{"id":"SUSE-SU-2018:3620-1","summary":"Security update for icinga","details":"This update for icinga fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-8010: Fixed XSS in the icinga classic UI (boo#952777)\n- CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root (boo#1011630 and boo#1018047)\n\n","modified":"2026-03-11T07:00:02.286181Z","published":"2018-11-05T16:57:03Z","related":["CVE-2015-8010","CVE-2016-10089","CVE-2016-8641"],"upstream":["CVE-2015-8010","CVE-2016-10089","CVE-2016-8641"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183620-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011630"},{"type":"REPORT","url":"https://bugzilla.suse.com/1018047"},{"type":"REPORT","url":"https://bugzilla.suse.com/952777"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-8010"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-10089"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-8641"}],"affected":[{"package":{"name":"icinga","ecosystem":"SUSE:Manager Client Tools 12","purl":"pkg:rpm/suse/icinga&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-12.3.1"}]}],"ecosystem_specific":{"binaries":[{"icinga-doc":"1.13.3-12.3.1","icinga-idoutils-mysql":"1.13.3-12.3.1","icinga-idoutils-oracle":"1.13.3-12.3.1","icinga-idoutils":"1.13.3-12.3.1","icinga-plugins-downtimes":"1.13.3-12.3.1","icinga-www":"1.13.3-12.3.1","icinga":"1.13.3-12.3.1","icinga-devel":"1.13.3-12.3.1","icinga-idoutils-pgsql":"1.13.3-12.3.1","icinga-plugins-eventhandlers":"1.13.3-12.3.1","icinga-www-config":"1.13.3-12.3.1","monitoring-tools":"1.13.3-12.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:3620-1.json"}},{"package":{"name":"icinga","ecosystem":"SUSE:Enterprise Storage 4","purl":"pkg:rpm/suse/icinga&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.3-12.3.1"}]}],"ecosystem_specific":{"binaries":[{"icinga":"1.13.3-12.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:3620-1.json"}}],"schema_version":"1.7.5"}