Overview

Request 892198 accepted

This Nagios upgrade sums up multiple security fixes and other important
changes.

Security issues fixed in this upgrade:
* bsc#1172794 / CVE-2020-13977: Fixed postauth vulnerabilities in
histogram.js, map.js, trends.js
* bsc#989759 / CVE-2016-6209 : The "corewindow" parameter has been
disabled by default
* bsc#1014637 / CVE-2016-9566 : Fixed another root privilege escalation
* bsc#1182398 : nagios_upgrade.sh writing to log file in user controlled
directory

Additional fixes:
* bsc#1003362 : new nagios-exec-start-post script
* Fixed Map display in Internet Explorer 11
* Fixed duplicate properties appearing in statusjson.cgi
* Fixed build process when using GCC 10
* Fixed HARD OK states triggering on the maximum check attempt

Request History
Lars Vogdt's avatar

lrupp created request

This Nagios upgrade sums up multiple security fixes and other important
changes.

Security issues fixed in this upgrade:
* bsc#1172794 / CVE-2020-13977: Fixed postauth vulnerabilities in
histogram.js, map.js, trends.js
* bsc#989759 / CVE-2016-6209 : The "corewindow" parameter has been
disabled by default
* bsc#1014637 / CVE-2016-9566 : Fixed another root privilege escalation
* bsc#1182398 : nagios_upgrade.sh writing to log file in user controlled
directory

Additional fixes:
* bsc#1003362 : new nagios-exec-start-post script
* Fixed Map display in Internet Explorer 11
* Fixed duplicate properties appearing in statusjson.cgi
* Fixed build process when using GCC 10
* Fixed HARD OK states triggering on the maximum check attempt


Saul Goodman's avatar

licensedigger accepted review

ok


Wolfgang Engel's avatar

bigironman added as a reviewer

Being evaluated by staging project "openSUSE:Backports:SLE-15-SP3:Staging:adi:2"


Wolfgang Engel's avatar

bigironman accepted review

Picked "openSUSE:Backports:SLE-15-SP3:Staging:adi:2"


Wolfgang Engel's avatar

bigironman accepted review

Staging Project openSUSE:Backports:SLE-15-SP3:Staging:adi:2 got accepted.


Wolfgang Engel's avatar

bigironman approved review

Staging Project openSUSE:Backports:SLE-15-SP3:Staging:adi:2 got accepted.


Wolfgang Engel's avatar

bigironman accepted request

Staging Project openSUSE:Backports:SLE-15-SP3:Staging:adi:2 got accepted.

openSUSE Build Service is sponsored by