~rafaeldtinoco/ubuntu/+source/cacti:lp1863739-focal

Last commit made on 2020-02-19
Get this branch:
git clone -b lp1863739-focal https://git.launchpad.net/~rafaeldtinoco/ubuntu/+source/cacti
Only Rafael David Tinoco can upload to this branch. If you are Rafael David Tinoco please log in for upload directions.

Branch merges

Branch information

Name:
lp1863739-focal
Repository:
lp:~rafaeldtinoco/ubuntu/+source/cacti

Recent commits

17e9b54... by Rafael David Tinoco

update-maintainer

baa38d0... by Rafael David Tinoco

reconstruct-changelog

8fa880a... by Rafael David Tinoco

merge-changelogs

9f5b59a... by Rafael David Tinoco

* Dropped: Replace php-php-gettext dependency in order to fix
  translations (LP: #1844070), according to:
  - https://github.com/Cacti/cacti/issues/2508
  - https://github.com/Cacti/cacti/issues/2924
  - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851771

2d0a9a6... by Rafael David Tinoco

* Use new dbconfig "dbc_authplugin" variable to mitigate MySQL 8 issues.
  (refreshed when merging with debian 1.2.9+ds1-1)

0c19df8... by Rafael David Tinoco

* General installing instructions update for NO_AUTO_CREATE_USER.
  (refreshed when merging with debian 1.2.9+ds1-1)

57a9451... by Rafael David Tinoco

* Dropped: MySQL 8 change needs: NO_AUTO_CREATE_USER and grouping
  keyword. (merged upstream 1.2.4-212-gff6056d3)

5d9b198... by Paul Gevers

Import patches-unapplied version 1.2.9+ds1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 801e57894408a8925b5b9dbf328b40027c48f4e7

New changelog entries:
  * New upstream version 1.2.9+ds1
    CVE-2020-7106 Remote Code Execution (by privileged users) via shell
    metacharacters in the Performance Boost Debug Log field of
    poller_automation.php. (Closes: #949996)
    CVE-2020-7237 Stored XSS in data_sources.php,
    color_templates_item.php, graphs.php, graph_items.php,
    lib/api_automation.php, user_admin.php, and user_group_admin.php, as
    demonstrated by the description parameter in data_sources.php (Closes:
    #949997)

801e578... by Paul Gevers

Import patches-unapplied version 1.2.8+ds1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 09eb0e6587db562904b28c973a4d3d4311874edc

New changelog entries:
  * New upstream version 1.2.8+ds1
    CVE-2019-17357 When viewing graphs, some input variables are not
    properly checked (SQL injection possible) (Closes: #947374)
    CVE-2019-17358 When deserializating data, ensure basic sanitization
    has been performed (Closes: #947375)

09eb0e6... by Paul Gevers

Import patches-unapplied version 1.2.7+ds1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: f11a0026b85608107ac3618632237e0bb3021aba

New changelog entries:
  * New upstream version 1.2.7+ds1
    CVE-2019-16723 Security issue allows to view all graphs (Closes:
    #941036)
  * Refresh and drop patches to match upstream