MGASA-2017-0045

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0045.html

Import Source

https://advisories.mageia.org/MGASA-2017-0045.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2017-0045

Related

Published

2017-02-11T23:47:14Z

Modified

2017-02-11T23:36:30Z

Summary

Updated nagios packages fix security vulnerabilities

Details

The nagios package has been patched to fix the following issues:

Improper sanitization of RSS feed input enables unauthenticated remote read and write of arbitrary files (CVE-2016-9565).

Unsafe logfile handling allows unprivileged users to escalate their privileges to root (CVE-2016-9566).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.8-3.1.mga5

{
    "section": "core"
}