Login
Newsletter
Werbung

Sicherheit: Zwei Probleme in PNP4Nagios
Aktuelle Meldungen Distributionen
Name: Zwei Probleme in PNP4Nagios
ID: FEDORA-2014-8098
Distribution: Fedora
Plattformen: Fedora 20
Datum: Mo, 14. Juli 2014, 07:03
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4907
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4908
Applikationen: PNP4Nagios

Originalnachricht

Name        : pnp4nagios
Product : Fedora 20
Version : 0.6.22
Release : 2.fc20
URL : http://www.pnp4nagios.org/
Summary : Nagios performance data analysis tool
Description :
PNP is an addon to nagios which analyzes performance data provided by plugins
and stores them automatically into RRD-databases.

-------------------------------------------------------------------------------
-
Update Information:

Fix three URL Cross-Site Scripting Vulnerabilities.
Update to upstream (fixes XSS flaw in an error page)
Update to upstream (fixes XSS flaw in an error page)
-------------------------------------------------------------------------------
-
ChangeLog:

* Fri Jul 4 2014 Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.22-2
- Fix two URL Cross-Site Scripting Vulnerabilities (bz#1115983)
* Thu Jul 3 2014 Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.22-1
- Update to upstream (fixes XSS flaw in an error page - bz#1115770)
* Sat Jun 7 2014 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 0.6.21-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1115983 - CVE-2014-4908 pnp4nagios: Two URL Cross-Site Scripting
Vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=1115983
[ 2 ] Bug #1115770 - CVE-2014-4907 pnp4nagios: cross-site scripting flaw in
an error page
https://bugzilla.redhat.com/show_bug.cgi?id=1115770
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update pnp4nagios' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung