Format: 1.8 Date: Fri, 31 Mar 2017 15:28:59 -0400 Source: nagios3 Binary: nagios3-common nagios3-cgi nagios3 nagios3-core nagios3-doc nagios3-dbg Architecture: armhf armhf_translations Version: 3.5.1-1ubuntu1.1 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nagios3 - host/service/network monitoring and management system nagios3-cgi - cgi files for nagios3 nagios3-common - support files for nagios3 nagios3-core - host/service/network monitoring and management system core files nagios3-dbg - debugging symbols and debug stuff for nagios3 nagios3-doc - documentation for nagios3 Changes: nagios3 (3.5.1-1ubuntu1.1) trusty-security; urgency=medium . * SECURITY UPDATE: off-by-one errors leading to DoS or info disclosure - debian/patches/CVE-2013-7xxx.patch: fix off-by-ones and check length in cgi/avail.c, cgi/cmd.c, cgi/config.c, cgi/extinfo.c, cgi/histogram.c, cgi/notifications.c, cgi/outages.c, cgi/status.c, cgi/statusmap.c, cgi/statuswml.c, cgi/summary.c, cgi/trends.c, contrib/daemonchk.c. - CVE-2013-7108 - CVE-2013-7205 * SECURITY UPDATE: DoS via long message to cmd.cgi - debian/patches/CVE-2014-1878.patch: check len in cgi/cmd.c. - CVE-2014-1878 * SECURITY UPDATE: symlink attack on log file - debian/patches/CVE-2016-9566.patch: safely handle log file in base/logging.c. - CVE-2016-9566 Checksums-Sha1: a8bbb104b1d2d9ab0a699cd9351deda650b2934f 744154 nagios3-cgi_3.5.1-1ubuntu1.1_armhf.deb 74bead6c1bab1846c7998afbb80cb6c84666e7df 1534 nagios3_3.5.1-1ubuntu1.1_armhf.deb 35a6aee5e271b4e42833302fbb6b919de0844772 213544 nagios3-core_3.5.1-1ubuntu1.1_armhf.deb 7363bc8a7c4915fe966c1a84c2edbf56a02cc50d 1590760 nagios3-dbg_3.5.1-1ubuntu1.1_armhf.deb 4767bc03559fe0d4fe3110ab66fde3955a3d117a 1286 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb 02b35fdd31297a8464a7f0948b4d6769f6d73491 1306 nagios3-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb b0044e21487c5b1b300d2c77a05a3b38e35dc776 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb 249f365cc0349aea9af6545f98eeae3bc1d27df2 11084 nagios3_3.5.1-1ubuntu1.1_armhf_translations.tar.gz Checksums-Sha256: 333a38ee74edc9c878e0b50f342072a23e00af008570d9ce9c5a0fdb0d0c0aef 744154 nagios3-cgi_3.5.1-1ubuntu1.1_armhf.deb 36ab4c6a4629cebfd94e5b13fefbe20a4217f794c4a639341a6a899fad17075c 1534 nagios3_3.5.1-1ubuntu1.1_armhf.deb 835d90ec8017282752f0d387c2a39c8129570a380578262876fc14c81a2ad4e1 213544 nagios3-core_3.5.1-1ubuntu1.1_armhf.deb 401b72a00be073e33d1e559f1901f6e00fa53699cdcac6d981d05b96904f4f7c 1590760 nagios3-dbg_3.5.1-1ubuntu1.1_armhf.deb ed362746fccaf7d15bd54afa458c7d58986ad92a82028f2e88650186bc9a2dfe 1286 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb fb9a80c861931f9faccc33da65aac862f7c12b4acbc22c12e63cf42c6a59830f 1306 nagios3-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb b1a20b2f1a4dee63dee13e6ef19e52be327d31236149f45d05bfe95e9366a76f 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb 712d2d48cabf8070b0e8ad5bafc6fd1ff8dc1ea917c8250e9c16d4c1312d3a71 11084 nagios3_3.5.1-1ubuntu1.1_armhf_translations.tar.gz Files: a95e983dc15aa8d8f320167292e321cf 744154 net optional nagios3-cgi_3.5.1-1ubuntu1.1_armhf.deb 8aa46f79fd791a2f75bb509889209bc0 1534 net optional nagios3_3.5.1-1ubuntu1.1_armhf.deb 3a8455001c88a27b09e3c98e0605ca7c 213544 net optional nagios3-core_3.5.1-1ubuntu1.1_armhf.deb 2680d86c2c58e245220898c1de95ccd8 1590760 debug extra nagios3-dbg_3.5.1-1ubuntu1.1_armhf.deb 1b08f8495869b22e5d0e08883d106dbd 1286 net extra nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb 92956ada06a86d7213a8c1601175303c 1306 net extra nagios3-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb cb2e1c232300c4b3d4a72546599f6579 1306 net extra nagios3-core-dbgsym_3.5.1-1ubuntu1.1_armhf.ddeb 808dd545c73e6a9f5f69a85f86697174 11084 raw-translations - nagios3_3.5.1-1ubuntu1.1_armhf_translations.tar.gz Original-Maintainer: Debian Nagios Maintainer Group