Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryupdateFedoraFedora 34: 2021-01a2f76cc3 Critical: Nagios Post-Login Patch
Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-01a2f76cc3 2021-03-19 19:51:22.364143 --------------------------------------------------------------------------------Name : nagios Product : Fedora 34 Version : 4.4.6 Release : 4.fc34 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Fix for CVE-2020-13977 BZ1849087 Add missing require for nagios-plugins-ping Update to 4.4.6 --------------------------------------------------------------------------------ChangeLog: * Wed Mar 3 2021 Guido Aulisi - 4.4.6-4 - Add missing require for nagios-plugins-ping - Fix run path * Sat Feb 27 2021 Guido Aulisi - 4.4.6-3 - Require plugins needed for localhost monitoring (#1932297) * Tue Feb 23 2021 Guido Aulisi - 4.4.6-2 - Fix systemd unit file permissions #1676334 --------------------------------------------------------------------------------References: [ 1 ] Bug #1829114 - nagios-4.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1829114 [ 2 ] Bug #1849087 - CVE-2020-13977 nagios: URL injection (post-authentication) vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1849087 [ 3 ] Bug #1932297 - Nagios server rpm missing some nagios-plugins-* dependency https://bugzilla.redhat.com/show_bug.cgi?id=1932297 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-01a2f76cc3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 19, 2021
•Critical
Fedora
89
security advisoryupdatecriticalFedora 29: nagios Security Update FEDORA-2019-376ecc221c Critical DoS
Incorporate many fixes from Justin Paulsen THANKS!!! ---- Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641 . --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-376ecc221c 2019-01-30 02:06:12.445567 --------------------------------------------------------------------------------Name : nagios Product : Fedora 29 Version : 4.4.3 Release : 1.fc29 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Incorporate many fixes from Justin Paulsen THANKS!!! ----Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641 --------------------------------------------------------------------------------ChangeLog: * Wed Jan 16 2019 Stephen Smoogen - 4.4.3-1 - Incorporate many fixes from Justin Paulsen THANKS!!! - Update to 4.4.3 for CVE fixes - BZ#1661479 - BZ#1661480 - BZ#1665200 - BZ#1665201 - BZ#1665206 - BZ#1665207 - BZ#1665209 - BZ#1665210 - Fix BZ#1666209 Add RuntimeDirectory too systemd * Fri Nov 30 2018 Stephen Smoogen - 4.4.2-3 - Remove systemdstartup since built in works properly - Incorporate fixes from patch14 into patch9 * Thu Nov 29 2018 Stephen Smoogen - 4.4.2-2 - Fix init-type and initdir for systemd and sysv * Wed Nov 28 2018 Justin Paulsen 4.4.2-1 - Bumped to version 4.4.2 - Updated patches 0001,0002,0003,0006,0009,0010,0011 to reflect upstream changes - Updates to nagios.spec (this file) to cleanup un-needed elements and adjust/fix as required - As a result of the cleanup I have added a patch nagios-0014-fix-resource.cfg-path.patch --------------------------------------------------------------------------------References: [ 1 ] Bug #1661479 - CVE-2018-18245 nagios: Stored XSS via Plugin Output [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1661479 [ 2 ] Bug #1661480 - CVE-2018-18245 nagios: Stored XSS via Plugin Output [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1661480 [ 3 ] Bug #1665200 - CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665200 [ 4 ] Bug #1665201 - CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665201 [ 5 ] Bug #1665206 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665206 [ 6 ] Bug #1665207 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665207 [ 7 ] Bug #1665209 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665209 [ 8 ] Bug #1665210 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665210 [ 9 ] Bug #1666209 - Nagios cannot start aftersystem reboot because of missing directory https://bugzilla.redhat.com/show_bug.cgi?id=1666209 [ 10 ] Bug #1593048 - nagios-4.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1593048 [ 11 ] Bug #1647765 - Memory leak in nagios https://bugzilla.redhat.com/show_bug.cgi?id=1647765 [ 12 ] Bug #1482407 - nagios-4.3.2-8.el7 crash caused by (potential) result size issue in wproc https://bugzilla.redhat.com/show_bug.cgi?id=1482407 [ 13 ] Bug #1506423 - Nagios regularly crashes with SIGSEGV after couple of weeks of starting. https://bugzilla.redhat.com/show_bug.cgi?id=1506423 [ 14 ] Bug #1592594 - nagios spool files in wrong location by default, causing SELinux violations https://bugzilla.redhat.com/show_bug.cgi?id=1592594 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-376ecc221c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 30, 2019
