Security Notes

php-gettext

1. In Cacti:
   • Reported issues: https://github.com/Cacti/cacti/issues/2508
   • File Location: https://github.com/Cacti/cacti/tree/develop/include/vendor/phpgettext
   • Patched on 1.0.12:
     • https://bugs.launchpad.net/php-gettext/+bug/1522900 / http://bugs.debian.org/830699
     • https://github.com/Cacti/cacti/issues/3163
2. Old Repo(1.0.8 until Nov 2009):
   • Web: https://savannah.nongnu.org/projects/php-gettext/
   • cvs -z3 -d:pserver:anonymous@cvs.savannah.nongnu.org:/web/php-gettext co php-gettext
3. Original Repo(1.0.12 until Nov, 2015):
   • Web: https://launchpad.net/php-gettext
   • bzr branch lp:php-gettext
4. Modified Repo(1.0.12-6 until Feb, 2024), included two CVE fixing: CVE-2015-8980, CVE-2016-6175
   • Web: https://launchpad.net/ubuntu/+source/php-gettext
   • git clone https://git.launchpad.net/ubuntu/+source/php-gettext
   • Download/Install-able from Ubuntu pool universe channel
5. Another topic for CVE-2016-6175:
   • Bug Report: https://bugs.launchpad.net/php-gettext/+bug/1606184
   • Fixing: https://github.com/NagVis/nagvis/commit/4fe8672a5aec3467da72b5852ca6d283c15adb53

phpmailer

1. In Cacti: *

phpseclib

(PHP)GetText/Language

• PHP 8.1, Revert 5.6.1: https://github.com/Cacti/cacti/issues/4521

phpsnmp