Date: Tue, 30 Apr 2013 19:28:28 -0400 (EDT) From: David Jorm <djorm@...hat.com> To: oss-security@...ts.openwall.com, kseifried@...hat.com Subject: Re: Re-emergence of CVE-2008-4796 in Nagios current > CVE-2008-4796 snoopy: command execution via shell metacharacters > > Was found in Nagios core by Grant Murphy. > > Filed upstream: http://tracker.nagios.org/view.php?id=449 > > We really need to start thinking about ways to find vulnerable copies > of code and fixing them everywhere people have embedded them. Debian uses clonewise: https://github.com/silviocesare/Clonewise It is the best solution I've seen so far. It's been on my TODO list forever and a day to get it running for Fedora. David
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.