Alerts This Week
Warning Icon 1 933
Alerts This Week
Warning Icon 1 933

openSUSE Backports SLE-15-SP2: 2021:0735-1 Important Nagios Fixes

opensuse
Calendar Grey May 15, 2021
Dist Opensuse Esm H88
Discussing the latest updates and remedies for nagios flaws in openSUSE underscores their significance for safeguarding systems.
An update that solves two vulnerabilities and has three fixes is now available

Description

This update for nagios fixes the following issues:

- new nagios-exec-start-post script to fix boo#1003362

- fix nagios_upgrade.sh writing to log file in user controlled directory

(boo#1182398). The nagios_upgrade.sh script writes the logfile directly

below /var/log/

nagios was updated to 4.4.6:

* Fixed Map display in Internet Explorer 11 (#714)

* Fixed duplicate properties appearing in statusjson.cgi (#718)

* Fixed NERD not building when enabled in ./configure (#723)

* Fixed build process when using GCC 10 (#721)

* Fixed postauth vulnerabilities in histogram.js, map.js, trends.js

(CVE-2020-13977, boo#1172794)

* When using systemd, configuration will be verified before reloading

(#715)

* Fixed HARD OK states triggering on the maximum check attempt (#757)

* Fix for CVE-2016-6209 (boo#989759) - The "corewindow" parameter (as in

bringing this to our attention go to Dawid Golunski (boo#1014637)

This update was imported...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue software update vulnerability patch management important fix nagios patch instructions openSUSE Backports Nagios threat

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2021-735=1

Package List

- openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64):

nagios-4.4.6-bp152.2.3.1

nagios-contrib-4.4.6-bp152.2.3.1

nagios-devel-4.4.6-bp152.2.3.1

nagios-www-4.4.6-bp152.2.3.1

nagios-www-dch-4.4.6-bp152.2.3.1

- openSUSE Backports SLE-15-SP2 (noarch):

nagios-theme-exfoliation-4.4.6-bp152.2.3.1

References

https://www.suse.com/security/cve/CVE-2016-6209.html

https://www.suse.com/security/cve/CVE-2020-13977.html

https://bugzilla.suse.com/1003362

https://bugzilla.suse.com/1014637

https://bugzilla.suse.com/1172794

https://bugzilla.suse.com/1182398

https://bugzilla.suse.com/989759

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:0735-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP2 ble.

Topics%20covered

Topics Covered

security advisory security issue software update vulnerability patch management important fix nagios patch instructions openSUSE Backports Nagios threat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here