Bug 21727 - nagios new security issue CVE-2017-14312
Summary: nagios new security issue CVE-2017-14312
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Guillaume Rousse
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-17 19:18 CEST by David Walser
Modified: 2017-09-18 20:54 CEST (History)
0 users

See Also:
Source RPM: nagios-4.3.1-2.mga6.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2017-09-17 19:18:16 CEST 
A security issue in Nagios has been announced:
http://openwall.com/lists/oss-security/2017/09/17/7

It looks like in our package, the executables and config files are owned by root, so we're probably not affected.  Referring this to our maintainer to confirm, just in case.
Comment 1 Guillaume Rousse 2017-09-18 20:54:16 CEST 
We're not affected, closing.

Status: NEW => RESOLVED
Resolution: (none) => INVALID
Note You need to log in before you can comment on or make changes to this bug.