Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 25 articles for you...
202
security advisorysecurity issuesoftware updateopenSUSE Backports SLE-15-SP2: 2021:0735-1 Important Nagios Fixes
An update that solves two vulnerabilities and has three fixes is now available. . openSUSE Security Update: Security update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0735-1 Rating: important References: #1003362 #1014637 #1172794 #1182398 #989759 Cross-References: CVE-2016-6209 CVE-2020-13977 CVSS scores: CVE-2016-6209 (NVD) : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-13977 (NVD) : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVE-2020-13977 (SUSE): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nagios fixes the following issues: - new nagios-exec-start-post script to fix boo#1003362 - fix nagios_upgrade.sh writing to log file in user controlled directory (boo#1182398). The nagios_upgrade.sh script writes the logfile directly below /var/log/ nagios was updated to 4.4.6: * Fixed Map display in Internet Explorer 11 (#714) * Fixed duplicate properties appearing in statusjson.cgi (#718) * Fixed NERD not building when enabled in ./configure (#723) * Fixed build process when using GCC 10 (#721) * Fixed postauth vulnerabilities in histogram.js, map.js, trends.js (CVE-2020-13977, boo#1172794) * When using systemd, configuration will be verified before reloading (#715) * Fixed HARD OK states triggering on the maximum check attempt (#757) * Fix for CVE-2016-6209 (boo#989759) - The "corewindow" parameter (as in bringing this to our attention go to Dawid Golunski (boo#1014637) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: Toinstall this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-735=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): nagios-4.4.6-bp152.2.3.1 nagios-contrib-4.4.6-bp152.2.3.1 nagios-devel-4.4.6-bp152.2.3.1 nagios-www-4.4.6-bp152.2.3.1 nagios-www-dch-4.4.6-bp152.2.3.1 - openSUSE Backports SLE-15-SP2 (noarch): nagios-theme-exfoliation-4.4.6-bp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2016-6209.html https://www.suse.com/security/cve/CVE-2020-13977.html https://bugzilla.suse.com/1003362 https://bugzilla.suse.com/1014637 https://bugzilla.suse.com/1172794 https://bugzilla.suse.com/1182398 https://bugzilla.suse.com/989759 . Discussing the latest updates and remedies for nagios flaws in openSUSE underscores their significance for safeguarding systems.. OpenSUSE Backports, Nagios Security Update, Important Fixes. . Severity: Important. LinuxSecurity.com Team
May 15, 2021
•Important
OpenSUSE
202
security advisorysoftware updatethreat mitigationopenSUSE Leap 15.2: Security Update for Nagios – Important Fixes
An update that solves two vulnerabilities and has three fixes is now available. . openSUSE Security Update: Security update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0715-1 Rating: important References: #1003362 #1014637 #1172794 #1182398 #989759 Cross-References: CVE-2016-6209 CVE-2020-13977 CVSS scores: CVE-2016-6209 (NVD) : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-13977 (NVD) : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVE-2020-13977 (SUSE): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for nagios fixes the following issues: - new nagios-exec-start-post script to fix boo#1003362 - fix nagios_upgrade.sh writing to log file in user controlled directory (boo#1182398). The nagios_upgrade.sh script writes the logfile directly below /var/log/ nagios was updated to 4.4.6: * Fixed Map display in Internet Explorer 11 (#714) * Fixed duplicate properties appearing in statusjson.cgi (#718) * Fixed NERD not building when enabled in ./configure (#723) * Fixed build process when using GCC 10 (#721) * Fixed postauth vulnerabilities in histogram.js, map.js, trends.js (CVE-2020-13977, boo#1172794) * When using systemd, configuration will be verified before reloading (#715) * Fixed HARD OK states triggering on the maximum check attempt (#757) * Fix for CVE-2016-6209 (boo#989759) - The "corewindow" parameter (as in bringing this to our attention go to Dawid Golunski (boo#1014637) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods likeYaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-715=1 Package List: - openSUSE Leap 15.2 (x86_64): nagios-4.4.6-lp152.2.3.1 nagios-contrib-4.4.6-lp152.2.3.1 