[Pkg-nagios-devel] Bug#547092: Bug#547092: Bug#547092: nrpe ssl security problem

Alexander Wirt formorer at debian.org
Fri Feb 8 08:39:45 UTC 2013


On Fri, 08 Feb 2013, Christoph Anton Mitterer wrote:

> On Fri, 2013-02-08 at 00:26 +0100, Alexander Wirt wrote:
> > In fact nothing is new here and security wouldn't change much with different
> > keys. The implementation ist just broken. But if you have an idea to improve
> > it, feel free to send a patch. (as long as it doesn't make nrpe incompatible
> > to upstreams nrpe).
> > 
> > Alternatives would be check_by_ssh, check_mk, snmp. There are also some nrpe
> > replacements flying around but I never tested one of them.
> All agreed... but would you consider to add some big warnings about that
> fact? :)
Thats something for the release notes or readme.debian. Feel free to send a
patch. 

Alex



More information about the Pkg-nagios-devel mailing list