Format: 1.8 Date: Fri, 31 Mar 2017 15:28:59 -0400 Source: nagios3 Binary: nagios3-common nagios3-cgi nagios3 nagios3-core nagios3-doc nagios3-dbg Architecture: i386 i386_translations all Version: 3.5.1-1ubuntu1.1 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: nagios3 - host/service/network monitoring and management system nagios3-cgi - cgi files for nagios3 nagios3-common - support files for nagios3 nagios3-core - host/service/network monitoring and management system core files nagios3-dbg - debugging symbols and debug stuff for nagios3 nagios3-doc - documentation for nagios3 Changes: nagios3 (3.5.1-1ubuntu1.1) trusty-security; urgency=medium . * SECURITY UPDATE: off-by-one errors leading to DoS or info disclosure - debian/patches/CVE-2013-7xxx.patch: fix off-by-ones and check length in cgi/avail.c, cgi/cmd.c, cgi/config.c, cgi/extinfo.c, cgi/histogram.c, cgi/notifications.c, cgi/outages.c, cgi/status.c, cgi/statusmap.c, cgi/statuswml.c, cgi/summary.c, cgi/trends.c, contrib/daemonchk.c. - CVE-2013-7108 - CVE-2013-7205 * SECURITY UPDATE: DoS via long message to cmd.cgi - debian/patches/CVE-2014-1878.patch: check len in cgi/cmd.c. - CVE-2014-1878 * SECURITY UPDATE: symlink attack on log file - debian/patches/CVE-2016-9566.patch: safely handle log file in base/logging.c. - CVE-2016-9566 Checksums-Sha1: 64506c0ed12f00fbe856e3faab0c3d95bc3a3e5b 784892 nagios3-cgi_3.5.1-1ubuntu1.1_i386.deb b5e2d2caac15064aa66cf99112b50a409c368a52 1534 nagios3_3.5.1-1ubuntu1.1_i386.deb d7c6d7d865184a18fd63160aaa17f15ecc48ecb3 221344 nagios3-core_3.5.1-1ubuntu1.1_i386.deb 941a880a067d7b22a7d0cc182fdae66c905ce062 1494122 nagios3-dbg_3.5.1-1ubuntu1.1_i386.deb 95b2aaf2014dfcb809a9602e89441dfc33f4b98c 1288 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb d78812834f601686bb7589ffe8200ac0d5590290 1306 nagios3-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 1e404737e6192a2045fa55183fd346082d036f7c 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 8e5c6ac9539e43dbc65e9221bc7474767fcb38f4 11022 nagios3_3.5.1-1ubuntu1.1_i386_translations.tar.gz 7145af7dce9616174137ce7a9a15abe9dc18e601 53942 nagios3-common_3.5.1-1ubuntu1.1_all.deb ad53ee930ac81a113ae1f38ae658203fc4f4edba 5044 nagios3-doc_3.5.1-1ubuntu1.1_all.deb Checksums-Sha256: 4c60b552fa00a7e5c5d8b5fdcfe37185a31efb5c921e8b04c28b58dd8ed5f811 784892 nagios3-cgi_3.5.1-1ubuntu1.1_i386.deb 900d392a9a729b0c4b3206b4cc8c207df7a99275981122e52ac44ceafe362de3 1534 nagios3_3.5.1-1ubuntu1.1_i386.deb ab9f368f4953607dda3badf30c448eaa7745f9a9b4838272dd99e7b409e00de8 221344 nagios3-core_3.5.1-1ubuntu1.1_i386.deb f2e673694146665aed6d0ed567c8e4f6cb4151556b9ff9b5310e26baeee7a56a 1494122 nagios3-dbg_3.5.1-1ubuntu1.1_i386.deb 9a277b02406570dd9741e1d36a88cd526e062884340a6c39d287c919d4693b99 1288 nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 75131334f06857605fd419b02209027e60ea75f3a111e7a91a533165e7495aa9 1306 nagios3-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb ad60939ef29f7d1ce3d7237c2ce0209507985dd00989ea61e79fa3ce81b3507f 1306 nagios3-core-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 80f541dbcab8fbe838a69cdd7e7577f3bb1bb1f1038d80edbf8000e844cc9290 11022 nagios3_3.5.1-1ubuntu1.1_i386_translations.tar.gz acfd36a9cd808c37b21374dd29f769a83732281d3fbbc484023cdb307469bc93 53942 nagios3-common_3.5.1-1ubuntu1.1_all.deb 0c670cc1d16797c821daa8ce7af3817f544f08e86a0c89604aee4f83aa0e4791 5044 nagios3-doc_3.5.1-1ubuntu1.1_all.deb Files: 93e83703011690c428fb2ab7b21afab4 784892 net optional nagios3-cgi_3.5.1-1ubuntu1.1_i386.deb beecb70487d7664dca8b9e28b00d11c9 1534 net optional nagios3_3.5.1-1ubuntu1.1_i386.deb a4d22686007af5176f9c92fbad277652 221344 net optional nagios3-core_3.5.1-1ubuntu1.1_i386.deb 3b1e155a6ee4e448e9d1ec320b08635c 1494122 debug extra nagios3-dbg_3.5.1-1ubuntu1.1_i386.deb 921c7cb311f7310648d885e1a7498e01 1288 net extra nagios3-cgi-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 9e6ec4f518216e23f11fabda5ace315a 1306 net extra nagios3-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb db58dc53be58ee1e3cc4ca1a7137dcb1 1306 net extra nagios3-core-dbgsym_3.5.1-1ubuntu1.1_i386.ddeb 1538a6da763211315c9f5d23e1fc26d4 11022 raw-translations - nagios3_3.5.1-1ubuntu1.1_i386_translations.tar.gz 7b698be4a6fad04f03a288fa5f0ca2f0 53942 net optional nagios3-common_3.5.1-1ubuntu1.1_all.deb f6683b60c24c118340a0f903a7b2de7b 5044 doc optional nagios3-doc_3.5.1-1ubuntu1.1_all.deb Original-Maintainer: Debian Nagios Maintainer Group