From 8a455fde5fcee18cf50768c589a8da77466bec3f Mon Sep 17 00:00:00 2001 From: Jan ONDREJ (SAL) Date: Aug 11 2012 07:58:44 +0000 Subject: Fixed bug: [Bug 846091] New: CVE-2012-3457 pnp4nagios 0.6.x: process_perfdata.cfg world readable --- diff --git a/pnp4nagios.spec b/pnp4nagios.spec index 060dc38..5311583 100644 --- a/pnp4nagios.spec +++ b/pnp4nagios.spec @@ -1,6 +1,6 @@ Name: pnp4nagios Version: 0.6.16 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Nagios performance data analysis tool Group: Applications/System @@ -116,6 +116,7 @@ fi %doc AUTHORS ChangeLog COPYING INSTALL README README.fedora %doc THANKS contrib/ %dir %{_sysconfdir}/pnp4nagios +%config(noreplace) %attr(0640,root,nagios) %{_sysconfdir}/pnp4nagios/process_perfdata.cfg %config(noreplace) %{_sysconfdir}/pnp4nagios/* %config(noreplace) %{_sysconfdir}/logrotate.d/%{name} %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf @@ -137,6 +138,9 @@ fi %{_datadir}/nagios/html/%{name}/kohana %changelog +* Sat Aug 11 2012 Ján ONDREJ (SAL) - 0.6.16-2 +- CVE-2012-3457 - process_perfdata.cfg world readable + * Thu Nov 24 2011 Ján ONDREJ (SAL) - 0.6.16-1 - update to upstream