Bug 1411399

Summary:	nagios componentes outdated and vulnerable
Product:	[Fedora] Fedora EPEL	Reporter:	gratti
Component:	nagios	Assignee:	Keiran Smith <affix>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	affix, b.heden, jose.p.oliveira.oss, lemenkov, linux, ondrejj, shawn.starr, smooge, smooge, s, swilkerson
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	nagios-4.2.4-2.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-02-22 14:51:02 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description gratti 2017-01-09 15:48:49 UTC

The Nagios components in EPEL are outdated and vulnerable. Some of the vulnerabilities are critical. There are several vulnerabilities and possible exploits reported in the last months, for example:
https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html
https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html

New versions and/or patches of Nagios are available.

Comment 1 Stephen John Smoogen 2017-01-09 16:42:11 UTC

I am testing updated nagios packages in this copr

https://copr.fedorainfracloud.org/coprs/smooge/Nagios_Update/

These move around a couple of directories to match the newer layout and Fedora/RHEL rules for layout. Please let me know if they work for you or what things I need to fix so I can do so to get this into production.

Comment 2 Fedora Update System 2017-02-07 23:47:34 UTC

nagios-4.2.4-2.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0f3297a19b

Comment 3 Fedora Update System 2017-02-09 21:18:10 UTC

nagios-4.2.4-2.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-0f3297a19b

Comment 4 Fedora Update System 2017-02-22 14:51:02 UTC

nagios-4.2.4-2.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.