Package: nagstamon Version: 2.0.1-1 Severity: serious Tags: security When I run nagstamon from a terminal against the Debian nagios I get a warning about unverified and thus insecure HTTPS requests being made:
https://nagios.debian.org/icinga/ https://dsa.debian.org/ (see here for guest login) $ nagstamon ... /usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings InsecureRequestWarning) -- System Information: Debian Release: 9.0 APT prefers testing-debug APT policy: (900, 'testing-debug'), (900, 'testing'), (860, 'testing-proposed-updates'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages nagstamon depends on: ii libqt5multimedia5-plugins 5.7.1~20161021-2 ii python3-bs4 4.5.3-1 ii python3-dbus.mainloop.pyqt5 5.7+dfsg-5 ii python3-pkg-resources 33.1.1-1 ii python3-psutil 5.0.1-1 ii python3-pyqt5 5.7+dfsg-5 ii python3-pyqt5.qtmultimedia 5.7+dfsg-5 ii python3-pyqt5.qtsvg 5.7+dfsg-5 ii python3-requests 2.12.4-1 pn python3:any <none> nagstamon recommends no packages. nagstamon suggests no packages. -- no debconf information -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part