From ftpmaster at ftp-master.debian.org  Sun Sep  1 21:17:05 2013
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 01 Sep 2013 21:17:05 +0000
Subject: [Pkg-cacti-maint] cacti_0.8.8a+dfsg-5+deb7u2_amd64.changes ACCEPTED
	into proposed-updates->stable-new, proposed-updates
Message-ID: <E1VGF17-0005ru-24@franck.debian.org>



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 28 Aug 2013 21:12:50 +0200
Source: cacti
Binary: cacti
Architecture: source all
Version: 0.8.8a+dfsg-5+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Cacti Maintainer <pkg-cacti-maint at lists.alioth.debian.org>
Changed-By: Paul Gevers <elbrus at debian.org>
Description: 
 cacti      - web interface for graphing of monitoring systems
Changes: 
 cacti (0.8.8a+dfsg-5+deb7u2) wheezy-security; urgency=high
 .
   * Security upload
   * Fix Cross site scripting in host.php and install/index.php (upstream
     bug 2383) CVE-2013-5588
   * Fix SQL injection in host.php (upstream bug 2383)
     CVE-2013-5589
Checksums-Sha1: 
 1064a43dd4ae4c7664fc6e7e50e45b090d2a05e3 1683 cacti_0.8.8a+dfsg-5+deb7u2.dsc
 e690917a79840ddc1ec80d29fb73d55faaa4c191 110696 cacti_0.8.8a+dfsg-5+deb7u2.debian.tar.gz
 e5a916f4be0b25e2fc2afe3a60ca94e2a6389cc8 2141482 cacti_0.8.8a+dfsg-5+deb7u2_all.deb
Checksums-Sha256: 
 c53fcc206bf1a149ad2df89bd475fd04bae34563569d81ec705b1e1a47fa80bc 1683 cacti_0.8.8a+dfsg-5+deb7u2.dsc
 5e14dff9790f67b3e4b88b8c590986eea07a0c7280f909726da0ea418e5b0eb5 110696 cacti_0.8.8a+dfsg-5+deb7u2.debian.tar.gz
 3d63054d8fa0c3347e07d8a5d9ff643e035281db9e48c0d459bd7bec970e7606 2141482 cacti_0.8.8a+dfsg-5+deb7u2_all.deb
Files: 
 3e24319255ac0ecc5ebcb81de8b02afb 1683 web extra cacti_0.8.8a+dfsg-5+deb7u2.dsc
 542d68b32a98054d6f574504cb04bcfd 110696 web extra cacti_0.8.8a+dfsg-5+deb7u2.debian.tar.gz
 ac724a3fd505964ed820ac64bb5766e6 2141482 web extra cacti_0.8.8a+dfsg-5+deb7u2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJSIDvuAAoJEJxcmesFvXUKSb0IAKc9FUEM5aS2sVp4v350gbG6
HZZPQ61k7QgdX0lwnEVdvifghcXsrZmQtUd3g7rpsWNUhTmlaK2QmZDLQlRw7yAb
k08yBFlr1kBj85ySNb7gLZNLl2vRRFmHzHHzEFSQ8RFLZC7fQlu5fQyQr9cKY/eB
smg2q70aC5rUO+UJ5QBKi7VqrkBnlTYsAQj7LL3mrKQ/xcaaNi3FlDjES3mvFHwt
5Wg/AdHzYQ4aFkgZxiLyXvGsKHg6Iy/6Wx+bhf60YJQumkxiDQIA3twboWlgfROj
BBc5eMusApxIAuWHDzEc9ini0QrPh/S874KUQO2q68F0x0ZLKbM2iwF/dIMARwU=
=7473
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.


From councelor at cantv.net  Fri Sep  6 09:44:52 2013
From: councelor at cantv.net (Mrs.Anita Jones)
Date: Fri, 6 Sep 2013 05:14:52 -0430 (VET)
Subject: [Pkg-cacti-maint] Western Union Money Transfer
Message-ID: <1620760082.504479.1378460692783.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>

An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130906/9f19c144/attachment.html>

From noreply at release.debian.org  Sat Sep  7 16:39:22 2013
From: noreply at release.debian.org (Debian testing watch)
Date: Sat, 07 Sep 2013 16:39:22 +0000
Subject: [Pkg-cacti-maint] cacti 0.8.8b+dfsg-3 MIGRATED to testing
Message-ID: <E1VILXe-0004Uj-3I@franck.debian.org>

FYI: The status of the cacti source package
in Debian's testing distribution has changed.

