Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Fedora 23 Cacti Patch: Essential SQL Injection Resolutions

fedora
Calendar Grey May 4, 2016
Dist Fedora Esm H88
Critical security patch for Cacti in Fedora 23 addresses key SQL-injection flaws. Update without delay!
- Update to 0.8.8g Release notes:

Summary

Cacti is a complete frontend to RRDTool. It stores all of the

necessary information to create graphs and populate them with

data in a MySQL database. The frontend is completely PHP

driven.

Update Information:

- Update to 0.8.8g Release notes:

Topics%20covered

Topics Covered

security advisory fedora critical sql injection software fix updates cacti

Change Log

References


[ 1 ] Bug #1310634 - cacti-0.8.8g is available https://bugzilla.redhat.com/show_bug.cgi?id=1310634 [ 2 ] Bug #1230296 - CVE-2015-4342 cacti: SQL Injection and Location header injection from cdef id [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1230296 [ 3 ] Bug #1233832 - CVE-2015-4454 CVE-2015-2665 cacti: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1233832

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update cacti' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: cacti
Product: Fedora 23
Version: 0.8.8g
Release: 1.fc23
URL:
Summary: An rrd based graphing tool

Topics%20covered

Topics Covered

security advisory fedora critical sql injection software fix updates cacti

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.