[Pkg-nagios-devel] Bug#547092: Bug#547092: Bug#547092: Bug#547092: Bug#547092: nrpe ssl security problem

Salvatore Bonaccorso carnil at debian.org
Sat Feb 23 14:41:39 UTC 2013


Hi Alex

On Sat, Feb 23, 2013 at 01:17:03PM +0100, Alexander Wirt wrote:
> On Sat, 23 Feb 2013, Salvatore Bonaccorso wrote:
> 
> > Hi Alex, Hi Thijs
> > 
> > I was looking trough the bugs for nagios-nrpe, and noticed #547092
> > where there was an upload to address it, but the bug was not closed.
> > 
> > I wondered if this was intentional, als the original issue is "only"
> > addressed by making clear in the documentation where the issues are.
> imho the ssl is still borken, so I think the upload does not close the
> problem, per se.
> 
> There is no real solution to this problem without rewriting the whole ssl
> support - which makes our nrpe incompatible to the rest of the world. 

Thanks. Maybe we can ask for a 'wheezy-ignore' by the release team for
this bug, with given explanation? In any case it would be good to get
the documentation update into wheezy (but this could go into testing
in one 'batch' with #701227).

Thanks a lot for your work on nagios related packages.

Regards,
Salvatore



More information about the Pkg-nagios-devel mailing list