CVE-2015-8369 and 0.8.8g release

Christian Rebischke <[email protected]> Wed, 23 Dec 2015 16:25:39 +0100

Newsgroups	gmane.network.cacti.user
Message-ID	<20151223152523.GA2509@trudy>

hello everyone,
I have a question. Do you have a patch for the CVE-2015-8369 for cacti in
version 0.8.8f? I checked out your SVN repository and generated the
following patch: https://paste.archlinux.de/yPT/ 
My problem is that this patch has been generated via diff between r7766 and
r7767 so It will not work when I apply it to our cacti version (0.8.8f) in
our official archlinux repositories, because the difference between 0.8.8f
and your patch is too far.

My second question is:" When do you release cacti-0.8.8g? And does this
release include the patch for CVE-2015-8369?" 

In your SVN log it looks like that the patch is not part of your 0.8.8g
release.


Thank you very much for your work :)

best regards

--------------------------------------------------------------
Christian Rebischke
Member of Arch Linux Security Team

Website    : www.nullday.de
Twitter    : @sh1bumi
Jabber     : [email protected]
PGP        : 0xDFE2060D
Fingerprint: 6DAF 7B80 8F9D F251 3962 0000 D214 61E3 DFE2 060D
--------------------------------------------------------------

------------------------------------------------------------------------------

_______________________________________________
cacti-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cacti-user

signature.asc (application/pgp-signature, 819 B)