{"id":"openSUSE-SU-2021:0735-1","summary":"Security update for nagios","details":"This update for nagios fixes the following issues:\n\n- new nagios-exec-start-post script to fix boo#1003362\n\n- fix nagios_upgrade.sh writing to log file in user controlled \n  directory (boo#1182398). The nagios_upgrade.sh script writes the \n  logfile directly below /var/log/ \n\nnagios was updated to 4.4.6:\n\n* Fixed Map display in Internet Explorer 11 (#714)\n* Fixed duplicate properties appearing in statusjson.cgi (#718)\n* Fixed NERD not building when enabled in ./configure (#723)\n* Fixed build process when using GCC 10 (#721)\n* Fixed postauth vulnerabilities in histogram.js, map.js, trends.js \n  (CVE-2020-13977, boo#1172794)\n* When using systemd, configuration will be verified before\n  reloading (#715)\n* Fixed HARD OK states triggering on the maximum check attempt (#757)\n\n* Fix for CVE-2016-6209 (boo#989759) - The 'corewindow' parameter (as in bringing this to our attention go to Dawid Golunski (boo#1014637)\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","modified":"2026-03-11T07:33:02.250183Z","published":"2021-05-15T22:05:05Z","related":["CVE-2016-6209","CVE-2020-13977"],"upstream":["CVE-2016-6209","CVE-2020-13977"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZGYA3HEIHYY2MWEAOFFMZUBPGWKUXYI2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1003362"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014637"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172794"},{"type":"REPORT","url":"https://bugzilla.suse.com/1182398"},{"type":"REPORT","url":"https://bugzilla.suse.com/989759"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6209"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13977"}],"affected":[{"package":{"name":"nagios","ecosystem":"SUSE:Package Hub 15 SP2","purl":"pkg:rpm/suse/nagios&distro=SUSE%20Package%20Hub%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-bp152.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"nagios-www-dch":"4.4.6-bp152.2.3.1","nagios-www":"4.4.6-bp152.2.3.1","nagios":"4.4.6-bp152.2.3.1","nagios-contrib":"4.4.6-bp152.2.3.1","nagios-devel":"4.4.6-bp152.2.3.1","nagios-theme-exfoliation":"4.4.6-bp152.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:0735-1.json"}}],"schema_version":"1.7.5"}