• [SECURITY] [DSA 2616-1] nagios3 security update

    From Jonathan Wiltshire@1:229/2 to All on Sun Feb 3 22:30:02 2013
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : nagios3
    Vulnerability : buffer overflow in CGI scripts
    Problem type : remote
    Debian-specific: no
    CVE ID : CVE-2012-6096
    Debian Bug : 697930

    A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A mailicious client could craft a
    request to history.cgi and cause application crashes.

    For the stable distribution (squeeze), this problem has been fixed in
    version 3.2.1-2+squeeze1.

    For the testing distribution (wheezy), this problem will be fixed soon.

    For the unstable distribution (sid), this problem has been fixed in
    version 3.4.1-3.

    We recommend that you upgrade your nagios3 packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.12 (GNU/Linux)

    iEYEARECAAYFAlEO1QcACgkQXm3vHE4uylrsgwCbB0GyudF6mJRK8N5kcwkHgPkg FMQAoJUXfSiafFspHOhS4pYr4Hnf8Quj
    =78J1
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)