<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'> Hi there, The Cacti project provided an announcement of a CVSS 9.8 SQL injection bug against Cacti (fixed in 1.2.25). Is this being worked, and how long should I expect before a package becomes available in the Ubuntu 22.04 security stream? For now, I have disabled the functionality in question while I await a package update (and I'd like to avoid having to go with a local version of the updated package if it will be relatively soon). -c </body></html>