigned to this issue, see:
https://github.com/Cacti/cacti/issues/847#issuecomment-314746041 and the
next message (cigamit is upstream, mortenstevens is a Fedora maintainer).

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20170712/9bf65a96/attachment.sig>