-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2016-c731bc5ec0 2016-05-10 11:42:35.786449 --------------------------------------------------------------------------------
Name : cacti Product : Fedora EPEL 7 Version : 0.8.8g Release : 1.el7 URL : http://www.cacti.net/ Summary : An rrd based graphing tool Description : Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven.
-------------------------------------------------------------------------------- Update Information:
- Update to 0.8.8g Release notes: http://www.cacti.net/release_notes_0_8_8g.php -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1259276 - Version of cacti in repos' is pretty old for EL6 and EL7 https://bugzilla.redhat.com/show_bug.cgi?id=1259276 [ 2 ] Bug #1082936 - CVE-2014-2327 CVE-2014-2326 CVE-2014-2328 cacti: multiple flaws reported by Deutsche Telekom [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1082936 [ 3 ] Bug #1004548 - Tree not collapsing in graph mode in version 0.8.8b https://bugzilla.redhat.com/show_bug.cgi?id=1004548 [ 4 ] Bug #1323943 - CVE-2016-3659 cacti: SQL injection vulnerability in graph_view.php [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1323943 [ 5 ] Bug #1317550 - CVE-2016-3172 cacti: SQL injection vulnerability in /cacti/tree.php [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1317550 [ 6 ] Bug #1306530 - CVE-2016-2313 cacti: authentication bypass [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1306530 [ 7 ] Bug #1295782 - CVE-2015-8604 cacti: SQL injection in graps_new.php via cg_g parameter [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1295782 [ 8 ] Bug #1291779 - CVE-2015-8369 cacti: SQL injection in graph.php [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1291779 [ 9 ] Bug #1291223 - CVE-2015-8377 cacti: SQL injection in graphs_new.php [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1291223 [ 10 ] Bug #1242868 - CVE-2015-4634 cacti: multiple SQL injection flaws fixed in Cacti 0.8.8e [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1242868 [ 11 ] Bug #1233833 - CVE-2015-4454 CVE-2015-2665 cacti: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1233833 [ 12 ] Bug #1230297 - CVE-2015-4342 cacti: SQL Injection and Location header injection from cdef id [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1230297 [ 13 ] Bug #1129764 - cacti: remote code execution and SQL injection [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1129764 [ 14 ] Bug #1121468 - cacti: cross-site scripting issues [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1121468 [ 15 ] Bug #1128298 - cacti-spine not available https://bugzilla.redhat.com/show_bug.cgi?id=1128298 [ 16 ] Bug #1123884 - %post scriptlet error on install https://bugzilla.redhat.com/show_bug.cgi?id=1123884 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update cacti' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org