  Previous version: 0.8.8b+dfsg-2
  Current version:  0.8.8b+dfsg-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.


From jeff.armstrong at aquabolt.com  Sat Sep 14 08:44:25 2013
From: jeff.armstrong at aquabolt.com (Jeff Armstrong)
Date: Sat, 14 Sep 2013 09:44:25 +0100
Subject: [Pkg-cacti-maint] Bug#722889: cacti creates excessive logging about
	missing file - dependency needs fixing
Message-ID: <523421E9.6020908@aquabolt.com>

Package: cacti
Version: 0.8.8a+dfsg-5+deb7u2

Cacti fills up system logs with the following error every minute for 
every graph:

[Sat Sep 14 09:22:00 2013] [error] [client 192.168.100.63] File does not exist: /usr/share/javascript/jquery-cookie, referer:http://cacti.xxx.com/graph.php?local_graph_id=8&rra_id=all
[Sat Sep 14 09:22:01 2013] [error] [client 192.168.100.63] File does not exist: /usr/share/javascript/jquery-cookie, referer:http://cacti.xxx.com/graph.php?local_graph_id=8&rra_id=all


I suggest that the optional dependency on libjs-jquery-cookie be 
upgraded to a prerequisite.


Regards

Jeff


From owner at bugs.debian.org  Sat Sep 14 10:06:05 2013
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 14 Sep 2013 10:06:05 +0000
Subject: [Pkg-cacti-maint] Bug#722889: marked as done (cacti creates
 excessive logging about missing file - dependency needs fixing)
References: <52343467.2060808@debian.org> <523421E9.6020908@aquabolt.com>
Message-ID: <handler.722889.D722889.137915301318283.ackdone@bugs.debian.org>

Your message dated Sat, 14 Sep 2013 12:03:19 +0200
with message-id <52343467.2060808 at debian.org>
and subject line Re: Bug#722889: cacti creates excessive logging about missing file - dependency needs fixing
has caused the Debian Bug report #722889,
regarding cacti creates excessive logging about missing file - dependency needs fixing
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
722889: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722889
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Jeff Armstrong <jeff.armstrong at aquabolt.com>
Subject: cacti creates excessive logging about missing file - dependency needs fixing
Date: Sat, 14 Sep 2013 09:44:25 +0100
Size: 2052
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130914/978c0c43/attachment.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Paul Gevers <elbrus at debian.org>
Subject: Re: Bug#722889: cacti creates excessive logging about missing file - dependency needs fixing
Date: Sat, 14 Sep 2013 12:03:19 +0200
Size: 3550
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130914/978c0c43/attachment-0001.mht>

From jeff.armstrong at aquabolt.com  Sun Sep 15 09:35:43 2013
From: jeff.armstrong at aquabolt.com (Jeff Armstrong)
Date: Sun, 15 Sep 2013 10:35:43 +0100
Subject: [Pkg-cacti-maint] Bug#722889: closed by Paul Gevers
	<elbrus@debian.org> (Re: Bug#722889: cacti creates excessive
	logging about missing file - dependency needs fixing)
In-Reply-To: <handler.722889.D722889.137915301318283.notifdone@bugs.debian.org>
References: <52343467.2060808@debian.org> <523421E9.6020908@aquabolt.com>
 <handler.722889.D722889.137915301318283.notifdone@bugs.debian.org>
Message-ID: <52357F6F.6060803@aquabolt.com>

Just to be clear - your note indicates that the problem has been solved 
in upstream,

but has the issue been resolved in the wheezy version?

Given that the next stable debian is probably a couple of years away, 
filling up root on single volume [v]hosts regularly is not sysops 
friendly for a stable distro.


