Subject: [Pkg-cacti-maint] Bug#566609: marked as done (add suhosin.memory_limit in /etc/cron.d/cacti)

From: [email-masked] (Debian Bug Tracking System)
Date: Sat, 19 May 2012 10:06:18 +0000

Your message dated Sat, 19 May 2012 10:02:14 +0000
with message-id <[email-masked]>
and subject line Bug#566609: fixed in cacti 0.8.8a-2
has caused the Debian Bug report #566609,
regarding add suhosin.memory_limit in /etc/cron.d/cacti
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email-masked]
immediately.)

-- 
566609: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566609
Debian Bug Tracking System
Contact [email-masked] with problems

Subject: [cacti] Logs are filling up with suhosin alerts about cacti trying to increase memory_limit
From: David Herbert <[email-masked]>
To: [email-masked]
Date: Sun, 24 Jan 2010 03:42:13 +0000

Package: cacti
Version: 0.8.7e-1.1
Severity: normal

--- Please enter the report below this line. ---

Every five mins I'm getting the following in the logs:

Jan 24 03:30:02 turnip suhosin[7858]: ALERT - script tried to increase 
memory_limit to 268435456 bytes which is above the allowed value 
(attacker 'REMOTE_ADDR not set', file 
'/usr/share/cacti/site/poller.php', line 171)
Jan 24 03:30:02 turnip suhosin[7861]: ALERT - script tried to increase 
memory_limit to 268435456 bytes which is above the allowed value 
(attacker 'REMOTE_ADDR not set', file '/usr/share/cacti/site/cmd.php', 
line 33)

--- System information. ---
Architecture: i386
Kernel:       Linux 2.6.32-trunk-686

Debian Release: squeeze/sid
   500 testing         security.debian.org
   500 testing         ftp.uk.debian.org
   500 testing         debian-multimedia.fx-services.com

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.

Subject: Bug#566609: fixed in cacti 0.8.8a-2
From: Paul Gevers <[email-masked]>
To: [email-masked]
Date: Sat, 19 May 2012 10:02:14 +0000

Source: cacti
Source-Version: 0.8.8a-2

We believe that the bug you reported is fixed in the latest version of
cacti, which is due to be installed in the Debian FTP archive:

cacti_0.8.8a-2.debian.tar.gz
  to main/c/cacti/cacti_0.8.8a-2.debian.tar.gz
cacti_0.8.8a-2.dsc
  to main/c/cacti/cacti_0.8.8a-2.dsc
cacti_0.8.8a-2_all.deb
  to main/c/cacti/cacti_0.8.8a-2_all.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email-masked],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Paul Gevers <[email-masked]> (supplier of updated cacti package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email-masked])

Format: 1.8
Date: Sat, 19 May 2012 07:56:04 +0200
Source: cacti
Binary: cacti
Architecture: source all
Version: 0.8.8a-2
Distribution: unstable
Urgency: low
Maintainer: Cacti Maintainer <[email-masked]>
Changed-By: Paul Gevers <[email-masked]>
Description: 
 cacti      - web interface for graphing of monitoring systems
Closes: 566609
Changes: 
 cacti (0.8.8a-2) unstable; urgency=low
 .
   * Use ts to timestamp poller errors in cron when available and add moreutils
     to suggests.
   * Add suhosin.memory_limit to cron and poller (Closes: #566609)
   * Add dependency on ${perl:Depends} as the dependency on perl was missing
   * Use a template based on config.php for debian.php creation to include
     non-database options and get rid of 01_config.php.patch by creating link
     to debian.php instead. Update two dependent patches.
   * Add different sub folders to local resource in d/dirs
   * Add cacti.sql_ensure_cron_works.patch to prevent failure of crontab after
     install as the paths to rrdtool and php are not set.
   * Add cacti.sql_drop_tables_to_begin.patch patch to work around bug 665742
     where dbconfig-common does not drop the tables during reconfigure so we have
     to do it on population of the database to prevent errors.
   * Update d/copyright to include proper license info for jscalendar and
     treeview (this last one needs action). Also update Cacti's license as it
     has been GPL-2+ all along.
   * Readded debconf question option for lighttpd lost in commit 98fed9b while
     preventing the need to call for new translations. Use lower-case apache2 and
     lighttpd as package names at the same time.
   * Update 08_563955_local_data_id.patch with upstream bug number
   * Improve rra removal on purge (one higher level directory) in postrm
Checksums-Sha1: 
 71e04c2ba84a17471e8c86d456801a8cfdae9395 1322 cacti_0.8.8a-2.dsc
 8a6cf1580b8bccfca65fa8985c3f28d2eaa87f46 47083 cacti_0.8.8a-2.debian.tar.gz
 3f057d5b0f198fe0126b04af58c4fdf4ac28f293 2090584 cacti_0.8.8a-2_all.deb
Checksums-Sha256: 
 3c981350fc540f36be3ebf5ec3e84d5e88adf3d5dd99a6a7f6d15b1ec18acafd 1322 cacti_0.8.8a-2.dsc
 d9437e8e7472d79a24a7acf4c6458909086919bc9d9f31c0ebcfc753777a335c 47083 cacti_0.8.8a-2.debian.tar.gz
 7e40e6df8fd5dc77d87a4c6bfad77091e9411203a121cf0177edd5f632f16190 2090584 cacti_0.8.8a-2_all.deb
Files: 
 eefec1c26831be3b2d744b84e1a2a4b3 1322 web extra cacti_0.8.8a-2.dsc
 3127bcbfad9152367ffb5e96d1598c08 47083 web extra cacti_0.8.8a-2.debian.tar.gz
 71ca0b3663734ab60c37d9de99c84438 2090584 web extra cacti_0.8.8a-2_all.deb