•Critical
Fedora
89
security advisoryupdateFedoraFedora 28: FEDORA-2019-0b44528ff1 Moderate: Nagios Update Issues
Incorporate many fixes from Justin Paulsen THANKS!!! ---- Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641 ---- Remove section which unset nagios Fix BZ#1568273 . --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-0b44528ff1 2019-01-30 01:31:27.440907 --------------------------------------------------------------------------------Name : nagios Product : Fedora 28 Version : 4.4.3 Release : 1.fc28 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Incorporate many fixes from Justin Paulsen THANKS!!! ----Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641 ---- Remove section which unset nagios Fix BZ#1568273 --------------------------------------------------------------------------------ChangeLog: * Wed Jan 16 2019 Stephen Smoogen - 4.4.3-1 - Incorporate many fixes from Justin Paulsen THANKS!!! - Update to 4.4.3 for CVE fixes - BZ#1661479 - BZ#1661480 - BZ#1665200 - BZ#1665201 - BZ#1665206 - BZ#1665207 - BZ#1665209 - BZ#1665210 - FixBZ#1666209 Add RuntimeDirectory too systemd * Fri Nov 30 2018 Stephen Smoogen - 4.4.2-3 - Remove systemd startup since built in works properly - Incorporate fixes from patch14 into patch9 * Thu Nov 29 2018 Stephen Smoogen - 4.4.2-2 - Fix init-type and initdir for systemd and sysv * Wed Nov 28 2018 Justin Paulsen 4.4.2-1 - Bumped to version 4.4.2 - Updated patches 0001,0002,0003,0006,0009,0010,0011 to reflect upstream changes - Updates to nagios.spec (this file) to cleanup un-needed elements and adjust/fix as required - As a result of the cleanup I have added a patch nagios-0014-fix-resource.cfg-path.patch * Tue Jul 24 2018 Stephen Smoogen - 4.3.4-13 - Remove section which unset nagios Fix BZ#1568273 - Remove /etc/nagios/conf.d Fix BZ#1504306 - Change perms on dir Fix BZ#1579935 - Close BZ#1273154 - Hopefully Fix BZ#1201849 - Hopefully Fix BZ#1476238 - Hopefully Fix BZ#1494292 * Fri Jul 13 2018 Fedora Release Engineering - 4.3.4-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 28 2018 Jitka Plesnikova - 4.3.4-11 - Perl 5.28 rebuild * Thu Apr 26 2018 Stephen Smoogen - 4.3.4-10 - Fix systemd failures due to old versioning. * Tue Feb 20 2018 Stephen Smoogen - 4.3.4-9 - Add buildrequires for gcc * Thu Feb 8 2018 Fedora Release Engineering - 4.3.4-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1661479 - CVE-2018-18245 nagios: Stored XSS via Plugin Output [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1661479 [ 2 ] Bug #1661480 - CVE-2018-18245 nagios: Stored XSS via Plugin Output [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1661480 [ 3 ] Bug #1665200 - CVE-2018-13441 nagios: NULL pointer dereference in qh_help in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665200 [ 4 ] Bug #1665201 - CVE-2018-13441 nagios: NULL pointerdereference in qh_help in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665201 [ 5 ] Bug #1665206 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665206 [ 6 ] Bug #1665207 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665207 [ 7 ] Bug #1665209 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665209 [ 8 ] Bug #1665210 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in base/query-handler.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1665210 [ 9 ] Bug #1666209 - Nagios cannot start after system reboot because of missing directory https://bugzilla.redhat.com/show_bug.cgi?id=1666209 [ 10 ] Bug #1593048 - nagios-4.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1593048 [ 11 ] Bug #1647765 - Memory leak in nagios https://bugzilla.redhat.com/show_bug.cgi?id=1647765 [ 12 ] Bug #1482407 - nagios-4.3.2-8.el7 crash caused by (potential) result size issue in wproc https://bugzilla.redhat.com/show_bug.cgi?id=1482407 [ 13 ] Bug #1506423 - Nagios regularly crashes with SIGSEGV after couple of weeks of starting. https://bugzilla.redhat.com/show_bug.cgi?id=1506423 [ 14 ] Bug #1592594 - nagios spool files in wrong location by default, causing SELinux violations https://bugzilla.redhat.com/show_bug.cgi?id=1592594 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-0b44528ff1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html Allpackages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 30, 2019
