[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 60-1] icinga security update



Package        : icinga
Version        : 1.0.2-2+squeeze2
CVE ID         : CVE-2013-7108 CVE-2014-1878

Two fixes for the Classic UI:
 - fix off-by-one memory access in process_cgivars() (CVE-2013-7108)
 - prevent possible buffer overflows in cmd.cgi (CVE-2014-1878)

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: