CVE-2016-4338: zabbix-agent: mysql.size shell command injection

Debian Bug report logs - #823329
CVE-2016-4338: zabbix-agent: mysql.size shell command injection

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Henri Salo <henri@nerv.fi>

To: submit@bugs.debian.org

Subject: CVE-2016-4338: zabbix-agent: mysql.size shell command injection

Date: Tue, 3 May 2016 17:36:40 +0300

Source: zabbix
Version: 1:3.0.2+dfsg-1
Severity: important
Tags: security upstream
Forwarded: https://support.zabbix.com/browse/ZBX-10741

Hi,

the following vulnerability was published for zabbix agent.

CVE-2016-4338: mysql.size shell command injection

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

https://support.zabbix.com/browse/ZBX-10741
http://seclists.org/bugtraq/2016/May/11

Please adjust the affected versions in the BTS as needed.

-- 
Henri Salo

Message #12 received at 823329-close@bugs.debian.org (full text, mbox, reply):

From: Dmitry Smirnov <onlyjob@debian.org>

To: 823329-close@bugs.debian.org

Subject: Bug#823329: fixed in zabbix 1:3.0.3+dfsg-1

Date: Sat, 21 May 2016 05:36:47 +0000

Source: zabbix
Source-Version: 1:3.0.3+dfsg-1

We believe that the bug you reported is fixed in the latest version of
zabbix, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 823329@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dmitry Smirnov <onlyjob@debian.org> (supplier of updated zabbix package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 21 May 2016 15:01:05 +1000
Source: zabbix
Binary: zabbix-agent zabbix-frontend-php zabbix-java-gateway zabbix-proxy-mysql zabbix-proxy-pgsql zabbix-proxy-sqlite3 zabbix-server-mysql zabbix-server-pgsql
Architecture: source amd64 all
Version: 1:3.0.3+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Dmitry Smirnov <onlyjob@debian.org>
Changed-By: Dmitry Smirnov <onlyjob@debian.org>
Description:
 zabbix-agent - network monitoring solution - agent
 zabbix-frontend-php - network monitoring solution - PHP front-end
 zabbix-java-gateway - network monitoring solution - Java gateway
 zabbix-proxy-mysql - network monitoring solution - proxy (using MySQL)
 zabbix-proxy-pgsql - network monitoring solution - proxy (using PostgreSQL)
 zabbix-proxy-sqlite3 - network monitoring solution - proxy (using SQLite3)
 zabbix-server-mysql - network monitoring solution - server (using MySQL)
 zabbix-server-pgsql - network monitoring solution - server (using PostgreSQL)
Closes: 823329
Changes:
 zabbix (1:3.0.3+dfsg-1) unstable; urgency=medium
 .
   * New upstream release [May 2016].
   * CVE-2016-4338 / ZBX-10741: fixed mysql.size shell command injection in
     zabbix-agent (Closes: #823329).
   * Corrected Vcs-Git URL.
Checksums-Sha1:
 275edce755c2a906dba67202023b21121c5762c1 2864 zabbix_3.0.3+dfsg-1.dsc
 aaa4f22dc58d28d58a4a8c872d0c6ce9e7d9b2bd 5902656 zabbix_3.0.3+dfsg.orig.tar.xz
 09a4d029b6bd50f74d302248021435e1487baff6 191520 zabbix_3.0.3+dfsg-1.debian.tar.xz
 d01db58799eaf624c77fe0cfb3ccacc31a62119c 489294 zabbix-agent-dbgsym_3.0.3+dfsg-1_amd64.deb
 fba2c3cf9642246afdd667274eed8d21d67d28ba 389380 zabbix-agent_3.0.3+dfsg-1_amd64.deb
 c39772725363efe05a47da1b24d52227344ff376 1951388 zabbix-frontend-php_3.0.3+dfsg-1_all.deb
 7607e6c5419c0cce207e0f69b4e6a9b883dbc49f 234628 zabbix-java-gateway_3.0.3+dfsg-1_all.deb
 69692e7a21bd0b06c2c45386a9025ea17320f250 1094876 zabbix-proxy-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 b7555fe5d294028539b042425a4ba8e36936b52b 673222 zabbix-proxy-mysql_3.0.3+dfsg-1_amd64.deb
 a69f7a6e9b1ae71c962d79e53669169f6131d0e0 1093456 zabbix-proxy-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 3d7b84903d7dc4e7c4d16cab86f38d70cb25c8b0 672452 zabbix-proxy-pgsql_3.0.3+dfsg-1_amd64.deb
 e53b24e5076a6f5a2a8999e826e42a79685e2aae 1058196 zabbix-proxy-sqlite3-dbgsym_3.0.3+dfsg-1_amd64.deb
 0d12c5eb1e7020d2e13007351d30d3fd813089f5 657228 zabbix-proxy-sqlite3_3.0.3+dfsg-1_amd64.deb
 83927612c54798a1c81b218a0f0522bb040d7d2c 1180426 zabbix-server-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 5d3e889f787d76469cd271cf404c412ef43ee2f8 1850532 zabbix-server-mysql_3.0.3+dfsg-1_amd64.deb
 95e0be0d4f1f1a3ea0b83d0fc4efb3a2063d38c2 1178928 zabbix-server-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 e9b7e3348840d50ec60bafe226e762c4dd508df1 1850260 zabbix-server-pgsql_3.0.3+dfsg-1_amd64.deb
Checksums-Sha256:
 ac034b148dd4755648657f9f3e95549ed02dd10047ea01fcd00e4d2355c81919 2864 zabbix_3.0.3+dfsg-1.dsc
 d2456b2c3faa3e0503ea313e0aeb790b5acf485175f3e5f88a6b15d1d76dc954 5902656 zabbix_3.0.3+dfsg.orig.tar.xz
 bd53475bcda4eeead59a67fa22ab8f1fd2290fa554a352259fc5c88d40dcb83d 191520 zabbix_3.0.3+dfsg-1.debian.tar.xz
 10007c9d659a60dbf4a867c368b69da7936ec9c406b8f9bdd7d0bc7765dc62ce 489294 zabbix-agent-dbgsym_3.0.3+dfsg-1_amd64.deb
 74462700d2881335ba254ea091d0597656dd851178be09f6308b742db62dddd6 389380 zabbix-agent_3.0.3+dfsg-1_amd64.deb
 bbbecf41f704783c9eabdfc20d005e5f778e6f26514111460a84752bedd9e28f 1951388 zabbix-frontend-php_3.0.3+dfsg-1_all.deb
 fab27434fdb988d74ed142b5954d47d9df57c2d46303721c8f4dafdd8f2042c1 234628 zabbix-java-gateway_3.0.3+dfsg-1_all.deb
 0e14d70a427a5063e7b903c67b7f9bc81e9e7b2e0fb699bb6978fe576096a8ca 1094876 zabbix-proxy-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 97b779e89cd08722f205ceaacfa99cdded1f3a322a62056fdfa30de18284f5cd 673222 zabbix-proxy-mysql_3.0.3+dfsg-1_amd64.deb
 c67fde6c5a9b45bbfd8100a8916861ef22ca57fc0e8b7460fed4b8da918e4113 1093456 zabbix-proxy-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 94dac9d7a220878919b2c9855f01eb7befb298d6519e3cb1b8b0ce1cc29aaa1b 672452 zabbix-proxy-pgsql_3.0.3+dfsg-1_amd64.deb
 b130e840d436f35ec4c4489b3fcaee58a0ec6a25e6c3d59c21c6a9bda09ca93f 1058196 zabbix-proxy-sqlite3-dbgsym_3.0.3+dfsg-1_amd64.deb
 425be9cf46fa56bbee1aadc3de9a2ef2587b7f052ce394566e7d8e4ac52c37fc 657228 zabbix-proxy-sqlite3_3.0.3+dfsg-1_amd64.deb
 651ec3dae50957e7a8f0667d2fca21866e39f5c268d34c8913268e2b48689c1d 1180426 zabbix-server-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 14998415959888b9610ae22b36deb75a1e754186a29d4bb3bbe29270dbcca45c 1850532 zabbix-server-mysql_3.0.3+dfsg-1_amd64.deb
 c7a034be66d98752255ab4265cc804edaa13bfaf2330add72c2a8a07aa5cee0a 1178928 zabbix-server-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 72dcb967b5badb0b36e3b399cb3fd98151c76e118029d74371f3450e137a1ccb 1850260 zabbix-server-pgsql_3.0.3+dfsg-1_amd64.deb
Files:
 aaa8add5b44be31ede30cbf896b91bd4 2864 net optional zabbix_3.0.3+dfsg-1.dsc
 536c01817eeef39fa0f16501d2ff7c1c 5902656 net optional zabbix_3.0.3+dfsg.orig.tar.xz
 952a51ef5b3cf5b5034b8a0030ff14f3 191520 net optional zabbix_3.0.3+dfsg-1.debian.tar.xz
 d50c191484829f649a7b34283ecc5e5f 489294 debug extra zabbix-agent-dbgsym_3.0.3+dfsg-1_amd64.deb
 f1ede6d967e04d6c22a7cfa925a6ddc3 389380 net optional zabbix-agent_3.0.3+dfsg-1_amd64.deb
 a9b136f46fb4f53609b303f23620cad0 1951388 net optional zabbix-frontend-php_3.0.3+dfsg-1_all.deb
 4a12aac3a1ae30e0529c06e61ac662a7 234628 net optional zabbix-java-gateway_3.0.3+dfsg-1_all.deb
 9496fefc7c45bbd06abab9b973cf97c2 1094876 debug extra zabbix-proxy-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 6627a68383a7fde40d8bb957620524f7 673222 net optional zabbix-proxy-mysql_3.0.3+dfsg-1_amd64.deb
 94c1a2e3e0be5709b938bc38ea4e8e0d 1093456 debug extra zabbix-proxy-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 9e0b5bcd8eb19e23efee0f852e744b0b 672452 net optional zabbix-proxy-pgsql_3.0.3+dfsg-1_amd64.deb
 54ccda8a798afe960d0ce1d7089745b5 1058196 debug extra zabbix-proxy-sqlite3-dbgsym_3.0.3+dfsg-1_amd64.deb
 e424b11ea1d29f52dc7cbdb61aef6e92 657228 net optional zabbix-proxy-sqlite3_3.0.3+dfsg-1_amd64.deb
 28c031bcd5d61cc2a9fd14f8b4b7c662 1180426 debug extra zabbix-server-mysql-dbgsym_3.0.3+dfsg-1_amd64.deb
 a950301f893ba896ba13a5ba3eb47308 1850532 net optional zabbix-server-mysql_3.0.3+dfsg-1_amd64.deb
 ebac1d21591ff3fd1aa8643f783191e8 1178928 debug extra zabbix-server-pgsql-dbgsym_3.0.3+dfsg-1_amd64.deb
 d7f3cef025c4e20139bf026221fe9d4a 1850260 net optional zabbix-server-pgsql_3.0.3+dfsg-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=keLc
-----END PGP SIGNATURE-----

