[Pkg-nagios-devel] Bug#771466: CVE-2013-7108 CVE-2013-7205

[Matt Taggart]

Hi,

The upstream fix for this bug was backported to the 3.5 branch as seen here

http://sourceforge.net/p/nagios/nagioscore/ci/0e733d40f8abf09bd0c0e51c2102964fc2331e97/

But the changelog change seems to indicate it will be in a 3.5.2 release
and that commit was on 2013-12-20.

Maybe we should ask upstream to do a 3.5.2 release? Is there anything
else that should go in such a release?

-- 
Matt Taggart
taggart at debian.org