[Pkg-nagios-devel] Fixing CVE-2016-9566 in Icinga & Nagios

Alexander Wirt formorer at formorer.de
Fri Dec 23 09:46:39 UTC 2016


On Fri, 23 Dec 2016, Sebastiaan Couwenberg wrote:

> On 12/23/2016 10:32 AM, Alexander Wirt wrote:
> > On Fri, 23 Dec 2016, Sebastiaan Couwenberg wrote:
> >> Icinga upstream has released bugfix releases for the various Icinga 1.x
> >> branches fixing CVE-2016-9566. [0]
> >>
> >> I've updated the package to 1.13.4 for unstable, although we can
> >> consider updating to 1.14.0 too. 1.13.4 was the least invasive choice
> >> since it only contains the fix for CVE-2016-9566.
> >
> > Didn't I asked you NOT to touch icinga? 
> > 
> > We - Markus and I - are part of upstream and will handle those things on our
> > own. 
> > 
> > I am a little bit annoyed that you touched icinga.
> 
> Fine, I'll never touch icina again.
> 
> Very disappointing.
I asked you friendly in advance to talk to use before touching the package
and you refused that wish. What do you expect? 

Alex




More information about the Pkg-nagios-devel mailing list