Debian alert DLA-2069-1 (cacti)

From:
             
 
"Chris Lamb" <lamby@debian.org> 
To:
             
 
debian-lts-announce@lists.debian.org 
Subject:
             
 
[SECURITY] [DLA 2069-1] cacti security update 
Date:
             
 
Sat, 18 Jan 2020 14:01:07 +0000
Message-ID:
             
 
<b9307f56-fc9f-4aab-b4f7-8a44ac66fb52@sloti26t01>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : cacti
Version        : 0.8.8b+dfsg-8+deb8u9
CVE ID         : CVE-2020-7106

It was discovered that there were a number of cross-site scripting
vulnerabilities in cacti, a web interface for monitoring systems.

For Debian 8 "Jessie", this issue has been fixed in cacti version
0.8.8b+dfsg-8+deb8u9.

We recommend that you upgrade your cacti packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl4jD4YACgkQHpU+J9Qx
Hlj/kQ//WsCueUxWFRjMD7NRqWwYPnfrigksxxjNYpfeCDYh5pPqr1/9uRGsr7nO
IAtcBpNFwdSYFbLYRhjeYweBZtrB87NePlY+ftEsnjDNGXXNoRQ901kU9M1HY7d9
RmOKKXflMcRca+YwQwaBH+2b5PHJt76fvxbT6QDXQHm1tyKb+9gxf9SXoMeZqNE2
4IWHAAOwnTaCK39I7u+mch35EyhMGSwFhFuaZxxV7Pr8aVI9VmcRD8TIlVRh1dqv
F1nRvONlIcYobUQo9Z/tqh3sF8cNmEl4ItMD9MnEWwtVhGOVu92aP6gPZkcL5o7Y
EKv2ajhuNRRszQX+7/0LlZZcdT9xIrq03vEh6H7IEvtsuS7uH8L9dHCq2yus2KfB
smEY1/Rpvuxoy3XBobErHKoTQZm8xb0eG1YVKxVpwkGzYOeRCed39IqS2VB/NPRS
OmbXDrYQHX8w/rhVPuJvywZDiL4qovlG0hfNXDIPGU5Bha6ZNQ1Xz7bmCMToqq10
bTHuOgxr6a8OAYnFLCepCUfwriQgS7L5OHabQbMpuBXJR1FBRR/7wUd2MpLnUGqF
xq2zQieFmaJx4T3u8CQHx+sbWMcSGY7yW0VKUZgoYzhqLqUDrj4QapZ6vIjD1dyR
cxemB2nKEzFp4qbjDh9EALXJ0nLotrA0lKzE5sRyRLCj3Fk2Qqc=
=YPxh
-----END PGP SIGNATURE-----