-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

New versions of Nagios 2.x and 3.x have been released and can be
downloaded from:

        http://www.nagios.org/download

Nagios 3.0.2 and 2.12 contain a fix for a potential XSS vulnerability in
the CGIs.  Nagios 3.0.2 also contains a number of fixes for bugs present
in the 3.0.1 release.

Changelogs for both releases are below...


3.0.2 - 05/19/2008
- ------------------
* Minor bug fixes in CGIs to ensure extra host/servicegroup url strings
are terminated properly
* Minor bug fix in navigation frame link for unhandled service problems
* Better error logging during fork() errors
* Embedded Perl is now disabled by default
* Fixed bug in parsing host dependencies
* Added note to Makefile about 'make install-webconf' option
* Fixed bug in config CGI where active host check attributes were not
displayed properly
* Fixed bug in status CGI where sounds were not played for passive
service problems
* Fixed sample script for distributed monitoring
* Updated p1.pl to allow for 4KB lines in Perl plugin output under epn
* Fixed bug in command for disabling contact notifications
* Fix for bugs in host and service orphan check logic
* Fix for 'make install' functionality for contrib directory
* Fix for host problem links in CGI status summary view
* Fix for properly escaping macros containing URLs
* Patches for possible XSS vulnerability in CGIs (CVE-2007-5803) -
Florian Weimer & SUSE Linux team



2.12 - 05/19/2008
- -----------------
* Minor bug fixes in CGIs to ensure extra host/servicegroup url strings
are terminated properly
* Patches for possible XSS vulnerability in CGIs (CVE-2007-5803) -
Florian Weimer & SUSE Linux team




- --
[EMAIL PROTECTED]               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

        A: Yes.
        >Q: Are you sure?
        >>A: Because it reverses the logical flow of conversation.
        >>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFINF2eBvzDRVjxmYERAvAdAKCoCeNmBC+YkGXtm5trimJZkV6kDQCfW4zO
fQXKG4tF7lZL3PqOWn27cjE=
=7NkX
-----END PGP SIGNATURE-----
_______________________________________________
users mailing list
[email protected]
http://lists.rpmforge.net/mailman/listinfo/users

Reply via email to