Page 1 of 1

Vulnerability CVE-2016-9566

Posted: Tue Dec 20, 2016 10:34 am
by glb
Hi,

I've seen that vulnerability CVE-2016-9566 has been patched on Nagios Core version 4.2.4. Has the fix been applied to Nagios XI even though, according to the Nagios XI 5 changes page, it's still using Nagios Core 4.1.1?

Regards,

Guillaume Lorrain-Bélanger

Re: Vulnerability CVE-2016-9566

Posted: Tue Dec 20, 2016 10:38 am
by dwhitfield
No, but it will be in 5.4. You are definitely not the first person to ask about this. It is a very high priority for our development team. Unfortunately, I cannot give you an ETA at this time.

Re: Vulnerability CVE-2016-9566

Posted: Tue Dec 20, 2016 10:43 am
by glb
Ok, thanks!

Guillaume

Re: Vulnerability CVE-2016-9566

Posted: Tue Dec 20, 2016 10:54 am
by dwhitfield
You're welcome. Ok for us to go ahead and lock this up?

Re: Vulnerability CVE-2016-9566

Posted: Tue Dec 20, 2016 10:55 am
by glb
Yes