Date: Wed, 28 Aug 2013 10:10:52 +0200 From: Rodrigo OSORIO <rodrigo@bebik.net> To: Andrea Venturoli <ml@netfence.it> Cc: freebsd-ports@freebsd.org, sem@FreeBSD.org Subject: Re: Cacti vulnerable? Message-ID: <20130828081052.GA54712@oldfaithful.bebik.local> In-Reply-To: <521DAB7C.4000100@netfence.it> References: <521DAB7C.4000100@netfence.it>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, Not really, according to cve, releases before 0.8.8b are affected, and we have 0.8.8a. - rodrigo On 28/08/13 09:49 +0200, Andrea Venturoli wrote: > Hello. > > In ports we have Cacti 0.8.8a. > According to 0.8.8b release notes > (http://www.cacti.net/release_notes_0_8_8b.php), "multiple ... SQL > injection vulnerabilities" were fixed in that release. > Portaudit doesn't bring up any warning. > > Is the version in our port tree safe? > > bye & Thanks > av. > _______________________________________________ > freebsd-ports@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ports > To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130828081052.GA54712>