Oh dear, that's correct. Stephan apparently marked this Dapper task Invalid, when he thought it was another bug... Stephan, could you please provide a debdiff for Dapper when you have time?
No releases other than Dapper should remain affected. ** Changed in: cacti (Ubuntu Dapper) Status: Invalid => Confirmed -- [CVE-2007-6035] cacti has a sql injection vulnerability https://bugs.launchpad.net/bugs/164072 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs