Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: > A local user can trigger a heap buffer overflow in check_icmp by > supplying more than 65535 target hosts, which overflows an internal > counter. This happens before check_icmp drops its privileges, so the > corruption occurs while still running as root on setuid-root > installations. Fix is present in nagios-plugins pull request: https://github.com/nagios-plugins/nagios-plugins/pull/833 Please apply this fix. With this bug all Fedora nagios installations are vulnerable to this issue. check_icmp is setuid-root, so root exploit is possible. I don't think about CVE assigned to this issue. https://www.openwall.com/lists/oss-security/2026/07/01/5 https://www.openwall.com/lists/oss-security/2026/07/01/11
FEDORA-2026-c2fbd942bc (nagios-plugins-2.5-2.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-c2fbd942bc
FEDORA-2026-7ac5fb031f (nagios-plugins-2.5-2.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-7ac5fb031f
FEDORA-EPEL-2026-df80b78e8b (nagios-plugins-2.5-2.el10_4) has been submitted as an update to Fedora EPEL 10.4. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b
FEDORA-EPEL-2026-b3ba209e5d (nagios-plugins-2.5-2.el9) has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d
FEDORA-EPEL-2026-df80b78e8b has been pushed to the Fedora EPEL 10.4 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-df80b78e8b See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2026-b3ba209e5d has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b3ba209e5d See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-c2fbd942bc has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-c2fbd942bc` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-c2fbd942bc See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-7ac5fb031f has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-7ac5fb031f` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-7ac5fb031f See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2026-b3ba209e5d (nagios-plugins-2.5-2.el9) has been pushed to the Fedora EPEL 9 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-EPEL-2026-df80b78e8b (nagios-plugins-2.5-2.el10_4) has been pushed to the Fedora EPEL 10.4 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-c2fbd942bc (nagios-plugins-2.5-2.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-7ac5fb031f (nagios-plugins-2.5-2.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.