Accepted nagios-plugins 1.4.2-5ubuntu3.1 (source)
Ubuntu Installer
archive at ubuntu.com
Mon Oct 22 18:55:29 BST 2007
Accepted:
OK: nagios-plugins_1.4.2.orig.tar.gz
OK: nagios-plugins_1.4.2-5ubuntu3.1.diff.gz
OK: nagios-plugins_1.4.2-5ubuntu3.1.dsc
-> Component: main Section: net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 17 Oct 2007 17:47:39 -0400
Source: nagios-plugins
Binary: nagios-plugins nagios-plugins-basic nagios-plugins-standard
Architecture: source
Version: 1.4.2-5ubuntu3.1
Distribution: dapper-security
Urgency: low
Maintainer: Jamie Strandboge <jamie at ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
nagios-plugins - Plugins for the nagios network monitoring and management system
nagios-plugins-basic - Plugins for the nagios network monitoring and management system
nagios-plugins-standard - Plugins for the nagios network monitoring and management system
Changes:
nagios-plugins (1.4.2-5ubuntu3.1) dapper-security; urgency=low
.
* SECURITY UPDATE: denial of service via multiple redirects
* debian/patches/23_SECURITY_LP153703.dpatch: fix off-by-one error to
re-allocate the proper amount of memory in redir()
* SECURITY UPDATE: denial of service and possible arbitrary code execution
as the user in check_http.c via crafted Location Header
* debian/patches/24_SECURITY_CVE-2007-5198.dpatch: properly validate
Location header in redir(). Thanks to Luca Falavigna for preliminary
patches.
* References
LP: #153703
CVE-2007-5198
LP: #152624
Files:
a0c28730ba822bef978cf7428447320a 1054 net extra nagios-plugins_1.4.2-5ubuntu3.1.dsc
2ce232319f1412bd31218e4f80f379aa 40038 net extra nagios-plugins_1.4.2-5ubuntu3.1.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHF8RgH/9LqRcGPm0RAglRAJ9o2V7SoA8n4fOMNAgcv5cI6mQZjQCgjYto
u0I9IYdzS/4t/KR4yTS9BD8=
=auKX
-----END PGP SIGNATURE-----
More information about the dapper-changes
mailing list