Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Fedora 23: FEDORA-2016-a4b6c8e5b1 Low: Cacti Cross-Site Scripting

fedora
Calendar Grey May 4, 2016
Dist Fedora Esm H88
Pandas software patch for Fedora 22 addresses various bugs, most notably XSS vulnerabilities. Find out more.
- Update to 0.8.8g Release notes:

Summary

Cacti is a complete frontend to RRDTool. It stores all of the

necessary information to create graphs and populate them with

data in a MySQL database. The frontend is completely PHP

driven.

Update Information:

- Update to 0.8.8g Release notes:

Topics%20covered

Topics Covered

security advisory software update Fedora SQL injection cacti

Change Log

References


[ 1 ] Bug #1310634 - cacti-0.8.8g is available https://bugzilla.redhat.com/show_bug.cgi?id=1310634 [ 2 ] Bug #1230296 - CVE-2015-4342 cacti: SQL Injection and Location header injection from cdef id [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1230296 [ 3 ] Bug #1233832 - CVE-2015-4454 CVE-2015-2665 cacti: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1233832

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update cacti' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
low
Lowest
Low
Medium
High
Critical

Name: cacti
Product: Fedora 22
Version: 0.8.8g
Release: 1.fc22
URL:
Summary: An rrd based graphing tool

Topics%20covered

Topics Covered

security advisory software update Fedora SQL injection cacti

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.