Message #17 received at 823329-close@bugs.debian.org (full text, mbox, reply):

From: Dmitry Smirnov <onlyjob@debian.org>

To: 823329-close@bugs.debian.org

Subject: Bug#823329: fixed in zabbix 1:2.2.7+dfsg-2+deb8u1

Date: Tue, 07 Jun 2016 18:47:08 +0000

Source: zabbix
Source-Version: 1:2.2.7+dfsg-2+deb8u1

We believe that the bug you reported is fixed in the latest version of
zabbix, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 823329@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dmitry Smirnov <onlyjob@debian.org> (supplier of updated zabbix package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 28 May 2016 17:04:31 +1000
Source: zabbix
Binary: zabbix-agent zabbix-frontend-php zabbix-java-gateway zabbix-proxy-mysql zabbix-proxy-pgsql zabbix-proxy-sqlite3 zabbix-server-mysql zabbix-server-pgsql
Architecture: source amd64 all
Version: 1:2.2.7+dfsg-2+deb8u1
Distribution: stable
Urgency: medium
Maintainer: Christoph Haas <haas@debian.org>
Changed-By: Dmitry Smirnov <onlyjob@debian.org>
Description:
 zabbix-agent - network monitoring solution - agent
 zabbix-frontend-php - network monitoring solution - PHP front-end
 zabbix-java-gateway - network monitoring solution - Java gateway
 zabbix-proxy-mysql - network monitoring solution - proxy (using MySQL)
 zabbix-proxy-pgsql - network monitoring solution - proxy (using PostgreSQL)
 zabbix-proxy-sqlite3 - network monitoring solution - proxy (using SQLite3)
 zabbix-server-mysql - network monitoring solution - server (using MySQL)
 zabbix-server-pgsql - network monitoring solution - server (using PostgreSQL)
Closes: 823329
Changes:
 zabbix (1:2.2.7+dfsg-2+deb8u1) stable; urgency=medium
 .
   * CVE-2016-4338 / ZBX-10741: fixed mysql.size shell command injection
     in zabbix-agent (Closes: #823329).
Checksums-Sha1:
 a14316a715a7ebb3d243276b207c6bfbe60684ec 2780 zabbix_2.2.7+dfsg-2+deb8u1.dsc
 43b7451ac63acb72d2a801d6c4396b32ea559e47 189520 zabbix_2.2.7+dfsg-2+deb8u1.debian.tar.xz
 845569c2d3f104af46683a398feaf581dffc636b 319838 zabbix-agent_2.2.7+dfsg-2+deb8u1_amd64.deb
 bd18d824e6fc9d9fbb8f801fe04120ffd0c83371 2901004 zabbix-frontend-php_2.2.7+dfsg-2+deb8u1_all.deb
 04f37dc89a8a1acf33190e242231178b4194c44f 188302 zabbix-java-gateway_2.2.7+dfsg-2+deb8u1_all.deb
 29d6eeb4982c124e07cfc57a6719aeb74df18fbb 562520 zabbix-proxy-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 b981cb618c7d5a42174dc425eaf8101a3a3973f8 565082 zabbix-proxy-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb
 da5806aa33ab7e6eac75b8a24bda04f17e00b898 548648 zabbix-proxy-sqlite3_2.2.7+dfsg-2+deb8u1_amd64.deb