nagios-debuginfo-4.4.6-lp152.2.3.1 nagios-debugsource-4.4.6-lp152.2.3.1 nagios-devel-4.4.6-lp152.2.3.1 nagios-www-4.4.6-lp152.2.3.1 nagios-www-dch-4.4.6-lp152.2.3.1 nagios-www-debuginfo-4.4.6-lp152.2.3.1 - openSUSE Leap 15.2 (noarch): nagios-theme-exfoliation-4.4.6-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2016-6209.html https://www.suse.com/security/cve/CVE-2020-13977.html https://bugzilla.suse.com/1003362 https://bugzilla.suse.com/1014637 https://bugzilla.suse.com/1172794 https://bugzilla.suse.com/1182398 https://bugzilla.suse.com/989759 . This security bulletin notifies users about a significant nagios patch for openSUSE that resolves two vulnerabilities and includes three enhancements.. openSUSE Updates,nagios security fix,nagios updates,security advisory. . Severity: Important. LinuxSecurity.com Team
May 12, 2021
•Important
OpenSUSE
203
security advisorycriticalremote accessMageia 7: 2021-0209 Critical: Nagios Remote Access Vulnerability Fix
Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977). . MGASA-2021-0209 - Updated nagios packages fix a security vulnerability Publication date: 12 May 2021 URL: https://advisories.mageia.org/MGASA-2021-0209.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-13977 Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977). References: - https://bugs.mageia.org/show_bug.cgi?id=28557 - https://lists.fedoraproject.org/archives/list/
May 12, 2021
•Critical
Mageia
89
security advisoryupdateFedoraFedora 34: 2021-01a2f76cc3 Critical: Nagios Post-Login Patch
Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-01a2f76cc3 2021-03-19 19:51:22.364143 --------------------------------------------------------------------------------Name : nagios Product : Fedora 34 Version : 4.4.6 Release : 4.fc34 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6 --------------------------------------------------------------------------------ChangeLog: * Wed Mar 3 2021 Guido Aulisi - 4.4.6-4 - Add missing require for nagios-plugins-ping - Fix run path * Sat Feb 27 2021 Guido Aulisi - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi - 4.4.6-2 - Fix systemd unit file permissions #1676334 --------------------------------------------------------------------------------References: [ 1 ] Bug #1829114 - nagios-4.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 2 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 3 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-01a2f76cc3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 19, 2021
•Critical
Fedora
89
security advisoryFedoranetwork monitoringFedora 33: 2021-5689072a7e Moderate: Nagios Localhost Monitoring Update
Fix for CVE-2020-13977 BZ1849087 Require plugins needed for localhost monitoring (#1932297) Update to 4.4.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-5689072a7e 2021-03-07 13:52:17.728701 --------------------------------------------------------------------------------Name : nagios Product : Fedora 33 Version : 4.4.6 Release : 3.fc33 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Fix for CVE-2020-13977 BZ1849087 Require plugins needed for localhost monitoring (#1932297) Update to 4.4.6 --------------------------------------------------------------------------------ChangeLog: * Sat Feb 27 2021 Guido Aulisi - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi - 4.4.6-2 - Fix systemd unit file permissions #1676334 * Sat Feb 20 2021 Guido Aulisi - 4.4.6-1 - Update to 4.4.6 - Fix for CVE-2020-13977 #BZ1849087 - Some spec cleanup --------------------------------------------------------------------------------References: [ 1 ] Bug #1829114 - nagios-4.4.6 isavailable https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 2 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 3 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-5689072a7e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 07, 2021
Fedora
89
security advisoryfedoraupdateFedora 32: FEDORA-2021-b5e897a2e5 Critical: Nagios URL Injection
