A cacti, cacti-spine security update has been released for openSUSE Leap 15.1 and SUSE Linux Enterprise 12.

security-announce: openSUSE-SU-2020:0558-1: important: Security update for cacti, cacti-spine

openSUSE Security Update: Security update for cacti, cacti-spine
______________________________________________________________________________

Announcement ID: openSUSE-SU-2020:0558-1
Rating: important
References: #1082318 #1122242 #1122243 #1122244 #1122245
#1122535 #1158990 #1158992 #1161297 #1164675
#1169215
Cross-References: CVE-2009-4112 CVE-2018-20723 CVE-2018-20724
CVE-2018-20725 CVE-2018-20726 CVE-2019-16723
CVE-2019-17357 CVE-2019-17358 CVE-2020-7106
CVE-2020-7237 CVE-2020-8813
Affected Products:
openSUSE Leap 15.1
SUSE Package Hub for SUSE Linux Enterprise 12
______________________________________________________________________________

An update that fixes 11 vulnerabilities is now available.

Description:

This update for cacti, cacti-spine to version 1.2.11 fixes the following
issues:

This update is fixing multiple vulnerabilities and adding bug fixes. For
more details consult the changes file.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-558=1

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2020-558=1


Package List:

- openSUSE Leap 15.1 (noarch):

cacti-1.2.11-lp151.3.6.1

- openSUSE Leap 15.1 (x86_64):

cacti-spine-1.2.11-lp151.3.6.1
cacti-spine-debuginfo-1.2.11-lp151.3.6.1
cacti-spine-debugsource-1.2.11-lp151.3.6.1

- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64):

cacti-spine-1.2.11-2.1

- SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):

cacti-spine-debuginfo-1.2.11-2.1
cacti-spine-debugsource-1.2.11-2.1

- SUSE Package Hub for SUSE Linux Enterprise 12 (noarch):

cacti-1.2.11-5.1

References:

  https://www.suse.com/security/cve/CVE-2009-4112.html
  https://www.suse.com/security/cve/CVE-2018-20723.html
  https://www.suse.com/security/cve/CVE-2018-20724.html
  https://www.suse.com/security/cve/CVE-2018-20725.html
  https://www.suse.com/security/cve/CVE-2018-20726.html
  https://www.suse.com/security/cve/CVE-2019-16723.html
  https://www.suse.com/security/cve/CVE-2019-17357.html
  https://www.suse.com/security/cve/CVE-2019-17358.html
  https://www.suse.com/security/cve/CVE-2020-7106.html
  https://www.suse.com/security/cve/CVE-2020-7237.html
  https://www.suse.com/security/cve/CVE-2020-8813.html
  https://bugzilla.suse.com/1082318
  https://bugzilla.suse.com/1122242
  https://bugzilla.suse.com/1122243
  https://bugzilla.suse.com/1122244
  https://bugzilla.suse.com/1122245
  https://bugzilla.suse.com/1122535
  https://bugzilla.suse.com/1158990
  https://bugzilla.suse.com/1158992
  https://bugzilla.suse.com/1161297
  https://bugzilla.suse.com/1164675
  https://bugzilla.suse.com/1169215