Fedora
89
security advisoryfedoraprivilege escalationCritical Security Update for Fedora 25 Nagios to Fix Privilege Escalation
Try to fix error on update with systemctl. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-9d345f250a 2017-11-15 21:26:26.920474 --------------------------------------------------------------------------------Name : nagios Product : Fedora 25 Version : 4.3.4 Release : 3.fc25 URL : https://www.nagios.org/projects/nagios-core/ Summary : Host/service/network monitoring program Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://github.com/nagios-plugins/nagios-plugins This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. --------------------------------------------------------------------------------Update Information: Try to fix error on update with systemctl --------------------------------------------------------------------------------References: [ 1 ] Bug #1490859 - CVE-2017-14312 nagios: Incorrect file permissions leading to possible privilege escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1490859 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade nagios' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 15, 2017
•Critical
Fedora
89
security advisorymoderatefedoraFedora 10: 2009-8779 Moderate: Nagios 3.2.0 Service Improvement
Upstream released new version. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8779 2009-08-20 20:33:17 -------------------------------------------------------------------------------- Name : nagios Product : Fedora 10 Version : 3.2.0 Release : 2.fc10 URL : https://www.nagios.org/ Summary : Nagios monitors hosts and services and yells if somethings breaks Description : Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux (and some other *NIX variants) as a background process, intermittently running checks on various services that you specify. The actual service checks are performed by separate "plugin" programs which return the status of the checks to Nagios. The plugins are available at https://sourceforge.net/projects/nagios-4-debian-plugins/ This package provides the core program, web interface, and documentation files for Nagios. Development files are built as a separate package. -------------------------------------------------------------------------------- Update Information: Upstream released new version -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 17 2009 Mike McGrath - 3.2.0-2 - s/datarootdir/datadir/ * Sun Aug 16 2009 Jose Pedro Oliveira - 3.2.0-1 - Upgrade to 3.2.0 (#517210). * Fri Jul 24 2009 Jose Pedro Oliveira - 3.1.2-3 - Corrected the package version in the last two changelog entries (#499853) - Using configure --datarootdir option instead of --datadir (#499853) (fixes the physical_html_path value in cgi.cfg) - Fixes permissions to the new php configuration file config.inc.php (#499853) - Re-enables the httpd requirement as its removal caused several problems (see #487411 for more information) * Wed Jul 15 2009 Mike McGrath 3.1.2-2 -Release bump for rebuild * Mon Jun 29 2009 Robert M. Albrecht 3.1.1-1 - Upstream released a new version * Mon Jun 22 2009 Mike McGrath - 3.0.6-4 - Removing httpd requires for #487411 * Wed Feb 25 2009 Fedora Release Engineering - 3.0.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Sun Jan 11 2009 Robert M. Albrecht 3.0.6-2 - I messed my CVS up * Tue Dec 2 2008 Robert M. Albrecht 3.0.6-1 - Upstream released a new version * Mon Nov 24 2008 Mike McGrath 3.0.5-1 - Upstream released a new version -------------------------------------------------------------------------------- References: [ 1 ] Bug #476635 - nagios: update to version 3.0.6 https://bugzilla.redhat.com/show_bug.cgi?id=476635 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nagios' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Aug 20, 2009
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!