Bug 21546 - nagios new security issue CVE-2017-12847
Summary: nagios new security issue CVE-2017-12847
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Guillaume Rousse
QA Contact: Sec team
URL:
Whiteboard: MGA6TOO, MGA5TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2017-08-17 03:19 CEST by David Walser
Modified: 2017-08-18 22:50 CEST (History)
0 users

See Also:
Source RPM: nagios-4.3.1-2.mga6.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2017-08-17 03:19:37 CEST 
A security issue in nagios has been announced today (August 16):
http://openwall.com/lists/oss-security/2017/08/16/7

If this affects us, Mageia 5 and Mageia 6 are also affected.

The description of the issue specifically mentions the SysV init script, while we use a systemd service file, so I'm not 100% sure we're affected.
David Walser 2017-08-17 03:19:51 CEST

Whiteboard: (none) => MGA6TOO, MGA5TOO

Comment 1 David Walser 2017-08-18 22:50:49 CEST 
I think we're not affected.

Status: NEW => RESOLVED
Resolution: (none) => INVALID
Note You need to log in before you can comment on or make changes to this bug.