nagios3 3.0.2-1ubuntu1.1 source package in Ubuntu

Changelog

nagios3 (3.0.2-1ubuntu1.1) intrepid-security; urgency=low

  * SECURITY UPDATE: authorization check bypass and arbitrary command
    execution via custom form or browser addon (LP: #301542)
    - debian/patches/50_SECURITY_CVE-2008-5027.dpatch:
      - cgi/cmd.c: disallow CHANGE commands in commit_command() via new
        cmd_submitf() function.
      - cgi/cmd.c: strip semicolons in commit_command().
      - cgi/cmd.c: strip newlines in write_command_to_file().
      - added cgi/extcmd_list.c: added extcmd_get_name() used by
        cmd_submitf() to validate commands.
    - CVE-2008-5027
  * SECURITY UPDATE: Cross-site request forgery (CSRF) arbitrary command
    execution (LP: #301542)
    - debian/patches/51_SECURITY_CVE-2008-5028.dpatch: disable CMD_CHANGE
      commands in base/commands.c
    - CVE-2008-5028
  * debian/rules: do not update po tree for security updates.

 -- Marc Deslauriers <email address hidden>   Fri, 05 Dec 2008 14:15:52 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2008-12-18
Uploaded to:
Intrepid
Original maintainer:
MOTU
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
nagios3_3.0.2.orig.tar.gz 2.6 MiB 2d7eae6e8ba20a40f1fc3f57a2dd40e2f2a56e4244db453665120d5979b7d98a
nagios3_3.0.2-1ubuntu1.1.diff.gz 37.2 KiB 7a0eabf254fd4f9133a93215af19882f6276d31d961440bd2809601ef34df8a8
nagios3_3.0.2-1ubuntu1.1.dsc 1.6 KiB 34e4ec37b85afc1e80bf5f65e0ea3a713d2eb589d022f1149a95ba16486e7672

View changes file

Binary packages built by this source

nagios3: No summary available for nagios3 in ubuntu intrepid.

No description available for nagios3 in ubuntu intrepid.

nagios3-common: No summary available for nagios3-common in ubuntu intrepid.

No description available for nagios3-common in ubuntu intrepid.

nagios3-dbg: No summary available for nagios3-dbg in ubuntu intrepid.

No description available for nagios3-dbg in ubuntu intrepid.

nagios3-doc: No summary available for nagios3-doc in ubuntu intrepid.

No description available for nagios3-doc in ubuntu intrepid.