On 14/09/2013 11:06, Debian Bug Tracking System wrote:
> This is an automatic notification regarding your Bug report
> which was filed against the cacti package:
>
> #722889: cacti creates excessive logging about missing file - dependency needs fixing
>
> It has been closed by Paul Gevers <elbrus at debian.org>.
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Paul Gevers <elbrus at debian.org> by
> replying to this email.
>
>


From elbrus at debian.org  Sun Sep 15 10:25:50 2013
From: elbrus at debian.org (Paul Gevers)
Date: Sun, 15 Sep 2013 12:25:50 +0200
Subject: [Pkg-cacti-maint] Bug#722889: cacti creates excessive logging about
	missing file - dependency needs fixing
In-Reply-To: <52357F6F.6060803@aquabolt.com>
References: <52343467.2060808@debian.org> <523421E9.6020908@aquabolt.com>
 <handler.722889.D722889.137915301318283.notifdone@bugs.debian.org>
 <52357F6F.6060803@aquabolt.com>
Message-ID: <52358B2E.7060704@debian.org>

On 15-09-13 11:35, Jeff Armstrong wrote:
> Just to be clear - your note indicates that the problem has been solved
> in upstream,

Not upstream, but in Debian, in a version of the packaging, so it is now
available in testing.

> but has the issue been resolved in the wheezy version?

No.

> Given that the next stable debian is probably a couple of years away,
> filling up root on single volume [v]hosts regularly is not sysops
> friendly for a stable distro.

But unfortunately, I am unsure if this warrants a stable-release-update.
Especially since a "solution" is to just install an additional package.
Quoting from the developers-reference [1]:
"""
Basically, a package should only be uploaded to stable if one of the
following happens:

    a truly critical functionality problem

    the package becomes uninstallable

    a released architecture lacks the package
"""
You *might* argue that the first is the case, but you must be having a
lot of people viewing the cacti pages for it to fill up your volumes
and/or small volumes.

I could prepare a stable-release-update proposal, and we could see if
the release team allows this change to be incorporated in the next
stable point release. What do you think?

[1]
http://www.debian.org/doc/manuals/developers-reference/pkgs.html#upload-stable



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 551 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130915/50e7e3ed/attachment.sig>

From ad at arenabonus.com  Sun Sep 22 12:32:27 2013
From: ad at arenabonus.com (=?utf-8?Q?Detoxikujte_jednodu=C5=A1e?=)
Date: Sun, 22 Sep 2013 12:32:27 +0000
Subject: [Pkg-cacti-maint] =?utf-8?b?SHVibsSbdGUgemRyYXbEmywgYmV6IHphdMOt?=
 =?utf-8?b?xb5lbsOtIHN2w6lobyBvcmdhbmlzbXUh?=
Message-ID: <a8427669e055915fedb8aa72aae1109d@arenabonus.com>

Detoxikujte jednodu?e!
===================================================

M?te pomal? metabolismus, chcete zhubnout?
Hubn?te zdrav?, bez zat??en? sv?ho
organismu!

P?eni?n? tr?va je je jednou z
nejv??ivn?j??ch potravin na sv?t?, s
l??ebnou schopnost?, obsahuje velk? mno?stv?
aktivn?ch miner?ln?ch l?tek, krom? toho
mno?stv? b?lkovin, vitam?n? a stopov?ch
prvk?. P??zniv? ??inky p?i l??b?
rakoviny, detoxika?n? a ostatn? p??zniv?
??inky jsou klinicky uzn?v?ny. Enzymy v n?
obsa?en? maj? vliv na samol??ebnou schopnost
organismu, obnovuj? metabolismus. Zhubn?te
zdrav? se ???vou z p?eni?n? tr?vy! 

Objednejte te?:
http://vitalgrass.com/cz


===================================================

Pokud nechcete dost?vat dal?? emaily, tu se
m??ete odhl?sit:
http://edmbonus.com/unsub?l=cz&sid=3a25bd9cdce52712c69718571379853147&cid=1ff1de774005f8da1241379853147

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-cacti-maint/attachments/20130922/d70a45a5/attachment.html>

From chris.colin at aim.com  Mon Sep 30 06:25:04 2013
From: chris.colin at aim.com (Chris Colin  <chris.colin@aim.com>)
Date: Mon, 30 Sep 2013 06:25:04
Subject: [Pkg-cacti-maint] Acknownledge This Email ......,
Message-ID: <mailman.131.1380534298.3992.pkg-cacti-maint@lists.alioth.debian.org>

Hi,

    i have something that will benefit you.If interested email back at ( chris.colin at aim.com )

Greetings



