--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-17b388679b
2019-02-02 00:36:07.782383
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 6
Version : 4.4.3
Release : 1.el6
URL :
https://www.nagios.org/projects/nagios-core/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at
https://github.com/nagios-plugins/nagios-plugins
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
Incorporate many fixes from Justin Paulsen <petaris(a)gmail.com> THANKS!!! ----
Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441
CVE-2016-8641 ---- Remove section which unset nagios Fix BZ#1568273
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1661479
https://bugzilla.redhat.com/show_bug.cgi?id=1661479
[ 2 ] Bug #1661480 - CVE-2018-18245 nagios: Stored XSS via Plugin Output [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1661480
[ 3 ] Bug #1665200 - CVE-2018-13441 nagios: NULL pointer dereference in qh_help in
base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665200
[ 4 ] Bug #1665201 - CVE-2018-13441 nagios: NULL pointer dereference in qh_help in
base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665201
[ 5 ] Bug #1665206 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in
base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665206
[ 6 ] Bug #1665207 - CVE-2018-13457 nagios: NULL pointer dereference in qh_echo in
base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665207
[ 7 ] Bug #1665209 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in
base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665209
[ 8 ] Bug #1665210 - CVE-2018-13458 nagios: NULL pointer dereference in qh_core in
base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665210
[ 9 ] Bug #1666209
https://bugzilla.redhat.com/show_bug.cgi?id=1666209
[ 10 ] Bug #1593048 - nagios-4.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593048
[ 11 ] Bug #1647765 - Memory leak in nagios
https://bugzilla.redhat.com/show_bug.cgi?id=1647765
[ 12 ] Bug #1482407 - nagios-4.3.2-8.el7 crash caused by (potential) result size issue
in wproc
https://bugzilla.redhat.com/show_bug.cgi?id=1482407
[ 13 ] Bug #1506423 - Nagios regularly crashes with SIGSEGV after couple of weeks of
starting.
https://bugzilla.redhat.com/show_bug.cgi?id=1506423
[ 14 ] Bug #1592594 - nagios spool files in wrong location by default, causing SELinux
violations
https://bugzilla.redhat.com/show_bug.cgi?id=1592594
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------