security path download...anyone tell me where?

[x2x4]

events.php SQL Injection

http://marc.info/?l=bugtraq&m=127482701720690&w=2

and

http://www.securityfocus.com/bid/39752

anyone can tell me where to download the patch?

my version 1.6.4

[x2x4]

help...help...help...

[zabbix_zen]

By path I take you mean 'patch',

I'm unaware if that vulnerability is exclusive to Zabbix <=1.8.1 as stated in the first bugtraq,
but you could try upgrading to Zabbix 1.8.2 or pre 1.8.3

[x2x4]

By path I take you mean 'patch',

I'm unaware if that vulnerability is exclusive to Zabbix <=1.8.1 as stated in the first bugtraq,
but you could try upgrading to Zabbix 1.8.2 or pre 1.8.3

sorry, 'patch' ... my poor english ...

We have many servers monitor by zabbix on production environment, we need time to test 1.6.4 updrade to 1.8.2 ...

so have any way to fix this problem like 'cover events.php file' or 'edit events.php change xxxx to yyyy'?


forgive my poor english