[pnp4nagios: 1/2] Fixed bug: [Bug 846091] New: CVE-2012-3457 pnp4nagios 0.6.x: process_perfdata.cfg world reada

Ján ONDREJ ondrejj at fedoraproject.org
Sat Aug 11 08:02:23 UTC 2012


commit 8a455fde5fcee18cf50768c589a8da77466bec3f
Author: Jan ONDREJ (SAL) <ondrejj(at)salstar.sk>
Date:   Sat Aug 11 09:58:44 2012 +0200

    Fixed bug:
    [Bug 846091] New: CVE-2012-3457 pnp4nagios 0.6.x: process_perfdata.cfg
           world readable

 pnp4nagios.spec |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)
---
diff --git a/pnp4nagios.spec b/pnp4nagios.spec
index 060dc38..5311583 100644
--- a/pnp4nagios.spec
+++ b/pnp4nagios.spec
@@ -1,6 +1,6 @@
 Name:           pnp4nagios
 Version:        0.6.16
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Nagios performance data analysis tool
 
 Group:          Applications/System
@@ -116,6 +116,7 @@ fi
 %doc AUTHORS ChangeLog COPYING INSTALL README README.fedora
 %doc THANKS contrib/
 %dir %{_sysconfdir}/pnp4nagios
+%config(noreplace) %attr(0640,root,nagios) %{_sysconfdir}/pnp4nagios/process_perfdata.cfg
 %config(noreplace) %{_sysconfdir}/pnp4nagios/*
 %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
 %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf
@@ -137,6 +138,9 @@ fi
 %{_datadir}/nagios/html/%{name}/kohana
 
 %changelog
+* Sat Aug 11 2012 Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.16-2
+- CVE-2012-3457 - process_perfdata.cfg world readable
+
 * Thu Nov 24 2011 Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 0.6.16-1
 - update to upstream
 


More information about the scm-commits mailing list