FEDORA-EPEL-2019-d661b588d2 — security update for nagios

stable

nagios-4.4.3-1.el7

FEDORA-EPEL-2019-d661b588d2 created by smooge 5 years ago for Fedora EPEL 7

Incorporate many fixes from Justin Paulsen petaris@gmail.com THANKS!!!

Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641

Remove section which unset nagios Fix BZ#1568273

Fix systemd failures due to old versioning.

This update has been submitted for testing by smooge.

5 years ago

This update has obsoleted nagios-4.4.2-3.el7, and has inherited its bugs and notes.

5 years ago

This update has been pushed to testing.

5 years ago

petaris provided feedback 5 years ago

karma

BZ#1201849 Support an environment file in the systemd unit file

BZ#1476238 EPEL6 update to 4.3.2 causes information leak to google via embedded youtube

BZ#1504306 minor packaging improvements

BZ#1579935 nagios-common permissions issue with /usr/lib64/nagios/plugins directory

BZ#1592594 nagios spool files in wrong location by default, causing SELinux violations

BZ#1593048 nagios-4.4.1 is available

BZ#1661479 Invalid bug number

BZ#1661480 CVE-2018-18245 nagios: Stored XSS via Plugin Output [epel-all]

BZ#1665200 CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [fedora-all]

BZ#1665201 CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [epel-all]

BZ#1665206 CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [fedora-all]

BZ#1665207 CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [epel-all]

BZ#1665209 CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [fedora-all]

BZ#1665210 CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [epel-all]

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for batched by smooge.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

nagios-4.4.3-1.el7

BZ#1201849 Support an environment file in the systemd unit file

BZ#1273154 RFE: Remove Nagios version check warning messages

BZ#1476238 EPEL6 update to 4.3.2 causes information leak to google via embedded youtube

BZ#1482407 nagios-4.3.2-8.el7 crash caused by (potential) result size issue in wproc

BZ#1494292 file ownership problem between nagios and nagios-contrib

BZ#1504306 minor packaging improvements

BZ#1506423 Nagios regularly crashes with SIGSEGV after couple of weeks of starting.

BZ#1517925 Updating nagios package causes nagios service to be disabled.

BZ#1568273 Nagios service disabled after each update

BZ#1579935 nagios-common permissions issue with /usr/lib64/nagios/plugins directory

BZ#1592594 nagios spool files in wrong location by default, causing SELinux violations

BZ#1593048 nagios-4.4.1 is available

BZ#1647765 Memory leak in nagios

BZ#1661479 Invalid bug number

BZ#1661480 CVE-2018-18245 nagios: Stored XSS via Plugin Output [epel-all]

BZ#1665200 CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [fedora-all]

BZ#1665201 CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [epel-all]

BZ#1665206 CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [fedora-all]

BZ#1665207 CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [epel-all]

BZ#1665209 CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [fedora-all]

BZ#1665210 CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [epel-all]

BZ#1666209 Nagios cannot start after system reboot because of missing directory

nagios-4.4.3-1.el7

Automated Test Results

ignored