FEDORA-EPEL-2015-8155 — security update for nagios

stable

nagios-4.0.8-1.el7

FEDORA-EPEL-2015-8155 created by swilkerson 9 years ago for Fedora EPEL 7

nagios-4.0.8-1.fc21 nagios-4.0.8-1.fc22 nagios-4.0.8-1.el6 nagios-4.0.8-1.el7 nagios-4.0.8-1.fc23

update to 4.0.8

This update has been submitted for testing by swilkerson.

9 years ago

This update has been pushed to testing.

9 years ago

swilkerson edited this update.

9 years ago

This update has reached 17 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

This update has been submitted for stable by pbrobinson.

9 years ago

This update has been pushed to stable.

9 years ago

apevec commented & provided feedback 8 years ago

Looks like nagios-4.0.8 is not compatible with nagios-3.5.1 I saw this in OpenStack Packstack CI job, using puppet module mod 'nagios', :commit => '56a1eee350c4600bb12e017d64238fb3f876abd4', :git => 'https://github.com/gildub/puppet-nagios-openstack.git'

nagios: Error: Service has no hosts and/or service_description (config file '/etc/nagios/nagios_service.cfg', starting on line 49) nagios: Error processing object config files!

Please login to add feedback.

Metadata

Type

security

Severity

urgent

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

nagios-4.0.8-1.el7

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

modified

9 years ago

BZ#469320 CVE-2008-4796 snoopy: command execution via shell metacharacters

BZ#958002 CVE-2013-4214 Nagios core: html/rss-newsfeed.php insecure temporary file usage

BZ#958305 CVE-2008-4796 snoopy: command execution via shell metacharacters [epel-6]

BZ#994780 CVE-2013-4214 nagios: Nagios core: html/rss-newsfeed.php insecure temporary file usage [epel-6]

BZ#1036331 [cosmetic] Double slash in Nagios' web interface URL

BZ#1046113 CVE-2013-7108 CVE-2013-7205 nagios: denial of service due to off-by-one flaw in process_cgivars()

BZ#1046333 CVE-2013-7108 CVE-2013-7205 nagios: denial of service due to off-by-one flaw in process_cgivars() [fedora-all]

BZ#1046335 CVE-2013-7108 CVE-2013-7205 nagios: denial of service due to off-by-one flaw in process_cgivars() [epel-6]

BZ#1066580 CVE-2014-1878 nagios: possible buffer overflows in cmd.cgi [fedora-all]

BZ#1066582 CVE-2014-1878 nagios: possible buffer overflows in cmd.cgi [epel-6]

BZ#1074611 Consider using Nagios 4.x branch for EPEL7

BZ#1075867 Upgrade to Nagios 4.x

BZ#1083003 Nagios SIGSEGV on (internal to nagios) scheduled log rotate if livestatus module is loaded and a downtime is set

BZ#1111720 use_embedded_perl_implicitly=1 by default is user-hostile

BZ#1121499 CVE-2014-5009 CVE-2014-5008 CVE-2008-7313 nagios: snoopy: incomplete fixes for command execution flaws [fedora-all]

BZ#1201462 Update Nagios package to at least -5

BZ#1201849 Support an environment file in the systemd unit file

nagios-4.0.8-1.el7

Automated Test Results

None