Format: 1.8 Date: Fri, 31 Mar 2017 15:28:59 -0400 Source: nagios3 Binary: nagios3-common nagios3-cgi nagios3 nagios3-core nagios3-doc nagios3-dbg Architecture: amd64 amd64_translations Version: 3.5.1-1ubuntu1.1 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nagios3 - host/service/network monitoring and management system nagios3-cgi - cgi files for nagios3 nagios3-common - support files for nagios3 nagios3-core - host/service/network monitoring and management system core files nagios3-dbg - debugging symbols and debug stuff for nagios3 nagios3-doc - documentation for nagios3 Changes: nagios3 (3.5.1-1ubuntu1.1) trusty-security; urgency=medium . * SECURITY UPDATE: off-by-one errors leading to DoS or info disclosure - debian/patches/CVE-2013-7xxx.patch: fix off-by-ones and check length in cgi/avail.c, cgi/cmd.c, cgi/config.c, cgi/extinfo.c, cgi/histogram.c, cgi/notifications.c, cgi/outages.c, cgi/status.c, cgi/statusmap.c, cgi/statuswml.c, cgi/summary.c, cgi/trends.c, contrib/daemonchk.c. - CVE-2013-7108 - CVE-2013-7205 * SECURITY UPDATE: DoS via long message to cmd.cgi - debian/patches/CVE-2014-1878.patch: check len in cgi/cmd.c. - CVE-2014-1878 * SECURITY UPDATE: symlink attack on log file - debian/patches/CVE-2016-9566.patch: safely handle log file in base/logging.c. - CVE-2016-9566 Checksums-Sha1: f7ac6f0a9c6a07c605633a9ce2053da278cda463 797182 nagios3-cgi_3.5.1-1ubuntu1.1_amd64.deb 8d17d04104d18fede2c0979f22e2d8baa2add79d 1530 nagios3_3.5.1-1ubuntu1.1_amd64.deb 213904b458085223a9fe75d4b6980d025c809b9f 230672 nagios3-core_3.5.1-1ubuntu1.1_amd64.deb e8e69f934246ed6debe8374c918cd83da42ba25a 1474506 nagios3-dbg_3.5.1-1ubuntu1.1_amd64.deb 2cf3b0bf6ff78b89adf6fb4dfe4dd1a93468355e 1286 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 8abef7c38565595d810f27d8e5c266f79a6503f7 1302 nagios3-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 7cc5a0740bb982cc4b9a7f337fb8f9060cab9949 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 67ca8799f0ea4902cf0eef703d8d99cacd2c2ba9 11021 nagios3_3.5.1-1ubuntu1.1_amd64_translations.tar.gz Checksums-Sha256: 80aa7a36d0bf0c1739a8703d324ddc7bd525930272a2cbb108f0cb88e6660fb4 797182 nagios3-cgi_3.5.1-1ubuntu1.1_amd64.deb 0450cb5ecf9b5ba09c48bcf565e153b05f0634813ab0d2be3d9942b7b3412ec6 1530 nagios3_3.5.1-1ubuntu1.1_amd64.deb 7b112f5e5efce6591841c2c0a757d1d34bdf5569ccbeb5650e77b38cb21e80d4 230672 nagios3-core_3.5.1-1ubuntu1.1_amd64.deb e4801addee0a7916a33e879b2f5598ace25e86bbe06f62e329df198ceff83cec 1474506 nagios3-dbg_3.5.1-1ubuntu1.1_amd64.deb 17d2971a68b0b942ef6decc875b1711402bc1201737f84c7f6f0b09267e70a59 1286 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 8216af2b34fea315d7af0e3283be01cf399893881811c634212d9d85d305d2c4 1302 nagios3-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 7f4395f8c65afcb2c4ed615b4dfe5d19c9f07e12903668c48468ac9b338d96c1 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb dd1b64d21bcd71966a6cad777ce4b2330cd2a3c97b8d2fc3b07221f840783212 11021 nagios3_3.5.1-1ubuntu1.1_amd64_translations.tar.gz Files: 32c275dc65ad68332677cc9fe275a95a 797182 net optional nagios3-cgi_3.5.1-1ubuntu1.1_amd64.deb 7192e0a5d5383934aa6dc3236e4633ed 1530 net optional nagios3_3.5.1-1ubuntu1.1_amd64.deb 0c32f7a1f50a1e3e5b53a919363a9fab 230672 net optional nagios3-core_3.5.1-1ubuntu1.1_amd64.deb 597f312971cadfe18a5d866c6689caf7 1474506 debug extra nagios3-dbg_3.5.1-1ubuntu1.1_amd64.deb 8b48136b34c57967ec7acbb52802f117 1286 net extra nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 235f1c58d1bc111adbb201f164dab31a 1302 net extra nagios3-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb 075576b2c445cb98b4e5e9d594d0b75e 1306 net extra nagios3-core-dbgsym_3.5.1-1ubuntu1.1_amd64.ddeb b2a07865a16d5b243d9978da986ceccf 11021 raw-translations - nagios3_3.5.1-1ubuntu1.1_amd64_translations.tar.gz Original-Maintainer: Debian Nagios Maintainer Group