{"id":"openSUSE-SU-2021:0715-1","summary":"Security update for nagios","details":"This update for nagios fixes the following issues:\n\n- new nagios-exec-start-post script to fix boo#1003362\n\n- fix nagios_upgrade.sh writing to log file in user controlled \n  directory (boo#1182398). The nagios_upgrade.sh script writes the \n  logfile directly below /var/log/ \n\nnagios was updated to 4.4.6:\n\n* Fixed Map display in Internet Explorer 11 (#714)\n* Fixed duplicate properties appearing in statusjson.cgi (#718)\n* Fixed NERD not building when enabled in ./configure (#723)\n* Fixed build process when using GCC 10 (#721)\n* Fixed postauth vulnerabilities in histogram.js, map.js, trends.js \n  (CVE-2020-13977, boo#1172794)\n* When using systemd, configuration will be verified before\n  reloading (#715)\n* Fixed HARD OK states triggering on the maximum check attempt (#757)\n\n* Fix for CVE-2016-6209 (boo#989759) - The 'corewindow' parameter (as in bringing this to our attention go to Dawid Golunski (boo#1014637)\n","modified":"2026-03-11T07:33:01.992619Z","published":"2021-05-12T15:02:21Z","related":["CVE-2016-6209","CVE-2020-13977"],"upstream":["CVE-2016-6209","CVE-2020-13977"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RCXDSKLLDI4CG7PLAOOYGYVNNNQLL5WP/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1003362"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014637"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172794"},{"type":"REPORT","url":"https://bugzilla.suse.com/1182398"},{"type":"REPORT","url":"https://bugzilla.suse.com/989759"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6209"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13977"}],"affected":[{"package":{"name":"nagios","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/nagios&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-lp152.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"nagios-contrib":"4.4.6-lp152.2.3.1","nagios-devel":"4.4.6-lp152.2.3.1","nagios-theme-exfoliation":"4.4.6-lp152.2.3.1","nagios-www-dch":"4.4.6-lp152.2.3.1","nagios-www":"4.4.6-lp152.2.3.1","nagios":"4.4.6-lp152.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0715-1.json"}}],"schema_version":"1.7.5"}