 902b609ab584a024ecb6767a6f0230859ade9262 1738968 zabbix-server-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 f0d2f2b3c93823ca20157333920ecca829b718d1 1741636 zabbix-server-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb
Checksums-Sha256:
 7c35182b811f4b003c9def8a28cc5fac8388b2810caedd66e72f5f78a89c6f8e 2780 zabbix_2.2.7+dfsg-2+deb8u1.dsc
 2d5f7ce7a4dcaa962314709ba41651830ffa7087d6b28e27ddf6df6744931454 189520 zabbix_2.2.7+dfsg-2+deb8u1.debian.tar.xz
 d8caa685c5ae5918fab0e0c057bff39ac5d097bd35c01e3f044f54829bb04ab4 319838 zabbix-agent_2.2.7+dfsg-2+deb8u1_amd64.deb
 1bc9c4c0b3f80ab266a556962420b9a3cf72238863b5928b245956d46b23d2f3 2901004 zabbix-frontend-php_2.2.7+dfsg-2+deb8u1_all.deb
 ae7c40740084b25184a6fb45aac1ca77db96003e3df58f72edca89d59864b97a 188302 zabbix-java-gateway_2.2.7+dfsg-2+deb8u1_all.deb
 7e9c78348ca940b048b225645a21bb475fc0c439f88b53a4feec4ed2eb3e33b5 562520 zabbix-proxy-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 ffff9271187fcf23341e8d3ec638ed89a1a23a80664ab07c5bd42c665b81be0c 565082 zabbix-proxy-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb
 bad74e6974868672e4dfd5ab591a8732cf0ad643f2342119b7efcbc08cb80655 548648 zabbix-proxy-sqlite3_2.2.7+dfsg-2+deb8u1_amd64.deb
 e09649809fc0a778ef0db36fb14333b41508010c940ae0caaec3293272f2ce27 1738968 zabbix-server-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 4b37089bc40d73214fd4e24caf74e03d4e7ad15bd5efb5d1908b11b61e6f8afc 1741636 zabbix-server-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb
Files:
 037bb325b7aff27243efa457f2e11998 2780 net optional zabbix_2.2.7+dfsg-2+deb8u1.dsc
 22b784658b9ba99e165c5b420175af12 189520 net optional zabbix_2.2.7+dfsg-2+deb8u1.debian.tar.xz
 83683b1ee24b4abd7ab86e1b7fd1be96 319838 net optional zabbix-agent_2.2.7+dfsg-2+deb8u1_amd64.deb
 7afc6dc3e7af75590ebacbdcaa08b719 2901004 net optional zabbix-frontend-php_2.2.7+dfsg-2+deb8u1_all.deb
 f064a153d0f36beb055cc9026c4ade3b 188302 net optional zabbix-java-gateway_2.2.7+dfsg-2+deb8u1_all.deb
 89ac550c70146c77ebcf9b0988309930 562520 net optional zabbix-proxy-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 6d03dfe87f70a28c36073b867ed48c6e 565082 net optional zabbix-proxy-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb
 ea2826010f78202050faa856243fe5f5 548648 net optional zabbix-proxy-sqlite3_2.2.7+dfsg-2+deb8u1_amd64.deb
 4136bbbc6d4b76a4d496be78d7c9cf9b 1738968 net optional zabbix-server-mysql_2.2.7+dfsg-2+deb8u1_amd64.deb
 ca45daa20de92d6765ed36305a42d2e2 1741636 net optional zabbix-server-pgsql_2.2.7+dfsg-2+deb8u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=QvNb
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.