Fix for CVE-2020-13977 BZ1849087 Require plugins needed for localhost monitoring (#1932297) Update to 4.4.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-b5e897a2e5 2021-03-07 13:52:38.179269 --------------------------------------------------------------------------------Name : nagios Product : Fedora 32 Version : 4.4.6 Release : 3.fc32 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Fix for CVE-2020-13977 BZ1849087 Require plugins needed for localhost monitoring (#1932297) Update to 4.4.6 --------------------------------------------------------------------------------ChangeLog: * Sat Feb 27 2021 Guido Aulisi - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi - 4.4.6-2 - Fix systemd unit file permissions #1676334 * Sat Feb 20 2021 Guido Aulisi - 4.4.6-1 - Update to 4.4.6 - Fix for CVE-2020-13977 #BZ1849087 - Some spec cleanup --------------------------------------------------------------------------------References: [ 1 ] Bug #1829114 - nagios-4.4.6 isavailable https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 2 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 3 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-b5e897a2e5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 07, 2021
•Critical
Fedora
202
security advisorymoderateXSSopenSUSE 15.1: 2020:0517-1 Moderate: nagios Denial Of Service Issues
An update that fixes 5 vulnerabilities is now available.. openSUSE Security Update: Security update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0517-1 Rating: moderate References: #1028975 #1119832 #1156309 Cross-References: CVE-2018-13441 CVE-2018-13457 CVE-2018-13458 CVE-2018-18245 CVE-2019-3698 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309) - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report (boo#1119832) - CVE-2018-13441, CVE-2018-13458, CVE-2018-13457: Fixed a few denial of service vulnerabilities caused by null pointer dereference (boo#1101293, boo#1101289, boo#1101290). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-517=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): nagios-4.4.5-bp151.4.3.1 nagios-contrib-4.4.5-bp151.4.3.1 nagios-devel-4.4.5-bp151.4.3.1 nagios-www-4.4.5-bp151.4.3.1 nagios-www-dch-4.4.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): nagios-theme-exfoliation-4.4.5-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-13441.html https://www.suse.com/security/cve/CVE-2018-13457.html https://www.suse.com/security/cve/CVE-2018-13458.html https://www.suse.com/security/cve/CVE-2018-18245.html https://www.suse.com/security/cve/CVE-2019-3698.html https://bugzilla.suse.com/1028975 https://bugzilla.suse.com/1119832 https://bugzilla.suse.com/1156309 -- . Addresses several security flaws in nagios via an openSUSE security patch for enhanced system integrity and reliability.. openSUSE Update,nagios Security Fixes,Denial of Service,Local Attacks,Moderate Threats. . LinuxSecurity.com Team
Apr 14, 2020
OpenSUSE
202
security advisorymoderatesecurity updateopenSUSE 15-SP1: 2021:0517-1 Moderate: nagios Security Update
An update that fixes 5 vulnerabilities is now available. . openSUSE Security Update: Security update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0517-1 Rating: moderate References: #1028975 #1119832 #1156309 Cross-References: CVE-2018-13441 CVE-2018-13457 CVE-2018-13458 CVE-2018-18245 CVE-2019-3698 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309) - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report (boo#1119832) - CVE-2018-13441, CVE-2018-13458, CVE-2018-13457: Fixed a few denial of service vulnerabilities caused by null pointer dereference (boo#1101293, boo#1101289, boo#1101290). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-517=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): nagios-4.4.5-bp151.4.3.1 nagios-contrib-4.4.5-bp151.4.3.1 nagios-devel-4.4.5-bp151.4.3.1 nagios-www-4.4.5-bp151.4.3.1 nagios-www-dch-4.4.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): nagios-theme-exfoliation-4.4.5-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2018-13441.html https://www.suse.com/security/cve/CVE-2018-13457.html https://www.suse.com/security/cve/CVE-2018-13458.html https://www.suse.com/security/cve/CVE-2018-18245.html https://www.suse.com/security/cve/CVE-2019-3698.html https://bugzilla.suse.com/1028975 https://bugzilla.suse.com/1119832 https://bugzilla.suse.com/1156309 -- . The openSUSE Security Update resolves various vulnerabilities in nagios, classified with moderate severity, and delivers essential patches.. openSUSE Security Update,nagios fixes,moderate severity,DoS protection,XSS vulnerability. . LinuxSecurity.com Team
Apr 14, 2020
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!