fix request

[Alexander Wirt]

Christian Schneemann schrieb am Thursday, den 13. August 2009:

> On Wednesday August 12 2009 08:05:54 pm Roy Sigurd Karlsbakk wrote:
> > hi
> >
> > the nagios/cgi-bin/statuswml.cgi?ping=1%3Bcat+%2Fetc%2Fpasswd bug
> > isn't fixed in nagios 3.0. Will that be done, or must I upgrade to 3.1?
> Hi,
> I had to extract the fix for our openSUSE 11.1 package, it is not a big patch 
> and just the statuswml.c is affected.
> 
> If you're running a openSUSE or a SLES you should already got a patched 
> version, don't know for other distributions, but I think so too.
> 
> If you have installed from source, poor you ;)
> 
> I can send you the patch off list if you want. Or you make a diff of 
> statuswml.c of a fixed version and the 3.0.6.
The bug is also fixed in Debian. See my patch here: 
http://svn.debian.org/wsvn/pkg-nagios/nagios3/trunk/debian/patches/95_security_statuswml_SA35543.dpatch

Alex


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july