[Nagios-devel] Security fixes completed

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
Guest

[Nagios-devel] Security fixes completed

Post by Guest »

Ahoy all.

A slightly fixed version of the anti-CSRF fixes just passed our QA
team. We'll be packaging this patched version of Nagios 3.0.5 and
ship to our customers later today. The patched version is available
for download at http://www.op5.se/src/nagios-3.0.5p1.tar.gz
3.0.5p1 incorporates the patches sent by Badri Pillai (fixing the
service-comment issue reported by Richard Savage), as well as a
fix for the problem reported by Olivier Beytrison. The latter was
originally fixed by Hendrik B=E4cker, but I made some minor mods to
Hendrik's original patch.

I'm hoping Ethan will pick up the patches later today and make a
proper release through the official channels, even though 3.0.5
got out just recently. Community testing will ofcourse make the
release process smoother for Ethan (hint, hint).

Big thanks to Tim Starling in particular for discovering the base
issues and reporting them discreetly.

As usual, please send any bug-reports to nagios-devel@. Thanks.

--=20
Andreas Ericsson [email protected]
OP5 AB www.op5.se
Tel: +46 8-230225 Fax: +46 8-230231





This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]
Locked