[sf at sfritsch.de: [Pkg-nagios-devel] Bug#366683: CVE-2006-2162: Buffer overflow in nagios]

[sean finney]

hey ethan,

On Wed, May 10, 2006 at 11:11:26AM -0500, Ethan Galstad wrote:
> Apparently, this problem will most like only affect non-Apache web 
> servers, although I haven't verified that.  The newest Nagios branch 
> releases (1.4 and 2.3) already have the fix applied.  I have attached a 
> patch showing the diff between 1.4 and 1.3.

thanks.  i'll start up the process with the debian security team to get
a DSA out.

	sean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <https://www.monitoring-lists.org/archive/developers/attachments/20060510/dfa28bc0/attachment.sig>