[Pkg-nagios-devel] Bug#758883: check-mk: CVE-2014-5339 CVE-2014-5340

[Salvatore Bonaccorso]

Source: check-mk
Version: 1.2.2p3-1
Severity: grave
Tags: security upstream fixed-upstream

Hi,

the following vulnerabilities were published for check-mk.

CVE-2014-5339[0]:
Write access to config (.mk) files in arbitrary places on the filesystem

CVE-2014-5340[1]:
Code executing due to insecure input handling

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-5339
[1] https://security-tracker.debian.org/tracker/CVE-2014-5340
[2] http://packetstormsecurity.com/files/127941/DTC-A-20140820-001.txt

Regards,
Salvatore