Subject: [Pkg-cacti-maint] cacti_1.2.2+ds1-2+deb10u4_source.changes ACCEPTED into proposed-updates->stable-new, proposed-updates

From: Debian FTP Masters <[email-masked]>
Date: Sat, 23 Jan 2021 15:47:07 +0000

Accepted:

Format: 1.8
Date: Thu, 21 Jan 2021 20:16:38 +0100
Source: cacti
Architecture: source
Version: 1.2.2+ds1-2+deb10u4
Distribution: buster
Urgency: medium
Maintainer: Cacti Maintainer <[email-masked]>
Changed-By: Paul Gevers <[email-masked]>
Closes: 979998
Changes:
 cacti (1.2.2+ds1-2+deb10u4) buster; urgency=medium
 .
   * Add 0001-Fixing-Issue-4022.patch (Closes: #979998)
     - CVE-2020-35701: SQL injection via data_debug.php
   * Add 0001-Fixing-Issue-4019.patch
     There are a few places in the current code where an attacker, once
     having gained access to the Cacti database through a SQL injection,
     could modify data in tables to possibly expose an stored XSS bug in
     Cacti.
Checksums-Sha1:
 f0651b1be15691e353695d67f8cfd818e22ab6be 2261 cacti_1.2.2+ds1-2+deb10u4.dsc
 dc06d18fa7c8dd6b75e77fe3f7ccbb88fb856fce 67920 cacti_1.2.2+ds1-2+deb10u4.debian.tar.xz
Checksums-Sha256:
 085ae645548b8a1cd6187dc725b7b0724e94b72fe5efb5de98726dfbf19a900f 2261 cacti_1.2.2+ds1-2+deb10u4.dsc
 36885c441acd4517f6ba52fb24e36803f89587ba7d26f01cc974691434d18d2a 67920 cacti_1.2.2+ds1-2+deb10u4.debian.tar.xz
Files:
 7e074c0bb8a23e0b2ad01311043933b5 2261 web optional cacti_1.2.2+ds1-2+deb10u4.dsc
 b3304f7f4acf7cb61f062dd9317d0909 67920 web optional cacti_1.2.2+ds1-2+deb10u4.debian.tar.xz

Thank you for your contribution to Debian.